compare
Ory Hydra vs SuperTokens
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Ory Hydra | SuperTokens |
|---|---|---|
| Language | Go | Java |
| Licence | Apache-2.0 | Other |
| Stars | 18k | 15k |
| Latest | v26.2.0 | v12.2.0 |
| Last push | 2026-07-29 | 2026-10-06 |
| Release cadence | about 294 days between releases | about 6 days between releases |
| Active contributors | 8 commit authors on the default branch in the last 90 days | 8 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Auth0. Alternatives to Auth0 →
PartialOry HydraAn OAuth 2.0 and OpenID Connect server; login, consent and users stay in your own app.
Full replacementSuperTokensLogin flows, sessions and social login with prebuilt UI embedded in your app; MFA and multi-tenancy need a licence key.
Ory Hydra
- v26.2.02026-03-20v26.2.0
- v25.4.02025-11-07v25.4.0 brings first-class support for agentic authorization with the Device Authorization Grant (RFC 8628) and OAuth 2…
- v2.3.02025-01-17We’re thrilled to announce the release of Ory Hydra 2.3.0! This version comes packed with graceful token refresh, perfo…
- v2.2.02024-02-12!Ory Hydra 2.2.0
- v2.2.0-rc.32023-08-16Introduces logout compatibility with Ory Kratos.pre-release
SuperTokens
- v12.3.0-canary2026-09-09feat: in-memory storage parity for the activity-log/rollup contract by @supertokens-agent-runner[bot] inpre-release
- v12.2.02026-09-04fix: verify database schema at startup and fail loudly on missing tables/columns
- v12.1.12026-08-13fix: mirror dashboard-search arm rewrite and domain-prefix semantics in in-memory storage by @supertokens-agent-runner[…
- v12.1.02026-08-12test: stress-test the 1M-user suite in MIGRATED migration mode too by @supertokens-agent-runner[bot] in
- v12.0.102026-08-06fix: saml hardening
Ory Hydra
unsigned The latest release, v26.2.0, carries no signature GitHub could verify.
Loading the security report
SuperTokens
unsigned The latest release, v12.2.0, carries no signature GitHub could verify.
Loading the security report