What happens when I click Sign up free?

You sign up at signetauth.cloud. Signing up creates your account and provisions your instance automatically, in minutes, with nobody waiting on us. You get its URL and its own compatibility receipt when it is live.

What does $0 include?

Hobby is $0, one instance each. One instance per company. No SLA. The same engine as paid hosted. Team is $299/mo flat when you want production.

Why doesn't SSO add a line to the bill?

There is no per-connection SSO fee, no per-user billing, and no usage meter. Team $299/mo includes unlimited users and unlimited SSO connections. The next customer you win does not change the invoice. Effective 2026-08-07.

Do I need a Signet SDK?

No. Point the stock better-auth client at the instance origin, path /api/auth. The calls already written keep working. There is no Signet SDK. Copy-paste paths are on /quickstart.

Where do the users live?

Every user, session and secret is a row in a database you can inspect. Hosted Hobby: an encrypted SQLite file. Hosted Team and up: a dedicated PostgreSQL database we operate. On-prem: yours. Nothing phones home.

How do I leave?

Dump the database. Point the client at the next origin. The wire is a published compatibility profile, not a proprietary SDK. The format is not ours. The exit pack is on /buy#exit.

Do you hold a compliance certification?

No third-party compliance certification is held or claimed. A third-party pen test has not yet been performed. An SLA exists only inside a signed contract. The dated ledger, with reasons, is on /security#not-claimed.

Can I run it on my own metal?

Yes, as a licence, never a free download. Scale is $15,000/yr per production deployment on standard terms. Enterprise is quoted per production deployment (air-gap, escrow, named support). Start that conversation at /contact.

What isn't finished?

Four things, declared on the home page. There is no compliance certification or third-party penetration test yet. There is no uptime SLA outside a signed contract. You cannot yet make SSO the only way in for a domain. And the OAuth provider does not claim full OpenID Connect conformance. The capability ledger is on /product#capabilities. The compatibility receipt (gap 0, scoped to the checks in the public compatibility profile, not a claim that every better-auth route is implemented) is on /compatibility.