OpenStatus
openstatus is adding the enterprise surface without giving up the self-host story
A side-by-side editorial comparison of WorkOS and SuperTokens — release velocity, themes, recent moves, and the top alternatives to consider.
| Feature | WorkOS | SuperTokens |
|---|---|---|
| Sector | Infra & APIs | Infra & APIs |
| Velocity score | 8.8 | 2.5 |
| Sparks · 30d | 2 | 0 |
| Top themes | identity, agent-native, mcp, edge-auth | authentication, account-linking, user-migration, saml |
| Last editorial update | 1d ago | 3h ago |
| Website | — | Visit → |
WorkOS is pushing auth outward — into the browser, the edge, and LLM clients
WorkOS ships near-daily, and the last month is unusually structural for a changelog with this cadence. Inside four weeks it added an API Gateway that unifies API-key and user auth at the edge, a Widgets API that serves WorkOS data straight to the browser over GraphQL, a Management MCP server covering hundreds of operations, and a one-click plugin for Claude and ChatGPT. AuthKit kept filling gaps alongside it: step-up auth, waitlists, and an Astro integration.
SuperTokens is building v12 in canary around one hard problem: migrating existing users
The visible releases are all v12.0.x canary builds — no stable v12 in the window. The work concentrates on account linking and a MIGRATED mode for core user directories, with supporting changes for SAML signature-wrapping protection, an activity_log table, and OpenTelemetry span annotations.
WorkOS ships near-daily, and the last month is unusually structural for a changelog with this cadence. Inside four weeks it added an API Gateway that unifies API-key and user auth at the edge, a Widgets API that serves WorkOS data straight to the browser over GraphQL, a Management MCP server covering hundreds of operations, and a one-click plugin for Claude and ChatGPT. AuthKit kept filling gaps alongside it: step-up auth, waitlists, and an Astro integration.
The pattern is WorkOS moving out of the backend SDK slot it started in. Three of the last month's releases put WorkOS on a surface it didn't previously own — the edge (API Gateway), the browser (Widgets API), and the agent client (MCP server, then the Claude and ChatGPT plugin). The AuthKit additions are table-stakes catch-up by comparison. Projects-per-environment and dashboard read-only roles point at larger customers with more people touching the dashboard.
Expect the Widgets API to grow prebuilt components so customers stop hand-building admin UI, and the MCP server to gain the scoped, read-only permissions that dashboard roles just introduced. More framework AuthKit ports are likely given the Astro one landed with no fanfare.
The visible releases are all v12.0.x canary builds — no stable v12 in the window. The work concentrates on account linking and a MIGRATED mode for core user directories, with supporting changes for SAML signature-wrapping protection, an activity_log table, and OpenTelemetry span annotations.
The migration-mode thread is the spine here. First new core user directories were allowed to be created as MIGRATED, then the transition into MIGRATED was blocked while inconsistent users exist, then account linking itself was reopened for exploration. That sequence reads as a team discovering that letting a running deployment switch identity models mid-flight is where the correctness risk lives, and adding guardrails before shipping it. Everything else in the window is scaffolding around that: audit-shaped activity logging, tracing annotations, and CI cleanup.
A stable v12 looks gated on the account-linking and migration-mode work settling; expect further canaries tightening the conditions under which a deployment is allowed to change modes before any general release.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either WorkOS or SuperTokens.
openstatus is adding the enterprise surface without giving up the self-host story
Casdoor ships a minor version per commit, and every one of them is login-flow repair
Authelia's 4.39 line is a long hardening run, not a feature line
Buildkite is rebuilding its CI surface for agents first and clearing the v3 baseline out of the way.
Semgrep is spending its releases on parser breadth and scan startup, not new product surface.
A marketing blog, not a changelog: Unleash is recasting feature flags as agent governance
See all WorkOS alternatives → · See all SuperTokens alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. WorkOS is currently shipping more aggressively (velocity 8.8 vs 2.5), with 2 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. WorkOS is currently shipping more aggressively (velocity 8.8 vs 2.5), with 2 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top WorkOS alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "WorkOS alternatives" section above for the current picks, or visit /alternatives/workos for the full list with editorial commentary on each.
Top SuperTokens alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "SuperTokens alternatives" section above for the current picks, or visit /alternatives/supertokens for the full list with editorial commentary on each.