Complete comparison of HelloJohn features across Free, Starter, Pro, and Enterprise plans, and between Cloud and Self-Hosted deployments.

Feature Matrix

Name: HelloJohn
Availability: InStock
Rating: 4.9 (20000 reviews)
Author: HelloJohn Contributors

Use this matrix to compare features across plans and deployment options.

Plans

Feature	Free	Starter	Pro	Enterprise
Monthly Active Users	1,000	10,000	100,000	Unlimited
Organizations	10	100	1,000	Unlimited
Tenants	1	1	1	Custom
API rate limit (req/min)	100	500	1,000	Custom
Team members (dashboard)	2	5	15	Unlimited

Feature	Free	Starter	Pro	Enterprise
Email + password	✅	✅	✅	✅
Magic link (passwordless)	✅	✅	✅	✅
Social login (Google, GitHub, etc.)	✅	✅	✅	✅
Custom OAuth providers	—	✅	✅	✅
SAML 2.0 SSO	—	—	✅	✅
OIDC SSO	—	—	✅	✅
Custom session duration	—	✅	✅	✅
Custom JWT claims	—	—	✅	✅
Impersonation	—	—	✅	✅

Feature	Free	Starter	Pro	Enterprise
TOTP (authenticator apps)	✅	✅	✅	✅
Email OTP	✅	✅	✅	✅
SMS OTP	—	✅	✅	✅
WebAuthn / Passkeys	—	—	✅	✅
Backup codes	✅	✅	✅	✅
MFA enforcement policies	—	✅	✅	✅
Per-organization MFA requirements	—	—	✅	✅

Feature	Free	Starter	Pro	Enterprise
User CRUD API	✅	✅	✅	✅
Public + private metadata	✅	✅	✅	✅
User roles & permissions	✅	✅	✅	✅
Custom roles	—	—	✅	✅
Organizations	✅	✅	✅	✅
Organization metadata	✅	✅	✅	✅
Organization invitations	✅	✅	✅	✅
Bulk user operations	—	—	✅	✅
User import/export	—	✅	✅	✅

Feature	Free	Starter	Pro	Enterprise
Session management API	✅	✅	✅	✅
Multi-device session list	✅	✅	✅	✅
Force session revocation	✅	✅	✅	✅
IP + device tracking	✅	✅	✅	✅
Anomaly detection	—	—	✅	✅
Bot protection	—	✅	✅	✅
Brute-force protection	✅	✅	✅	✅
CORS configuration	✅	✅	✅	✅

Feature	Free	Starter	Pro	Enterprise
REST API	✅	✅	✅	✅
JavaScript / TypeScript SDK	✅	✅	✅	✅
React / Next.js SDK	✅	✅	✅	✅
Go SDK	✅	✅	✅	✅
Python SDK	✅	✅	✅	✅
CLI	✅	✅	✅	✅
Webhooks	✅	✅	✅	✅
Webhook event filtering	✅	✅	✅	✅
API keys with scopes	—	✅	✅	✅
Key rotation	—	✅	✅	✅
Idempotency support	✅	✅	✅	✅

Feature	Free	Starter	Pro	Enterprise
Custom email sender name/address	—	✅	✅	✅
Custom SMTP	—	✅	✅	✅
Email template customization	—	✅	✅	✅
Custom redirect URLs	✅	✅	✅	✅
Hosted auth UI branding	—	✅	✅	✅
Custom domain for auth UI	—	—	✅	✅
White-label (no HelloJohn branding)	—	—	—	✅

Feature	Free	Starter	Pro	Enterprise
Audit logs	—	✅	✅	✅
Audit log retention	—	30 days	90 days	1 year+
Audit log export	—	—	✅	✅
Dashboard analytics	✅	✅	✅	✅
Custom log retention	—	—	—	✅
SOC 2 Type II	—	—	—	✅
HIPAA BAA	—	—	—	✅
GDPR data processing agreement	✅	✅	✅	✅
SLA guarantee	—	99.5%	99.9%	99.99%

Feature	Cloud	Self-Hosted (OSS)	Self-Hosted (Enterprise)
Managed infrastructure	✅	—	—
Automatic updates	✅	Manual	Assisted
Multi-region	✅	DIY	DIY
Full data sovereignty	—	✅	✅
Docker / Kubernetes deploy	—	✅	✅
Custom database	—	✅	✅
All authentication features	✅	✅	✅
SSO / SAML	Pro+	✅	✅
Audit logs	Starter+	✅	✅
Commercial support	✅	—	✅
SLA	✅	—	✅