Compare
Qeetid vs. WorkOS
WorkOS sells enterprise-readiness APIs — SSO, SCIM, Audit Logs, Directory Sync — that you bolt onto your own user store. Qeetid is the user store too: identity, RBAC, MFA, sessions, admin UI, plus the same enterprise APIs in one binary.
Qeetid
- License
- MIT (open source)
- What it ships
- Full IdP + admin
- User store
- Yes (Postgres)
- Self-host
- First-class
- Pricing
- Linear per-MAU
WorkOS
- License
- Proprietary SaaS
- What it ships
- Enterprise APIs only
- User store
- Bring your own
- Self-host
- Not available
- Pricing
- Per-connection + per-event
WorkOS is half the system. Qeetid is the whole one.
If you already have a user database and just need SSO + SCIM, WorkOS is great. If you're building from scratch — or want to consolidate — Qeetid gives you the user store, MFA, sessions, admin UI, and the enterprise APIs in a single Postgres-backed service.
- Built-in user store with sessions, MFA, social, and passkeys.
- Multi-tenant by default — organisations are first-class.
- Open source and self-hostable, including air-gapped deployments.
| Capability | Qeetid | WorkOS |
|---|---|---|
| What you get | ||
User store (users, sessions, passwords) WorkOS doesn't store users — you bring your own DB. | ||
Built-in MFA (TOTP, SMS, email, recovery) | ||
Hosted admin dashboard | AdminPortal (per-customer) | |
RBAC permissions engine | ||
| Federation | ||
SAML 2.0 SSO | ||
OIDC SSO | ||
SCIM 2.0 | ||
Directory Sync (Google, Okta, Entra) | Roadmap v1.5 | |
Magic links | ||
| Auth methods | ||
Email + password | via AuthKit | |
Passkeys / WebAuthn | via AuthKit | |
Social login | via AuthKit | |
| Compliance | ||
Audit logs (search, export) | ||
Tamper-evident audit chain (SHA-256) Qeetid chains every audit row by hash; tampering breaks the chain. | ||
SOC 2 Type II | Roadmap v1.0 | |
Self-hosted = your compliance boundary | ||
| Deployment | ||
Self-host (single binary + Postgres) | ||
Bring-your-own database | ||
Air-gapped / on-prem | ||
| Pricing | ||
Free tier | 5,000 MAU | 1 million events / month |
B2B SSO included | Per-connection pricing | |
SCIM included | Per-connection pricing | |
Audit-log export | Paid tier | |
Comparison is based on publicly-available product information at the time of writing. We do our best to be accurate — if anything below is wrong, please let us know and we'll correct it.
One binary, one bill, one identity stack
Replace your user store, MFA library, session manager, and enterprise-SSO bolt-on with Qeetid. Or keep what you have and migrate gradually.