Auth0
Auth0 builds identity and login APIs for developers, owned by Okta.
Auth0 runs as a $1B+ ARR unit inside profitable Okta, protected by compliance and lock-in, while Clerk, WorkOS, and cloud giants press on price and developer experience.
Auth0 is a login and identity service that lets companies manage who gets into their apps and systems. It is hard to replace for large companies because switching means redoing security rules, compliance paperwork, and years of built-in connections, but smaller companies are choosing simpler rivals like Clerk and WorkOS instead because they are cheaper and easier for developers to use. The one thing that could shift everything is whether Auth0's new AI agent identity tools (launched late 2025 and early 2026) bring in real new customers and revenue, and whether Microsoft, Google, or Amazon decide to aggressively compete head-to-head rather than letting Auth0 keep enterprise customers today.
Auth0 headcount count in future company filings or employee-data trackers. Further decline below ~350 would signal deeper absorption into Okta's generic roadmap.
Disclosed new CVEs or breach notices tied to Auth0 in 2026-2027. A rising unpatched-exploit count would show security posture weakening versus the 2025 rate.
- Okta FY26 revenue: $2.919B, up 12% YoY
- Auth0 headcount fell from ~901 to ~357
- Auth0 for AI Agents: GA Nov 2025, MCP support added
- Recurring auth-bypass CVEs (5 in 2025, 3 by May 2026) could enable a breach or customer churn.
- Headcount decline from ~901 (2021) to ~357-359 (June 2026) signals absorption into generic Okta roadmap.
- Clerk and WorkOS eroding developer-experience and pricing advantage in greenfield SaaS segment.
- Auth0 for AI Agents revenue impact remains undisclosed as of May 2026, risking marketing-stage-only status.
- Okta parent earnings miss could pressure sentiment and resourcing for the Auth0 unit.
| Rival | Direction | Evidence |
|---|---|---|
| Clerk | gaining on | Forced Auth0 to add free B2B SSO/SCIM in Feb 2026 to stay competitive on developer experience |
| WorkOS | gaining on | B2B SSO/SCIM specialist with generous free tier up to 1M MAU as of 2026 |
| Microsoft Entra ID / Entra External ID | contesting | Watch-item incumbent; not yet taking decisive enterprise share as of 2026 |
| Google Cloud Identity Platform / Firebase Auth | contesting | Google-native alternative competing for greenfield developer mindshare in 2026 |
- Is Auth0 profitable in 2026?
- Auth0 itself does not report standalone profit, but its parent Okta is profitable and growing: Okta posted FY26 (ended Jan 31, 2026) revenue of $2.919 billion, up 12% YoY, with FY27 guidance of $3.17 to 3.19 billion, as reported March 4, 2026.
- Could AI replace Auth0?
- Basic login and OAuth boilerplate is increasingly generated by AI coding assistants and rival quick-start SDKs like Clerk, but regulated identity work (SOC2, HIPAA, liability) stays protected. Auth0 is instead expanding into AI-agent identity, shipping MCP auth and 'Agent as Principal' features in May 2026.
- Who owns Auth0?
- Auth0 is a wholly owned subsidiary of publicly traded Okta, Inc. (Nasdaq: OKTA). Okta signed a definitive agreement to acquire Auth0 for about $6.5 billion on March 3, 2021, with the deal closing May 3, 2021 at a final fair value near $5.67 billion.
- Who is Auth0's biggest competitor?
- Auth0 faces pressure from Clerk and WorkOS, which win on developer experience and pricing (forcing Auth0's February 2026 free B2B SSO/SCIM tier), plus structural threats from Microsoft Entra ID, Google Cloud Identity Platform, and AWS Cognito entering CIAM.
- Is Auth0 shrinking or growing?
- Signals are mixed: Auth0's president described managing a '$1B ARR business' as of April 2025 (Auth0's own claim), and product launches accelerated through 2025-2026, yet Auth0-specific headcount has declined roughly 60% since the 2021 acquisition, to about 357-359 by June 2026.
- Has Auth0 had security vulnerabilities recently?
- Yes. Tracked CVEs include the May 2026 Auth0.js authentication bypass (CVE-2026-42280) and an April 2026 Next.js SDK bypass (CVE-2026-40155). Pattern shows 5 CVEs disclosed in all of 2025 versus 3 disclosed by May 27, 2026.
- 2026-05-20Auth0 ships MCP auth, Agent as Principal, Token Vault, FGA Permissions Index for AI agents
- 2026-03-04Okta reports FY26 revenue of $2.919B, up 12% YoY; guides FY27 to $3.17-3.19B
- 2026-02-11Auth0 overhauls B2B plans, adds free Self-Service SSO and SCIM
- 2025-11-01Auth0 for AI Agents reaches General Availability
- 2025-04-08Auth0 launches Auth0 for AI Agents in Developer Preview
- 2024-09-30Auth0 raises free-tier MAU limit from 7,500 to 25,000
- 2021-05-03Okta closes acquisition of Auth0 at ~$5.67B fair value
- 2021-03-03Okta signs definitive agreement to acquire Auth0 for ~$6.5B
- 10 Things To Know About The Okta-Auth0 Deal And Stock Drop (2022-01-30)
- Introducing Auth0 for AI Agents (2025-04-08)
- Okta announces fourth quarter and fiscal year 2026 financial results (2026-03-04)
- Okta Signs Definitive Agreement to Acquire Auth0 (2021-03-03)
- Okta acquires Auth0, deal terms
- Auth0 - Headcount, Funding & Open Jobs (2026-06-10)
- Auth0 Review (2026): Pricing & Alternatives (2026-04-02)
- Auth0 gives developers the identity layer to securely ship agentic apps (2026-05-20)
- Free Self-Service SSO, SCIM, and more (2026-02-11)
- Auth0 Security Vulnerabilities in 2026
- The AI Agent Index 2025 Edition (2026-05-27)
- Best Embeddable UIs for Auth (2026-06-28)