We wrote this page, so read it that way. Auth0 costs less than us for a lot of companies, and the table below shows where. Their free plan covers up to 25,000 monthly active users. Ours counts no users at all: there is no per-user tier and no usage meter. Every Auth0 figure comes from their public pricing page, read 2026-09-05, at the user band beside it. Every Signet figure sits on our pricing page today.

What each one costs

One piece of arithmetic. Their B2B Essentials is $150 a month at 500 monthly active users and $300 at 1,000. Our Team plan is $299 at both, because nothing in our engine counts active users. Read their slider at your number.

Signing a person in

Auth0 hosts the login screen: Universal Login runs on their authorization server, you redirect people to it, and you style it from their Dashboard (auth0.com/docs/authenticate/login/auth0-universal-login, read 2026-09-05). Passkeys are included on every plan.

Signet ships no sign-in interface. Your side of the integration is a base URL: point the stock better-auth client at your instance and the calls you have already written keep working. Email and password, passkeys, magic links, codes, two-factor and social sign-in are all on the free Hobby rung.

If what you are buying is a login screen you do not have to build, buy Auth0. That is the single biggest reason not to choose us.

Enterprise SSO

Auth0 lists nine enterprise identity providers out of the box, among them Active Directory and LDAP, ADFS, Okta and PingFederate (auth0.com/docs/authenticate/identity-providers/enterprise-identity-providers, read 2026-09-05). Their free plan includes one connection, B2B Essentials three, and more are an add-on.

Signet includes unlimited enterprise SSO connections on Team and Business. Adding your prospect's identity provider is a configuration change, not a purchase order. Our evidence is narrower than that sentence sounds, and the product page says so: the OIDC transport has been driven against a live Microsoft Entra tenant, and SAML completes full round trips against a conformance identity provider but has no commercial-IdP drive yet. Enterprise SSO is not on Hobby. It starts on Team.

Agents and machine callers

Auth0 supports the OAuth 2.0 client credentials flow for machine-to-machine applications (auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow, read 2026-09-05). Their plan comparison lists 1,000 machine-to-machine authentications a month on Free and Essentials and 5,000 on Professional, with an add-on above that. They also sell a separate product that gives an AI agent its own identity and connects it to APIs and MCP servers (auth0.com/ai, read 2026-09-05).

Signet mints an agent token that lives five minutes to an hour on one config key, names up to eight APIs it may be presented to, carries only the scopes the signed-in person approved, and reads dead at every door the moment you revoke it. There is no per-token charge, because no meter exists in the engine. Hobby carries a few short-lived agent tokens to try the story. Machine tokens and always-on agents start on Team.

Leaving

Auth0 exports user profiles from the Dashboard or the Management API, in NDJSON or CSV, with the fields you pick; CSV is limited to 30 (auth0.com/docs/manage-users/user-migration/bulk-user-exports, read 2026-09-05).

Password hashes and multi-factor secrets are a separate route. Auth0's documentation describes it: a support case, a 4096-bit PGP key you generate, an eligibility review that not all requests pass, confirmation from a second tenant administrator, and a signed acknowledgment form from a CISO, CSO or vice president (auth0.com/docs/manage-users/user-migration/export-password-hashes-and-mfa-secrets, read 2026-09-05).

On Signet, every user, session and secret lives in your own PostgreSQL. Leaving is pg_dump, pg_restore, boot. On your own hardware you run it yourself and leaving needs nobody. On the hosted service we operate the database, so you ask and we hand you the dump.

Moving your users across

We ship no Auth0 import format, so you map the columns yourself. Put your export into a CSV with email, password_hash and email_verified; external_id, name, image, created_at and updated_at are optional. Then validate it against your database without writing anything:

signet import --config /etc/signet/signet.toml \
  --format csv --dry-run auth0-users.csv

Every unknown column receives a skip receipt, and every failed or skipped row names its row number, cause and fix. password_hash accepts bcrypt, Argon2 PHC, PBKDF2 PHC, scrypt PHC or better-auth-native scrypt. external_id is preserved as the user's id, so a migrated person keeps the id they had.

Read the failures first. Rows with no password, meaning social-only and passwordless accounts, fail rather than creating a credential account we cannot honour. Phones, TOTP enrolments, OAuth grants and active sessions need separate migration review.

Where Auth0 is the better buy

• Fewer than about a thousand people sign in each month. Auth0's B2B Essentials is $150 a month at 500 users, and their free plan runs to 25,000. Ours starts at $299.
• You need a compliance report today. Auth0's plan comparison lists compliance certifications on every plan. Our security page lists three we do not hold: SOC 2, ISO 27001, and a third-party penetration test. On SOC 2 it says: Type I targeted 2027; the date is set when the first enterprise deal requires it, and readiness work is priced into that deal.
• You need enterprise SSO on a free plan, or more identity providers named out of the box. Auth0's free plan includes one enterprise connection, and their docs name nine providers. Hobby includes none, ours starts on Team at $299, and our SSO row is scoped to the transport we have driven.
• You need a published uptime number. Auth0 lists a 99.99% service level agreement on their Enterprise plan. Ours lives only inside a signed agreement, and our product page says our operating envelope has not been measured.

Start

Hobby is $0, one instance per company. Signing up provisions your instance automatically, in minutes, with nobody waiting on us.

---

Prices read on 2026-09-05

Review by 2026-11-04