Comment by aweheel | Hacker News Reader

Comment by aweheel | Hacker News Reader

Parent Full thread

Congrats on the launch, building a product in this space is incredibly difficult. I took a look at the stack, here are a few observations:

- "ISO certified secure auth": What does that mean? I could not find proof of your ISO certification. Can you please share?

- 10k M2M tokens for $250/month sounds like a really bad deal if I can just spin up https://github.com/ory/hydra that can easily handle 10k requests per second.

- Looks like you're using OAuth2 as the primary "login" and "session management". What compelled you to do this?

- It looks like you're using some open source technology under the hood for the OAuth2 flows - which one are you using (out of curiosity)?

And finally, what sets you apart? It looks like the same solution for the known problem that big players (such as Okta and Auth0 - publicly traded) have already mastered. Ory (github.com/ory) for example has it's global network approach where you no longer need datacenter locations and is Open Source. Clerk is targeting React devs. What's your niche? Doing everything from auth to billing is, in my experience, way too much for a small team with little resources. Just getting Auth right is a mammoth task.

Thanks so much for the detailed feedback and great questions!

You can find details of our ISO and other certifications on our compliance page: https://kinde.com/docs/important-information/compliance-cert... we're also happy to provide a copy of the certificate if you reach out to support@kinde.com.

In terms of pricing, 10k M2M tokens are included on our $25/month plan (as well as many other features) so no need to spend $250 :) We feel this is a fair value exchange for everything being offered on the plan. Of course, there is always the roll-your-own option and great open source solutions like Hydra and that's awesome too for people that are confident going down that path - but it's not for everyone.

The great thing we have found about going the OAuth2 route is that you are free to use Kinde with any library that supports OAuth2. We also have SAML available as an auth option.

There is no denying there are a number of great players in the auth space but this is really only the start for us. We’re an experienced team aiming to help create a world with more founders by bringing together the fundamentals of product development. The fact that we’re small means we’re able to move quickly. We’ve just shipped v1 of feature flags and have more exciting offerings to come!

> 10k M2M tokens for $250/month sounds like a really bad deal if I can just spin up https://github.com/ory/hydra that can easily handle 10k requests per second.

Spinning one up is easy, sure. Making sure it's production ready, is not so much.

Reply on news.ycombinator.com