Convex vs Stytch

Convex

Stytch

Convex · 18 features

• Actions — Non-deterministic functions for external I/O (fetch, AI APIs, email). Cannot rea…
• Authentication — Convex Auth (built-in) or BYO provider (Clerk, Auth0, Kinde, WorkOS). ID tokens …
• Convex Agents — AI agent framework with durable memory, threads, tool use. Works with OpenAI / A…
• Convex Auth — First-party auth library: passwords, magic links, OAuth, phone — stored in your …
• Convex Components — Reusable backend modules (rate limiter, workflow, aggregate, action-retrier, etc…
• Cron Jobs — Recurring schedules defined in convex/crons.ts. UTC, cron-style patterns.
• Durable Workflows — Long-running multi-step workflows with retries and at-least-once guarantees.
• Exception Reporting — Auto-capture errors to Sentry, Axiom, Datadog.
• File Storage — Upload/download via storage API. Returns storage IDs referenced in documents.
• Full-Text Search — BM25 search index on table fields. withSearchIndex query helper.
• HTTP Actions — Expose public HTTP endpoints for webhooks, OAuth callbacks, third-party integrat…
• Log Streams — Stream function logs to Axiom, Datadog, Sentry. Pro+.
• Mutations — Transactional write functions. All reads + writes in one mutation are ACID; conf…
• Preview Deployments — Every Git branch gets its own isolated deployment. Integrates with Vercel/Netlif…
• Queries — Deterministic read-only TS functions. Automatically cached and re-run when under…
• Real-Time Subscriptions — useQuery auto-subscribes; server invalidates when data a query read changes. No …
• Scheduler — schedule.after / schedule.at — enqueue functions to run later. Durable, survives…
• Vector Search — Native vector index on tables. withIndex + filter fields. Up to 4096 dims.

Stytch · 15 features

• B2B Auth — Multi-tenant auth: organizations, roles, JIT provisioning, enterprise SSO, SCIM.
• B2C Auth — Consumer auth: passwordless (magic links, OTP), passwords, OAuth, passkeys, WebA…
• Device Fingerprinting — Fingerprint devices at signup/login. Block bots, credential stuffing, and ATO at…
• Device-Fingerprint Risk API — Real-time risk scoring API usable even without full auth.
• Enterprise SSO (OIDC) — OIDC SSO per organization.
• Enterprise SSO (SAML) — SAML 2.0 SSO per organization. Self-serve admin portal.
• JIT Provisioning — Auto-create users in an org on first SSO sign-in.
• Machine-to-Machine — Client-credentials OAuth for service-to-service.
• OAuth / Social — Google, Apple, Microsoft, GitHub, Slack, Discord, Facebook, LinkedIn, Amazon, Bi…
• Organizations — Multi-tenant primitive with policies per org.
• Passkeys (WebAuthn) — FIDO2 passkey enrollment and authentication.
• Passwordless — Magic links (email) + OTP (email/SMS/WhatsApp) + embeddable magic links.
• RBAC — Roles and permissions per organization (B2B).
• SCIM Provisioning — Directory user/group provisioning from Okta, Azure, Google Workspace.
• Sessions — JWT or opaque session tokens. Configurable lifetime.