Convex vs WorkOS

Convex

WorkOS

Convex · 18 features

• Actions — Non-deterministic functions for external I/O (fetch, AI APIs, email). Cannot rea…
• Authentication — Convex Auth (built-in) or BYO provider (Clerk, Auth0, Kinde, WorkOS). ID tokens …
• Convex Agents — AI agent framework with durable memory, threads, tool use. Works with OpenAI / A…
• Convex Auth — First-party auth library: passwords, magic links, OAuth, phone — stored in your …
• Convex Components — Reusable backend modules (rate limiter, workflow, aggregate, action-retrier, etc…
• Cron Jobs — Recurring schedules defined in convex/crons.ts. UTC, cron-style patterns.
• Durable Workflows — Long-running multi-step workflows with retries and at-least-once guarantees.
• Exception Reporting — Auto-capture errors to Sentry, Axiom, Datadog.
• File Storage — Upload/download via storage API. Returns storage IDs referenced in documents.
• Full-Text Search — BM25 search index on table fields. withSearchIndex query helper.
• HTTP Actions — Expose public HTTP endpoints for webhooks, OAuth callbacks, third-party integrat…
• Log Streams — Stream function logs to Axiom, Datadog, Sentry. Pro+.
• Mutations — Transactional write functions. All reads + writes in one mutation are ACID; conf…
• Preview Deployments — Every Git branch gets its own isolated deployment. Integrates with Vercel/Netlif…
• Queries — Deterministic read-only TS functions. Automatically cached and re-run when under…
• Real-Time Subscriptions — useQuery auto-subscribes; server invalidates when data a query read changes. No …
• Scheduler — schedule.after / schedule.at — enqueue functions to run later. Durable, survives…
• Vector Search — Native vector index on tables. withIndex + filter fields. Up to 4096 dims.

WorkOS · 13 features

• Audit Logs — Standardized audit log pipeline with streaming to SIEMs (Splunk, Datadog, Sumo L…
• AuthKit — Complete drop-in user management UI + hosted auth flows. Built on top of WorkOS.
• Directory Sync — SCIM-based user provisioning/deprovisioning from Okta, Azure AD, Google Workspac…
• FGA (WorkOS) — Fine-grained authorization based on Google Zanzibar / OpenFGA.
• Magic Auth — Passwordless email codes + links. Good alternative to password auth for B2B.
• Multi-Factor Auth — TOTP + SMS MFA enrollment and verification APIs.
• Organizations — Multi-tenant B2B primitive. Attach SSO/Directory/Audit to specific customer orgs…
• Passkeys — WebAuthn passkeys as a first-class factor.
• Radar — Fraud protection: device fingerprinting + risk scoring at signup and login.
• Single Sign-On — Plug-and-play SAML 2.0 + OIDC SSO with 30+ identity providers pre-mapped.
• User Management — REST API + webhooks for user CRUD, email verification, sessions, MFA, metadata.
• Vault — Secret storage for tokens + per-tenant credentials.
• Widgets — Embeddable admin portals (SSO setup, directory mapping) that your customers self…