Flat pricing. No per-user math.
Your IdP bills per user. Your backup tool should not.
Community
Free forever
The full binary, one tenant. The trial that never expires.
Deploy from GitHubBusiness
$2,500/yr
4 tenants, unlimited users, Users & Access backup and restore.
Buy BusinessMSP
$2,500/yr + $399/tenant/yr
Everything in Business plus client orgs, scoped logins, and renewals tracking. Add tenants any time from the Stripe portal.
| Community | Business | MSP | |
|---|---|---|---|
| Tenants | 1 | 4 | 4 included, +$399/yr each additional |
| Users | 1 admin | Unlimited | Unlimited + client org logins |
| Config backup, drift, restore | Yes | Yes | Yes |
| Users & Access backup & restore | - | Yes | Yes |
| Client orgs + scoped roles | - | - | Yes |
Keys verify offline and never phone home. Renewal keys extend from your previous
expiry, so renewing early never costs you time. Add MSP tenants any time from the
Stripe portal - a replacement key arrives by email within a minute.
Existing customers: add tenants or manage your subscription here.
The per-user racket, in numbers
Hosted IdP backup services typically charge per user, per month. Your user count has nothing to do with what backup costs to run - but it has everything to do with their invoice. Example at a conservative $2 per user per month:
| Your organization | The other guys (per-user, hosted) | IdPVault Business | You keep |
|---|---|---|---|
| 500 users, 2 tenants | $12,000/yr | $2,500/yr | $9,500 |
| 2,500 users, 3 tenants | $60,000/yr | $2,500/yr | $57,500 |
| 10,000 users, 4 tenants | $240,000/yr | $2,500/yr | $237,500 |
Users are free here.
IdPVault never counts your end users. 50 or 50,000, the price is the same flat number, and it is published right on this page.
Your data never leaves.
Hosted services hold a copy of your entire identity configuration on their cloud. IdPVault runs on your hardware, encrypts at rest, and sends nothing anywhere.
MSPs: do the math twice.
Per-user pricing across ten clients compounds fast. IdPVault MSP is a flat base plus a flat per-tenant add-on - what you charge your clients is your business, not your vendor's.
Questions people actually ask
Is this a full disaster-recovery backup?
It is configuration backup. IdPs redact secrets in their exports - we back up what the API returns; nobody can back up what it will not return. For self-hosted Authentik, IdPVault can additionally capture a pg_dump for true DR. The README spells out exactly where the line is.
What happens when a license expires?
A 3-day grace window, then a non-destructive downgrade. Nothing is deleted, your oldest tenant keeps working, and everything resumes the moment a key is installed.
Do you see my data?
No. There is no telemetry, no phone-home, no account. Licenses are Ed25519-signed files verified locally on your instance.
Can I try Business features first?
The Community tier is the trial - it is the same binary. Buy a key when you need more tenants or Users & Access; it activates instantly, no reinstall.