Where Permit.io's free tier stops
Permit.io Permit.io's free Community plan is broad, but it stops at several concrete limits that matter once you move past a small pilot. You get up to 1,000 monthly active users, 20 tenants, 25 roles, 50 resource types, 5 condition sets, 2,000 role assignments, 20 groups, 2,000 resource instances, and 3 environments. You do keep unlimited authorization queries, unlimited authorization microservices, and full UI and API access, so the ceiling is not feature access but scale on tenants, environments, and policy model size.
Switch table
| Permit.io | Logto | Cerbos Hub | PropelAuth | Scalekit | Builder.io | Filestack | |
|---|---|---|---|---|---|---|---|
| monthly active users | Up to 1,000 MAU | Up to 50,000 MAU | Not stated | Up to 10,000 MAU | Not stated | Not stated | Not stated |
| tenants or organizations | Up to 20 tenants | 1 tenant | Up to 5 custom tenants | Unlimited organizations | Unlimited connected accounts | Up to 5 users per space | Up to 5 team members |
| environments or workspaces | Up to 3 environments | Not stated | 1 workspace, 2 developers, 2 Playgrounds | Not stated | Not stated | Not stated | Not stated |
| policy builds or queries | Unlimited queries | Not stated | 5 policy builds per week | Not stated | 5,000 tool calls per month | Not stated | 20,000 uploads, 50,000 transformations |
| resource or role capacity | Up to 2,000 role assignments, 25 roles, 50 resource types, 2,000 resource instances | Not stated | Not stated | Not stated | Not stated | Up to 5 users per space | 50 GB storage, 1 GB max file size |
| log retention | 14 days of logs | 3 days of audit logs | 1 week of unified audit logs | 30-day audit log retention | Not stated | Not stated | Not stated |
| Card required | - | No | Yes | Yes | No | No | No |
| First paid tier | - | Pro, $24/mo | Development, from $25/month | Growth, $150/month | Growth, $99 / month | Pro, $24 per user/mo | Start, $69 billed monthly |
The alternatives
Logto
FTV 60 / 100Logto's free plan gives you up to 50,000 monthly active users, 50,000 tokens per month, 3 applications, 1 machine-to-machine app, 3 social connectors, 1 custom domain, 1 webhook, and audit logs with user management. It is free to start and no card is required. The main advantage over Permit.io is room for much larger user volume if your authorization setup is tied to a broader identity layer. It falls short on authorization depth, since Permit.io's free tier is built around many authorization models, unlimited queries, more policy tooling, and unlimited PDP instances. Switch here if your immediate bottleneck is user scale and you want auth plus identity in one hosted product.
- Beats Permit.io: 50,000 monthly active users
- Falls short: Less authorization-model depth and policy-management breadth
- Who should switch: Switch if your app needs a hosted identity layer with authorization attached, and your main constraint is user volume rather than policy complexity.
Cerbos Hub
FTV 54 / 100Cerbos Hub's free Proof of Concept tier includes 1 workspace, 2 developers, 2 Playgrounds, 2 simultaneous PDPs, up to 5 custom tenants, 5 policy builds per week, 1 week of unified audit logs, Synapse enrichment and integrations, in-browser or serverless authorization, managed CI/CD pipeline, and community support. It is designed for policy testing and controlled rollout. Compared with Permit.io, it offers a more policy-centric workflow for teams already using Cerbos-style authorization, but it has much tighter caps on teams, tenants, and audit retention. It is the better switch if you want to validate policy design in a smaller, more structured setup.
- Beats Permit.io: Managed policy workflow with Playgrounds and CI/CD for Cerbos policies
- Falls short: Much lower tenant, team, and audit-log limits
- Who should switch: Switch if you are already on Cerbos or want a managed policy control plane for a small authorization proof of concept.
PropelAuth
FTV 63 / 100PropelAuth's free plan includes 10,000 monthly active users, unlimited organizations, unlimited waitlist users, a custom domain, 2FA, RBAC, and customizable UIs. No card is required. Its free tier is attractive when tenant or organization count matters more than fine-grained policy modeling. It beats Permit.io on organization capacity because Permit.io's free tier is capped at 20 tenants, while PropelAuth leaves organizations unlimited. It falls short on authorization modeling breadth, because Permit.io is built for multiple authorization models, unlimited queries, and richer policy structure. Choose this when your app is B2B and you need a broad auth layer with plenty of room for organizations.
