ZERO MAU TAX Flat Per-Connection Billing • Unlimited Active Users

Transparent, Predictable Per-Connection Pricing. Zero MAU Tax.

Stop paying $125/month per connection or unpredictable Monthly Active User (MAU) penalties. Deploy enterprise SAML 2.0 SSO with 100% Stateless RAM security.

Unlimited SSO Logins ($0 MAU Tax)
100% Stateless RAM Engine
Zero-PII Database Footprint
AES-256-GCM Secret Vault
1 Active IdP Connection
Starter Plan
$39 / month USD
Quota: 1 Active Connection • $0 Per-User Tax

Ideal For: Early-stage B2B SaaS onboarding their first enterprise client.

  • ✓1 Active SAML 2.0 IdP Connection
  • ✓Full SAML 2.0 to HS256 JWT Proxy
  • ✓Okta, Microsoft Entra ID, Google Workspace & Custom SAML 2.0
  • ✓Unlimited SSO Authentications ($0 MAU fees)
  • ✓100% Stateless RAM Processing (<15ms)
  • ✓300s Atomic Nonce Replay Protection
  • ✓Automated X.509 Certificate Expiry Email Alerts
  • ✓Self-Serve Customer Control Plane Access
Plus applicable local VAT / GST / Sales Tax calculated at checkout.
MOST POPULAR • BEST ROI
Up to 5 Active IdPs
Growth Multi-Tenant
$139 / month USD
Only ~$27.80 / connection • Save 78% vs $125/Conn Brokers

Ideal For: Scaling B2B SaaS teams onboarding multiple mid-market & enterprise customers.

  • ✓Everything in Starter + Up to 5 Concurrent IdP Connections
  • ✓Multi-IdP Management Studio in Control Plane
  • ✓Unlimited SSO Authentications ($0 MAU fees)
  • ✓30 / 14 / 7-Day X.509 Certificate Expiry Radar
  • ✓Self-Serve Live API Key Rotation & JWT Secret Vault
  • ✓Hosted OASIS SP Metadata XML per Tenant
  • ✓Priority Technical Engineering Support
Plus applicable local VAT / GST / Sales Tax calculated at checkout.
Unlimited IdP Connections
Enterprise Scale
$349 / month USD
Quota: 999 Active Connections • Unrestricted Scale

Ideal For: High-growth SaaS platforms requiring unrestricted enterprise SSO scale.

  • ✓Everything in Growth + Unlimited IdP Connections (999 Quota)
  • ✓High-Throughput Dedicated Proxy Routing
  • ✓Unlimited SSO Authentications ($0 MAU fees)
  • ✓99.9% Uptime SLA Guarantee
  • ✓Custom Integration & Onboarding Assistance
  • ✓Priority Security & Architecture Review Support
  • ✓Full Programmatic REST API Provisioning
Plus applicable local VAT / GST / Sales Tax calculated at checkout.
💳 Global Billing via Lemon Squeezy (Merchant of Record): Listed plan prices exclude indirect taxes. Applicable regional VAT, GST, or Sales Tax is calculated automatically by billing country at checkout. Have a valid B2B VAT / Tax ID? Enter it directly in the checkout window for automatic reverse-charge tax exemption where eligible.
Read Full Tax & Refund Policy →
Interactive ROI & Savings Engine

Calculate Your Annual Enterprise SSO Savings

Adjust your active SAML 2.0 connections and Monthly Active Users (MAUs) below to compare KyoRox flat-rate pricing against per-connection SSO brokers and legacy identity clouds.

5 Connections

Number of corporate customers (Okta, Entra ID, Google Workspace) connecting to your app.

1 Conn ($39) 5 Conns ($139) 15 Conns 25+ Conns ($349)
10,000 MAUs

KyoRox charges $0 per user forever, whereas legacy auth clouds add heavy MAU overages.

1,000 Users 25,000 Users 50,000 Users 100,000+ Users
KyoRox Stateless Proxy (Growth Plan Recommended)
$139 / mo
Per-Connection SSO Brokers ($125 / connection / mo)
$625 / mo
Legacy Identity Clouds (Base + MAU Overages)
$950 / mo
ESTIMATED ANNUAL SAVINGS VS $125/CONN BROKERS
You Save $5,832 / Year (78% Savings) + Zero PII Liability
Lock In Flat Rate →
Head-to-Head Architecture & Cost Matrix

Why Engineering & InfoSec Teams Switch to KyoRox

Compare KyoRox against per-connection identity brokers and legacy MAU-taxed authentication clouds.

