About Frontier
Frontier is an all-in-one user management platform from Raystack that combines identity, access control and billing. It is intended for teams that want to manage authentication and authorization across several applications and services from one server they control. The repository describes it as an open-source alternative to Clerk and WorkOS.
Core capabilities include user, organization, project and group management, so multiple tenants can each have their own users, applications and services. Authentication supports email one-time passwords and social login for people, and API keys or RSA JWT credentials for machine users. Authorization uses role-based access control with policies that bind a user to an access level. Billing and subscription management, audit logs of user activity and access events, and reporting are also included.
Frontier is written in Go and licensed under Apache-2.0. It can be installed as a cross-platform binary from the releases page and runs on macOS, Windows, Linux and the BSDs. The project provides introduction, concepts and API reference documentation. Because it is self-hosted, you run and secure the server yourself.
Key features
- User, organization, project and group management
- Email OTP and social login
- API keys and RSA JWT for machine users
- Role-based access control with policies
- Billing and subscription management
- Audit logs and activity reporting
Good fit for
- βAdding multi-tenant login and access control to a SaaS product
- βCentralizing authorization across internal services
- Built with
- Go
- Tags
- authentication
- authorization
- rbac
- iam
- billing
- multi-tenant
- golang
- self-hosted
Frontier: questions and answers
- What is Frontier used for?
- Frontier is an open-source identity, access and billing management platform for organizations, positioned as an alternative to Clerk and WorkOS. It is a good fit for adding multi-tenant login and access control to a SaaS product, and centralizing authorization across internal services.
- Is Frontier open source?
- Yes. Frontier is open source under the Apache-2.0 licence. Its source code is on GitHub at raystack/frontier and is written mainly in Go.
- Is Frontier free?
- Yes. Frontier is open source, so the software itself is free to use.
- Can I self-host Frontier?
- Yes. Frontier can be self-hosted on your own server or infrastructure.
- What is Frontier an alternative to?
- Frontier is an open-source alternative to WorkOS, Frontegg, Clerk and PropelAuth. Other open-source alternatives to WorkOS include Logto, ZITADEL and Hexclave.
- Is Frontier actively maintained?
- Yes. The most recent commit to Frontier was on 1 October 2026, and the latest release is v0.118.0, published on 1 October 2026. The project has 344 stars on GitHub.
Open-source alternatives to Frontier
See all
Logto
Auth & Identity
π§βπ Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC
MPL-2.0vs Auth0β 15k
ZITADEL
Auth & Identity
ZITADEL - Identity infrastructure, simplified forΒ you.
AGPL-3.0vs Auth0β 15k
Hexclave
Auth & Identity
Deploy your frontend, backend, and database together with Hexclave Deploy. Automatic scali
OSSvs Auth0β 6.9k
Hanko
Auth & Identity
Open source, privacy-first, and built to scale. Hanko is the fastest way you integrate pas
OSSvs Auth0β 9k
SSOReady
Auth & Identity
Open-source dev tools for enterprise SSO. Ship SAML + SCIM support this afternoon.
MITvs WorkOSβ 1.5k
SuperTokens
Auth & Identity
Open Source User Authentication. Build fast, maintain control, with reasonable pricing.
OSSvs Auth0β 15k
SaaS alternatives to Frontier
See all
WorkOS
Auth & Identity
Enterprise SSO, directory sync and user management APIs for B2B SaaS
SaaS
Frontegg
Auth & Identity
Customer identity and self-service user management for SaaS products
SaaS
Clerk
Auth & Identity
Drop-in sign-in, user management and organization components for web apps
SaaS
PropelAuth
Auth & Identity
B2B authentication with organization management, SSO and hosted user pages
SaaS
Scalekit
Auth & Identity
Auth platform for AI agents and B2B apps with SSO, scoped tokens and connectors
SaaS
Descope
Auth & Identity
Drag-and-drop authentication flows with passwordless login and SSO
SaaS

