One platform.
Every customer, secure by default.
Multi-tenant RBAC with unlimited scopes at every tier. No per-tenant charges. No per-connection SSO fees. SSO + SCIM included. API key infrastructure. Built for platforms that scale.
Multi-tenancy that scales with your business
Unlimited scopes
Every customer workspace is an isolated scope — independent RBAC configuration, no cross-tenant data access. Unlimited scopes on every tier, including Free.
SSO + SCIM (Business+)
Enterprise SSO for your platform. SCIM provisioning so your customers' IdPs automatically manage user access. No per-connection fees — unlike WorkOS at $125/connection/month.
API key infrastructure
Issue scoped API keys for your customers' backend services. Rotate, revoke, and audit independently. Key prefixing (sk_...) for secret scanning compatibility.
Isolation by construction
Every access check requires a scope parameter. No path to cross-tenant data leakage — scope is a required input, never inferred from context.
Dedicated support (Enterprise)
Annual contracts, custom audit retention, and dedicated support for enterprise platforms with governance requirements.
Flat-rate, predictable billing
No per-request billing surprises. No per-tenant charges. No per-connection SSO fees. One flat monthly price per tier — costs stay predictable as you scale.
Platform pricing — no per-tenant surprises
Unlimited tenants on every tier. No per-tenant charges. No per-connection SSO fees. Flat-rate, predictable billing.
Contact us for pricing details →Everything your platform needs
Per-tenant role templates
Seed every new scope with your default role set (Admin, Member, Viewer). Enterprise customers can add custom roles scoped to their workspace — invisible to other tenants.
Cross-tenant support access
Your support team occasionally needs into a customer workspace. Time-boxed, audited, per-scope grants — logged with agent name, target scope, and reason. Never a standing god-mode key.
Tenant-aware API keys
Issue keys scoped to specific resources and actions. Rotate without breaking production. Audit every key usage. No shared "admin key that everyone has."
Webhook-driven tenant lifecycle
Subscribe to scope creation, role assignment, and permission change events. Automate tenant provisioning and deprovisioning in your own infrastructure.
Usage per scope
Track access check volume by scope. Identify your highest-usage tenants and optimize. Usage data feeds your own billing if you resell authorization to your customers.
Ready to scale your platform?
Unlimited tenants, flat-rate pricing, SSO + SCIM included. Start free — no credit card.