news.ycombinator.com
I'm not a huge fan of all the VC stuff, but Clerk gets kind of a bad rap ...
Excerpt
WorkOS always touts their 1,000,000 free users for Authkit...but you need to pay $100 for a custom domain. You're going to be paying for some of the features well before you get to 1,000,000 users. ... AuthKit never has any WorkOS branding. Clerk puts "Powered by Clerk" on your login page unless you pay. This feels gross. Imagine if Heroku/Vercel were injecting ads into your app?! AuthKit has free MFA. I believe everyone should get secure auth. Clerk charges to enable MFA. They also charge for passkeys and features like impersonation. Why? Custom domains cost us $ to run (we pay Cloudflare) so we charge for this. It's also designed for commercial apps. The authkit.app is great for any hobby app. ... Also, the SSO connectors being $125 per month per connection, rules out my target market. That is a lot in my market and it doesn't ease off as I grow, it's a fixed base cost. As I grow to 20-30 customers I'd be better off hiring a developer to implement the same features. ... There's no miracles here, just complex engineering and solving a thousand edge cases. If you decide to use open source, make sure you quickly update dependencies so you're always running latest. Ruby-SAML had a major vulnerability disclosed last month and thousands of apps were affected: https://workos.com/blog/ruby-saml-cve-2024-45409 Splitting hairs, but the authkit.app domain basically is an ad no? Yeah, I agree on the MFA and Passkeys. Impersonation is a toss up for me, I understand where they're coming from but also would be nice if it was in the free tier. Looking at the authkit docs, unless I'm using Next or Remix... I need to store the refresh token, manage refreshing the access token, verify the access token, manage revoking the session and deleting the cookies. Clerk does all that for me so that's a win in my book (I understand you folks are working on more SDKs, so that'll be cool). …
Related Pain Points
Enterprise SSO connections carry fixed monthly fees that don't scale with usage
7Enterprise SSO connectors cost $125/month per connection as a fixed base fee, making them unaffordable for small SaaS products with 20-30 customers even as the company grows, requiring evaluation of building custom authentication instead.
Clerk charges for essential security features (MFA, passkeys, impersonation)
6Clerk requires paid tiers to enable multi-factor authentication, passkeys, and impersonation features that competitors offer free or include by default, forcing developers to pay for baseline security functionality.
Open source authentication libraries face maintenance burden and vulnerability risk
6Open source authentication solutions like Ruby-SAML require continuous dependency updates to stay secure, and vulnerability disclosures can affect thousands of apps simultaneously, creating operational overhead for teams.
Clerk adds mandatory branding to login pages unless paid
5Clerk injects 'Powered by Clerk' branding on login pages unless users pay for removal, functioning as forced advertising within the application—similar to injecting ads into an app like Heroku or Vercel would.
Lack of multi-language SDK support
5Clerk SDKs are primarily available for SPA frameworks, with limited or unclear support for backend languages like Python and Django, as well as limited integration with platforms like Slack.