- Beats Permit.io: Unlimited organizations
- Falls short: Less support for multiple authorization models and policy tooling
- Who should switch: Switch if tenant count is your main blocker and you want auth features wrapped around B2B organization management.
Scalekit
FTV 76 / 100Scalekit's free plan includes 5,000 tool calls per month, unlimited connected accounts for user-authorized connections, access to 500+ pre-built connectors, bring-your-own-credentials support, and community plus email support. No card is required. It is the closest fit for AI-agent or integration-heavy workflows where connection breadth matters more than authorization policy modeling. It beats Permit.io on connected-account scale and connector coverage, while Permit.io is stronger for core authorization concepts like roles, tenants, conditions, and PDP-based policy enforcement. Switch if your free-tier pressure comes from tool orchestration or agent integrations rather than classic authorization.
- Beats Permit.io: 500+ pre-built connectors with unlimited connected accounts
- Falls short: Less suited to traditional authorization policy management
- Who should switch: Switch if you are building AI agents or integration-heavy workflows and need orchestration more than policy governance.
Builder.io
FTV 59 / 100Builder.io's free tier includes up to 5 users per space, GitHub, GitLab, and Bitbucket connections, public previews, an admin-only role, usage metrics, and onboarding plus deployed engineering support. No card is required. It is not a direct authorization platform, but it can be a better free choice when your real need is collaborative app-building and content workflows rather than policy enforcement. It beats Permit.io on editor-style collaboration and repository connections, while falling far short on authorization features like roles, tenants, policy queries, and PDP deployment. Use it only if your team is moving away from policy management toward UI and web app production.
- Beats Permit.io: Collaborative app-building workflows with repository integrations
- Falls short: Not an authorization policy platform
- Who should switch: Switch if your project is really about building and shipping web experiences, not managing authorization policies.
Filestack
FTV 61 / 100Filestack's free trial tier opens the Start plan at $69 per month and includes 75 GB bandwidth, 20,000 uploads, 50,000 transformations, 50 GB storage, up to 5 team members, a 1 GB max file size, one workflow, unlimited tasks and executions, webhooks, CDN delivery, and storage provider integrations. No card is required. It is useful when your bottleneck is file handling, media processing, or upload infrastructure. It beats Permit.io on storage, transfer, and content-processing quotas, but it is not meant for authorization policy management at all. Pick it if your application needs file workflows more than access-control logic.
- Beats Permit.io: High bandwidth, uploads, transformations, and storage for file workflows
- Falls short: Not an authorization product
- Who should switch: Switch if you need file upload and media processing infrastructure, not policy enforcement.
Two quick picks
PropelAuth
PropelAuth is the closest fit if you already need hosted authentication with organizations, RBAC, and a custom domain. The switch is smaller than with the other options because it overlaps most on B2B identity and tenant management, even though it is less policy-centric than Permit.io.
Logto
Logto gives the most free room on the main scale axis, with up to 50,000 monthly active users and a free plan that stays useful for much larger deployments before you need to pay.
Frequently asked questions
Which alternative is closest if I just need more user scale?
Logto is the closest answer if your first problem is user volume, because its free plan goes to 50,000 monthly active users while staying free and not requiring a card.
Which alternative is best for policy testing and validation?
Cerbos Hub is the most policy-focused option in this group, with Playgrounds, policy builds, simulated PDPs, and managed CI/CD in the free tier.
Which alternative is best for B2B organization management?
PropelAuth is the strongest match for B2B org workflows because its free plan includes unlimited organizations, RBAC, 2FA, and a custom domain.
Is there a direct free substitute for Permit.io's authorization model depth?
Not really. The closest options each trade off something: Cerbos Hub is more policy-workflow oriented, while Logto and PropelAuth are broader identity platforms with less authorization-model breadth.
Bottom line
For most builders who outgrow Permit.io's free tier, Logto is the best first alternative because it gives far more headroom on user scale while staying free and card-free. If your main pain is tenants, organizations, or B2B auth structure, PropelAuth is the closer fit. If your work is specifically about policy testing and rollout, Cerbos Hub is the more natural switch. The right choice depends on which limit you hit first, but Logto is the safest default when you just need more room.
Read the full listing for Permit.io. Scores use the FTV methodology at /ftv. Browse more alternatives on /alternatives, or head-to-head comparisons on /compare.