Good ideas deserve room to grow.
Start free, with every released self-service feature. Pay for more capacity as your application grows. Compare the plans and estimate a month of usage before choosing.
Before you launch, work through the production checklist.
Plans
| Monthly capacity | Free | Standard | Standard overage |
|---|---|---|---|
| Base price | $0.00 | $5.00 | — |
| Monthly retained users | 500 | 5,000 | $3.00 per 1,000 |
| Hosted permission checks | 25,000 | 250,000 | Not billed yet ($10.00 per 1,000,000 if billing starts) |
| Emails sent by Udibo | 1,000 | 10,000 | $1.00 per 1,000, only if you raise the email limit |
Free has fixed allowances and no paid overages: email through Udibo stops at 1,000 a month, and retained users above 500 raise an alert but are never cut off. Standard adds capacity and monthly billing, with no annual commitment. Udibo bills only retained users and email above Standard's included amounts. Hosted permission checks are not billed yet: the table shows their rate as the one that would apply if billing for them starts. Both plans include the same released self-service features.
Explore Free usage · Explore Standard usage
Start with the whole product.
| Capability | Included on both plans |
|---|---|
| Multi-factor authentication | Authenticator apps and recovery codes |
| Sign-in methods | Passwords, social accounts, email codes, and magic links |
| Roles and permissions | Grants across a tenant, an organization, or a resource |
| Organizations and members | No separate organization or member fee |
| Your brand | Your name, logo, accent color, and support link |
| Audit history | At least 90 days, exportable as CSV or NDJSON |
| Identity provider connections | No per-connection fee for OpenID Connect providers |
| Seats and administrators | No administrator or organization seat fees |
| Your own email sender | Your Resend account; counted against its own limit, never billed by Udibo |
| Data export and webhooks | Self-service exports and signed event deliveries |
Technical and abuse limits still apply. SAML federation, SCIM provisioning, and custom domains for hosted pages are not available yet; a pricing plan does not add them.
Compare Udibo with other identity providers
Estimate your month
Choose a plan and enter your expected retained users, hosted permission checks, and emails delivered by Udibo. The estimate counts only what Udibo bills today: retained users and email, not hosted permission checks. The calculator compares the estimate with your budget; it does not set an account spending limit. Read how spending limits work before relying on a budget to control live usage.
Questions before you choose
What counts as a retained user?
A person who returns more than 24 hours after creating their account counts once in that UTC calendar month. Moving between organizations in the same tenant does not count them again. Separate tenants are counted separately.
Why count permission checks separately?
A small business team can make many access decisions, while a consumer app can have many people making few decisions, so we publish allowances and a rate for hosted permission checks separately. Hosted permission checks are not billed yet: the rate is what would apply if billing for them starts, and no estimate or bill includes them today. Reading claims from a token does not call the hosted check endpoint.
Can I send email from my own domain?
Yes. Every plan lets you connect your own Resend account and sending domain. The email allowance and rate apply only to messages Udibo delivers for you. See sending email from your domain.
What about storage and bandwidth?
Plans include ordinary identity storage and bandwidth.
How do spending limits work?
Each tenant's Billing page shows this month's usage. You can set a monthly and a daily hard limit for each email sender, with alert thresholds and recipients. Each tenant's email hard limit defaults to its plan's included emails, so email through Udibo stops there until you raise it, which only Standard allows; Udibo bills overage emails only if you raise that limit. When a sender reaches either limit, further messages through that sender stop, including sign-in codes, magic links, and password resets. Sending resumes when the exhausted effective limits increase or their UTC periods reset. Retained users trigger alerts but are never capped. An overall monthly budget across resources is still being designed. See usage and email limits for how limits, alerts, and alert recipients work today. Use the launch and response guide to put those controls into practice.
Where should I start?
Connect your first application for managed identity, or try the package locally without a hosted account. Compare the options if you are still choosing, and review the production checklist before launching.