Hexclave (formerly Stack Auth)
Capability scores
Methodology →- Authentication
- 4.5
- SSO & Federation
- 4.5
- Authorization
- 4.0
- Lifecycle & Provisioning
- 3.5
- MFA & Passwordless
- 4.0
- Governance & Audit
- 3.0
- Developer Experience
- 4.5
- Deployment Flexibility
- 5.0
- Pricing Transparency
- 5.0
- Support & Ecosystem
- 3.0
Scored 0–5 against a published rubric. Independent analysis, no vendor sponsorship.
Overview
Hexclave, formerly Stack Auth, is a young open-source authentication and user-management platform, launched in 2023 and positioned explicitly as a self-hostable alternative to managed providers like Clerk. Stack Auth has rebranded: stack-auth.com now redirects to hexclave.com, and the GitHub repository moved from stack-auth/stack-auth to hexclave/hexclave (checked 2026-11-05). Hexclave now describes itself as "the user infrastructure platform," with authentication alongside teams, payments, emails and analytics. It targets startups and product teams building on React and Next.js who want modern auth components without locking their user data into a proprietary cloud. It follows the open-core pattern: the core is open source and self-hostable, with a managed cloud tier for teams that prefer not to run it.
What it is good at
Developer experience for the React and Next.js stack is the strength. Hexclave ships prebuilt UI components, hooks, and a clean SDK that get sign-in, sessions, and account management working quickly. It includes B2B features such as organizations, teams, and role assignment that many lightweight auth libraries lack. The option to self-host means you can keep user data on your own infrastructure and avoid per-user pricing as you scale.
Where it falls short
It is new. The ecosystem, third-party integrations, and production references are still building, and there is little enterprise track record to point to. Governance, audit, and compliance tooling are light compared with established platforms. Coverage outside the React and Next.js world is thinner than framework-agnostic options like Better Auth. For high-assurance or heavily regulated deployments, a more mature platform is the safer call.
Pricing
Published (checked 2026-11-05 on the Hexclave pricing page). The managed cloud has a Free plan at $0 with 10,000 auth users, 1 dashboard admin and 1,000 emails a month; Team at $49 a month with 50,000 auth users and 4 admins; and Growth at $299 a month with unlimited auth users. Extra dashboard admins are $29 a month each on paid plans. Self-hosting is free: the client SDKs are MIT licensed and the server is AGPLv3, with commercial licenses offered for teams that cannot accept AGPL terms. Compare the self-host versus managed math with the TCO calculator.
Best for, and who should look elsewhere
A strong fit for React and Next.js teams who want an open-source Clerk alternative with B2B features and the freedom to self-host. Look elsewhere if you need a long enterprise track record, deep governance, or a managed-only service with vendor SLAs. Teams wanting a broader CIAM should also weigh Logto and Zitadel.
Bottom line
A promising, developer-friendly open-source auth platform for modern React and Next.js products willing to bet on a young but fast-moving project.
Developer experience score: 65/100 on the Identity Developer Experience Benchmark (checked 2026-11-05).
Related on Start with Identity
- VendorAuth.js (NextAuth.js)
strong
- VendorSupabase Auth
strong
- VendorAuthelia
niche
- Comparisonauthentik-vs-authelia
Authentik is a self-hosted identity provider with a paid edition. Authelia is an Apache-2.0 authentication gateway with no paid tier. They solve differently siz
- Comparisonkeycloak-vs-zitadel
Keycloak is the most widely deployed open-source identity provider, with the ecosystem and extension surface to match. Zitadel is newer, API-first, multi-tenant
- BlogAgentic AI Identity Is the Next Frontier (And Your IAM Stack Isn't Ready)
AI agents now act on behalf of users, call APIs, and chain tools together. They need identities, scopes, and audit trails, and almost no existing IAM stack was
By SWI Community Team · Last evaluated 2026-11-05
Independent, community-driven analysis. No vendor sponsorship. Compiled from public research and community input and verified on a best-effort basis, so details may be incomplete or out of date. Scores are opinions, not advice. Trademarks belong to their owners; mention does not imply affiliation or endorsement. See the full disclaimer, or send corrections to community@startwithidentity.com.