(Comparison)

Ory Network alternative: open-source Ory Kratos, run for you in France

Prices checked 15 Oct 2026. Where they are ahead, the tables say so.

Verdict

This comparison is an odd one: Nautilus's sign-in is Ory Kratos, and Ory Network is Ory's own hosted version of it. This page does not argue we beat Ory at Kratos. It compares two ways of getting a running Kratos, and says where Ory is plainly ahead.

Pick Ory Network if you want the people who write the engine to run it: it sells passkeys, a hosted account page, a permissions engine (Keto), an OAuth2 and OpenID provider (Hydra), SAML and SCIM on its Enterprise plan, a 99.99% SLA on Enterprise, and your choice of Europe, North America or Japan. If you will outgrow a headless API into the whole Ory stack, start where Ory is. We run one shared Kratos with a fixed user schema; Ory gives you your own project and environments.

Pick Nautilus if you want Kratos behind a flat price, with organizations and roles you do not need a $9,350-a-year plan for, rules that delete unused accounts, and webhooks, scheduled jobs and Telegram sign-in under the same account. You write the screens and call an HTTP API; we run the server, the database and the upgrades.

Looking for an Ory Kratos alternative?

If what you want is a different engine from Kratos, this page is not it: we run Kratos. For an engine that is not Kratos, see our Logto page (open source, with a configurable sign-in experience) or Auth0. If you want Kratos itself, without running it, that is what Ory Network and Nautilus each offer. Already on Kratos? See what the dashboard we put on top of it does, and what it leaves to you.

Feature by feature

Checked 2026-10-15. "Ahead" says who is ahead on that row.

Nautilus and Ory Network, feature by feature
RowNautilusOry NetworkAhead
Sign-in methodsPassword, a six-digit email code, ten social providers, Telegram through a separate key. No passkeys.Social sign-in, one-time codes, passkeys (Face ID, Touch ID, hardware keys), and a hosted account page ("Account Experience").Them
Hosted login UINone; headless.Account Experience, a no-code login interface.Them
Two-factorAuthenticator-app codes and backup codes. No hardware keys.Multi-factor and hardware MFA on all plans, including the free Developer plan.Them
Organizations and rolesOrganizations, custom roles with permissions, a permission check as one call. API only. All plans.B2B organizations on Growth (up to 3) and Enterprise (unlimited), not on Production. Fine-grained permissions through Ory Keto, billed per check.Different: Ory is deeper, we are cheaper to get to
Audit logDashboard and API; 7 / 30 / 90 days.The pricing page does not mention an audit log.Not compared
Automatic deletion of inactive accountsFour rules with a warning email before any deletion.None found in the pricing or docs we read; deletion is by ID through the API or CLI.Us
Signed JWTES256, 15 minutes, per-tenant key set, carries organizations and roles.Not checked.Not compared
WebhooksSix sign-in events through Svix; plus webhooks you send.Not checked in detail. The Enterprise plan lists live event streaming.Not compared
Scheduled jobsRecurring and one-off HTTP jobs.Not offered.Us
Telegram sign-inYes, through our own bridge.No built-in login. Kratos can be pointed at Telegram's OpenID Connect login, but an open upstream bug (ory/kratos issue 4572, opened 2026-06-12) makes Kratos fail to verify Telegram's tokens.Us
Hosting regionFrance (OVHcloud). One region."Europe, North America and Japan" regions; personal data stored in the EU or the US, chosen per project; on Google Cloud.Them
DPAWith Pro.Not checked.Not compared
Enterprise SSONone.B2B SSO (OpenID only) on Growth; one-click SAML, SCIM and directory sync on Enterprise only.Them
SLAA 99.9% target, no SLA.99.99% SLA on Enterprise; none listed on the other plans.Them
Schema and environmentsFixed schema: email, locale, your JSON field; one shared Kratos.Your own project and environments (Production: 1 production, 3 staging, 5 development; Growth: 2, 5, 20). The pricing page does not say what can be changed in the schema.Them
EngineOpen-source Kratos, unmodified, shared.Open-source Kratos; the Network is built on an open-source core.Even

Prices

Source: https://www.ory.com/pricing, checked 2026-10-15.

Ory prices by average daily active users (aDAU), not monthly. The page defines aDAU as the sum of unique users each day in a month divided by the days in the month. A product with 10,000 monthly users may have far fewer daily ones, and that ratio is yours to know, not ours to guess, so there is no 1,000 / 10,000 / 50,000 monthly-user row for Ory below. The page offers no calculator and no example at any size.

Ory Network plans, fees and per-user rates
PlanFeeIncluded credit a monthPer aDAU a monthOrganizations
Developerfreenonenoneno; 0 production environments, proof of concept
Production$770 a year (no monthly price shown)$21$0.14no
Growth$9,350 a year (no monthly price shown)$255$0.12yes, up to 3
EnterpriseContact salesunlimited

The page does not say whether the included credit is deducted from usage or whether usage is billed on top of the annual fee. Gross usage only, as arithmetic on the listed rates (not figures from the page):

Gross monthly usage at the listed per-user rates
If your average daily active users areProduction, gross usageGrowth, gross usage
1,000$140 a month$120 a month
10,000$1,400 a month$1,200 a month
50,000$7,000 a month$6,000 a month

Organizations need Growth: $9,350 a year is $779.17 a month before any usage. Permission checks are billed too, at $0.00009 each on Production and $0.000085 on Growth. Machine-to-machine tokens: $0.007 and $0.006 each. For a quote, Ory points you to sales.