Architectural & Billing Dimension ⚡ KyoRox Stateless Proxy Per-Connection Brokers ($125/conn) Legacy MAU-Taxed Auth Clouds
1. Cost for 1 SAML Connection ✓ $39 / month flat $125 / month ✕ Enterprise Contract Required
2. Cost for 5 SAML Connections ✓ $139 / month (~$27.80/conn) $625 / month ✕ $1,000+ / month
3. Monthly Active User (MAU) Tax ✓ $0 Forever (Unlimited Users) $0 (Per-Connection Metered) ✕ Heavy Per-MAU Overage Penalties
4. End-User PII Database Storage ✓ 0% (Processed in Volatile RAM & Wiped) Stored in Vendor Database Stored in Vendor Database
5. Secret Storage Security ✓ AES-256-GCM + SHA-256 Hashed Keys Vendor Managed KMS Vendor Managed KMS
6. SAML Replay Protection ✓ Strict 300-Second Atomic Nonce Lock Standard Check Standard Check
4-Step Payment & Credential Custody Guide

What Happens When You Subscribe & How to Safeguard Your Keys

KyoRox uses automated cryptographic provisioning. Review these 4 straightforward steps before completing your checkout.

STEP 01 • BEFORE & DURING CHECKOUT

Enter Your Active Work / Admin Email

When completing your subscription in our Merchant of Record checkout window (Lemon Squeezy), ensure you enter your active corporate or admin email address accurately. Our automated provisioning webhook dispatches your one-time live credentials directly to this verified inbox and binds it (via AES-256-GCM) for future X.509 certificate expiry alerts.

✓ Typo-Guard Active: Pre-checkout OTP verification guarantees 100% inbox deliverability.
STEP 02 • INSTANT PROVISIONING (< 3 SECONDS)

Real-Time Isolated Tenant & Vault Creation

The moment your payment is confirmed, our HMAC-SHA256 verified billing webhook provisions your isolated tenant workspace, enforces your plan's connection quota (1, 5, or 999), generates your Client ID, and seals your 256-bit HS256 JWT signing secret inside our FIPS-197 AES-256-GCM vault.

✓ Zero Manual Wait: Your SP Metadata XML & ACS endpoints go live immediately.
STEP 03 • WHAT YOU RECEIVE IN YOUR INBOX

Your 2 Master Control Plane Credentials

You will immediately receive an automated welcome email from onboarding@kyorox.com containing the exact two credentials required to sign in at kyorox.com/dashboard:

FROM: KyoRox Security <onboarding@kyorox.com> TLS 1.3 VERIFIED
1. Isolated Tenant ID (36-Char UUID v4): 550e8400-e29b-41d4-a716-446655440000
2. Live Production API Key: kyx_live_9f8a7b6c5d4e3f2a1b0c9d8e7f6a
STEP 04 • CRITICAL SECURITY & RECOVERY RULES

How to Store Your API Key & How Recovery Works

Rule 1: Save your Live API Key (kyx_live_...) immediately inside your Password Manager (1Password / Bitwarden) or production .env secret vault.
Rule 2: Zero-Plaintext Policy: KyoRox stores your API key exclusively as an irreversible one-way SHA-256 hash. Plaintext keys are never stored in our database.
Rule 3: Instant Self-Serve Recovery: If you ever lose your welcome email or suspect key compromise, use Email OTP Recovery on the Control Plane Login Gate or trigger atomic Key Rotation inside the portal.
Billing, Quotas & Architecture FAQs

Frequently Asked Pricing Questions

Clear answers regarding connection quotas, upgrades, stateless RAM execution, and merchant compliance.

One active IdP connection represents a configured SAML 2.0 trust relationship between your KyoRox tenant workspace and a corporate Identity Provider (such as Okta Workforce, Microsoft Entra ID, Google Workspace, OneLogin, PingIdentity, or Custom SAML 2.0). Regardless of whether 10 or 100,000 employees log in through that connection, it counts as just 1 connection with $0 per-user fees.
You can start on the Starter Plan ($39/mo — 1 connection) and upgrade to Growth ($139/mo — 5 connections) or Enterprise ($349/mo — 999 connections) at any time. Our Lemon Squeezy webhook listener automatically updates your tenant's connection quota in real time without changing your Tenant ID, ACS URL, or existing SAML configurations.
Because KyoRox enforces a strict zero-plaintext database policy, your one-time Live API Key (kyx_live_...) is dispatched via email immediately upon payment. Pre-verifying your email address with a 6-digit code prevents domain typos and ensures your credentials and 30/14/7-day X.509 certificate expiry alerts reach your inbox with 100% reliability.
All subscriptions and payments are securely processed by our Merchant of Record, Lemon Squeezy, which automatically handles PCI-DSS compliance, international VAT/GST calculation, and downloadable tax invoices. Review our Terms of Service, Refund Policy, and Zero-PII Privacy Policy for full details.
Listed subscription prices ($39/mo, $139/mo, and $349/mo USD) are base subscription prices exclusive of indirect taxes. Because our authorized Merchant of Record (Lemon Squeezy) handles global billing and tax compliance, any applicable local Sales Tax, Value Added Tax (VAT), or Goods and Services Tax (GST) is automatically calculated at checkout based on your billing country. Business customers can enter a valid B2B VAT / GST Tax ID directly inside the Lemon Squeezy checkout window for automatic 0% reverse-charge tax exemption where eligible. See our Refund & Checkout Tax Policy (/refund#taxes) for full details.