Current state
As of Sep 6, 2026Auth0 offers a Free plan (up to 25,000 monthly active users) plus paid Essentials, Professional, and quote-only Enterprise tiers, priced by monthly active users with monthly or yearly billing options. Paid plans unlock higher auth/API limits, enterprise connections, SSO, SCIM, and advanced security/support features, with custom pricing for larger scale via Sales.
| Plan | Price | Includes |
|---|---|---|
| Free | $0 / month | Up to 25,000 monthly active users · 1 Custom Domain* · Unlimited Social Connections** · 5 Organizations · 1 Enterprise Connection (New) |
| Essentials | $35 / month | Up to 500 monthly active users · Pro Multi-Factor Authentication · 10 Organizations · Stream Auth0 Audit Logs to Datadog, Splunk, AWS, Azure, etc. · Standard Support |
| Professional | $240 / month | Up to 500 monthly active users · Enterprise Multi-Factor Authentication · Custom Token Exchange · Enhanced Attack Protection · M2M Tokens (Add-on) |
| Enterprise | — | Custom User & SSO Tiers · 99.99% SLA · Enterprise Rate Limits · Advanced Security Features (Add-on) · Private Deployment (Add-on) |
Free tier Free plan: $0/month, up to 25,000 monthly active users, no credit card needed to sign up; 22-day trial period before Free plan auto-activates.
Changes
This is the Competitor pricing pack running on a real vendor.
Current state
As of Aug 18, 2026Auth0's changelog shows active development across identity/AI-agent features in August 2026, including GA releases (Flexible Password Policy, Google Workspace Directory Sync, Curated Blocklists) and several Early Access/Beta launches (Custom Rate Limits, Session Delegation via Custom Token Exchange, Token Vault Privileged Worker, Agents as Principal, Enterprise Connect, Global Search in Cmd+K). Older 2016 entries include deprecations of the Android SDK WebView, legacy password reset flow, and certain APIv2 device-credential scopes.
Deprecations
- No date
current_user_device_credentials scopes in the /api/v2/device-credentials endpoint (POST and DELETE)
→ Basic authentication with username and password from a database connection
- No date
Auth0.Android SDK usage of WebView for authentication
→ Browser-based web authentication
- No date
Old password reset flow requiring users to enter new password then confirm via email
→ New flow where users enter username/email and receive reset instructions via email
Latest entries
- Custom rate limits available in early accessaddition
- Flexible password policy is now generally availablechange
- Custom prompts now capture the same fields on social and enterprise connectionschange
- Custom token exchange - session delegation is now available in open early accessaddition
- Google workspace directory sync for groups is now in general availabilityaddition
- Organizations search expands with advanced filteringchange
- Global search in cmd+k is now in betachange
- Token vault privileged worker is now early accessaddition
- Curated blocklists in tenant access control lists is now gaaddition
- Agents as principal now in early accessaddition
- Enterprise connect - betaaddition
Changes
This is the Product and API pack running on a real vendor.
Watch Auth0 — or anything else — your way.
Your own prompt, cadence and channels. One alert with the before/after proof when your sentence comes true.