Ours, for scale (https://vernesoft.com/pricing): €0 for 1,000 active users, €99 (≈ $110.83) for 10,000, €199 (≈ $222.78) for 50,000, organizations and roles on every plan. These are monthly users, not daily ones, so the two lists are not twins. If your daily-to-monthly ratio is low, Ory's usage line may come out lower than ours; if it is high, it will not.

Data residency and EU hosting

  • Ory Network (checked 2026-10-15, https://www.ory.com/network, https://www.ory.com/docs/security-compliance/personal-data-location, https://www.ory.com/pricing): the network page names three regions, Europe, North America and Japan, and says it is hosted on Google Cloud. The docs say that you choose where a project's personal data is stored when you create it, name EU and US locations, and call the choice permanent for that project. "Global" and "US Continental" locations are for enterprise customers, and so are multi-region deployments and moving personal data between regions. The pricing page lists region selection and EU data storage on Production, Growth and Enterprise, not on the free Developer plan. Ory's jurisdiction and DPA terms were not checked.
  • Nautilus: servers in France, at OVHcloud; one shared Kratos for all accounts; no choice of region. A DPA based on the Standard Contractual Clauses comes with Pro.
  • Verne Software is registered in Serbia; the servers are in France.
  • If you want your own regional deployment, or a region outside Europe, that is Ory's side of the table.

If you leave us

For this pair the question is unusual: the engine is the same.

  • Moving to Ory Network or to your own Kratos is the most direct exit there is. Same engine, same open licence (Apache 2.0, which Ory states for Kratos, Hydra, Keto and others on its network page).
  • What does not come with you: the layer we built on top. Organizations and roles, the signed-token service, the rules, the audit log, the dashboard; and the scheduler, which is our own code.
  • Users: readable through the API. For all of them with their password hashes, ask support from your account address and you get one file within 7 days, encrypted to your own key, with social links, metadata, organizations and roles as well. It is in the format our own import accepts and that maps onto Ory Kratos (how it works). A person on our side runs it; there is no button and no API call for it. Because the user schema is fixed (email, locale and your JSON field), an Ory project with a different schema means mapping fields.
  • Ory Network is the exit from us, and we say so.

The cost stack

Ory Network and Nautilus sell the same thing here: sign-in and users on Ory Kratos. The scenario needs organizations, so Ory means Growth. Prices as of 2026-10-15.

Monthly cost of sign-in and users, Ory against Nautilus
PieceSourceCost
Ory Growth feehttps://www.ory.com/pricing$9,350 a year, $779.17 a month
Ory Growth usage at $0.12 per aDAUhttps://www.ory.com/pricingdepends on your aDAU; the page does not say how the $255 credit applies
Ory, sign-in and users (the fee alone)$779.17 a month, plus usage
Nautilus Pro, sign-in and users (10,000 active users, organizations, roles, audit log)https://vernesoft.com/pricing€99 (≈ $110.83)

Ory's floor with organizations is $779.17 a month before any usage, against $110.83. That is a large gap. It rests on one thing, though: that you need organizations. If you do not, Ory Production is $770 a year, about $64 a month, and its usage line is the rest.

Not in the sum: webhooks you send to your own customers and scheduled jobs. Ory has no scheduler and no outbound-webhook product on the pages we read; Nautilus Pro includes both (1,000,000 webhook messages and 1,000 recurring jobs a month). Elsewhere they are services of their own: for example Svix Professional (DPA and SOC 2, 50,000 messages included) from $490 a month, and a scheduler such as cron-job.org, which is free, donation-funded, and does not state where it is hosted or whether it has a DPA. We leave them out of the sum because the comparison that decides is sign-in against sign-in.

Try it yourself

Already on Kratos? The sign-in documentation lists exactly what we add on top.

Sources and dates

Every competitor figure above comes from a page listed here, read on . Prices move: if one differs when you look, the date is the reason, and we would like to hear about it.

Sources for this page and the date each was checked
URLWhat was takenChecked
https://www.ory.com/pricingPlans, fees, credits, per-unit rates, aDAU definition, organizations by plan, SSO and SAML by plan, SLA, region features by plan2026-10-15
https://www.ory.com/networkFeatures (hosted account page, passkeys, MFA, organizations, Keto, Hydra), regions (Europe, North America, Japan), Apache 2.0 for Kratos and others, hosted on Google Cloud2026-10-15
https://www.ory.com/docs/security-compliance/personal-data-locationPersonal-data locations (EU, US), permanent per project, Global and US Continental for enterprise2026-10-15
https://www.ory.com/docs/kratos/self-serviceSocial sign-in, one-time code method, 2FA flow; the UI is your application2026-10-15
https://github.com/ory/kratos/issues/4572Kratos fails to verify Telegram OIDC tokens (ES256K key in the JWKS); open as of the date checked2026-10-15
https://www.svix.com/pricing/Svix Free and Professional2026-10-15
https://cron-job.org/en/Free, donation-funded2026-10-15
https://www.ecb.europa.eu/stats/policy_and_exchange_rates/euro_reference_exchange_rates/html/eurofxref-graph-usd.en.htmlEUR to USD 1.1195 (reference rate of 2026-10-14)2026-10-15
https://vernesoft.com/pricing and the sign-in documentationEverything said about Nautilus2026-10-15