SaaS Ranking

Alternatives to FusionAuth

Other Password and identity vendors we measure, sorted by how much they publish that FusionAuth does not. This is a comparison of disclosure, not of features or fitness.

12 shown of 24 that differ from FusionAuth on at least one criterion we measured for both. Public transparency score, not a product or security rating.

FusionAuth has 6 gaps in what we could measure: Data processing agreement, Subprocessor list, Data location stated, Uptime SLA with a figure, No third-party tracking before consent, Notice before subprocessors change. The column “publishes and FusionAuth does not” is the one that closes them.

VendorScorePublishes, and FusionAuth does notFusionAuth publishes, and they do not
Keeperkeepersecurity.com 85/100 4 Data processing agreement, Subprocessor list, Data location stated, +1 1 Status page with history Compare
Ping Identitypingidentity.com 74/100 3 Subprocessor list, Data location stated, Notice before subprocessors change nothing Compare
WorkOSworkos.com 60/100 3 Data processing agreement, Data location stated, Uptime SLA with a figure 2 HTTPS enforced with HSTS, security.txt (RFC 9116) Compare
1Password1password.com 70/100 2 Data processing agreement, Data location stated nothing Compare
Clerkclerk.com 70/100 2 Data processing agreement, Data location stated nothing Compare
Oktaokta.com 61/100 2 Data processing agreement, Data location stated 1 Certifications named Compare
Oryory.com 43/100 2 Data location stated, Uptime SLA with a figure 2 Status page with history, Named privacy contact Compare
Descopedescope.com 39/100 2 Subprocessor list, Uptime SLA with a figure 3 Status page with history, Certifications named, security.txt (RFC 9116) Compare
Duo Securityduo.com 48/100 1 Data location stated 1 Named privacy contact Compare
Stytchstytch.com 45/100 1 Data location stated 2 Certifications named, security.txt (RFC 9116) Compare
Passboltpassbolt.com 43/100 1 Data location stated 1 Status page with history Compare
Bitwardenbitwarden.com 40/100 1 Data location stated 2 Status page with history, security.txt (RFC 9116) Compare

Only criteria we could measure for both are counted. Where we could measure one and not the other, the row is silent: that would be a statement about our measurement, not about either vendor. Every single result with its source is on the two profiles.