AWS Cognito Can Win Auth Budget
Clerk
Cognito is the most dangerous kind of competitor because it can win the auth budget without being the best auth product. For a team already running its app on AWS, Cognito sits inside the same console, shares billing, and now supports the core table stakes like passkeys and stronger token handling. That makes the buying decision less about feature comparison and more about whether Clerk saves enough developer time to justify an extra vendor and an extra bill.
-
The pricing gap is real, but it is narrower in a specific band than the headline suggests. Google Identity Platform, which underpins Firebase Authentication, is free through 49,999 MAU for tier 1 methods and then falls to $0.0055 and $0.0046 per MAU at higher tiers. AWS Cognito Lite uses the same breakpoints above a 10,000 MAU free tier. That means cloud auth is now priced like infrastructure, not premium software.
-
Clerk is selling a different unit of value. Developers do not just get a login API. They get ready made sign up, sign in, profile, org switching, and billing components that can be dropped into a React or mobile app, plus roles, tenant IDs, and plan data passed into the app. Cognito lowers cloud spend. Clerk lowers build time and frontend work.
-
Firebase is still a meaningful flank threat, but the August 25, 2025 Dynamic Links shutdown created more migration work than new lock in. Google says email link auth, password reset, and email verification still work after the shutdown, but only after upgrading SDKs and moving to the new flow. That kind of forced plumbing change can open the door for a full auth replatform.
This market is heading toward a split. Cloud vendors will absorb price sensitive and already embedded customers, while Clerk and similar vendors will keep winning teams that care most about shipping polished auth flows fast. The long term winner in independent auth will be the company that bundles login, org management, permissions, and monetization tightly enough that ripping it out feels like rebuilding part of the app.