Buying snapshot
Scroll sideways to see all columns. With a keyboard, focus this table and use the arrow keys.
| Decision point | What Didit states |
|---|---|
Operating model | Business Console with a drag-and-drop Workflow Builder, plus an open REST API (OpenAPI 3 spec) with HMAC-signed webhooks. |
Integration options | Hosted flow: create a session with POST /v3/session/, redirect the user, listen for the webhook. SDKs for Web, iOS, Android, React Native and Flutter; ready-made Zapier, Shopify and Salesforce integrations. |
AI agent access | Hosted MCP server at mcp.didit.me/mcp. MIT-licensed agent skills on GitHub; the README lists 20 skills for Cursor, Claude Code, Codex and OpenCode. |
Coverage | 220+ countries, 14,000+ document types, 48+ languages and 1,000+ government data sources. |
Testing | The pricing FAQ says there is no separate sandbox: the 500 free monthly Full KYC bundles are production-grade verifications. The homepage offers an instant sandbox, and the skills README recommends a sandbox application key for live checks. |
Certifications | ISO/IEC 27001 and iBeta Level 1 PAD; aligned with GDPR, DORA, MiCA and AMLD6. |
Billing currency | Invoices in USD. Top-ups in EUR, GBP, BRL, MXN and other supported currencies convert at top-up. |
Our take
Choose Didit v3 if you want to pilot identity checks on a free monthly allowance and cost each workflow from public module prices before launch. It fits less well if finance needs a fixed monthly bill: on the self-serve plans, cost follows every check that runs.
Evaluate Didit v3
Where it stands out
Cost is visible in the builder. Each module shows its public price next to it in the flow, so you see the cost of a flow before you ship it.
A permanent free allowance. The 500 free verifications renew every month, forever, with no credit card to start. A pilot can run on real users without a deposit.
Onboarding and later checks share one engine. The same key and workflow engine chain KYC, KYB, AML, transaction monitoring and biometric matching in one session. A returning user can re-verify with a fresh selfie on the same setup used at onboarding.
Agents can set it up without the console. The skills repository documents 5 API calls from account registration to a live verification link, with no console needed.
Product screenshot
Trade-offs to weigh
A declined session can still cost money. Billing depends on the method used, and completed checks keep their charges even if the session later fails. Budget for checks that run, not for approved users.
Costs stack per module. Each completed check debits its own price. Didit's balance example shows one run with ID, Liveness and AML debited at $0.45, so model cost per flow, not per user.
Ongoing AML monitoring renews. It is billed once when you activate it for a user and covers a year of daily re-screening. At the 12-month mark it renews and debits again unless you turn it off.
KYB and ID-number lookups vary by country. KYB registry prices depend on country and data tier, and company AML, person AML, linked KYC and document collection are separate charges. An ownership tier does not guarantee a complete ownership tree. Non-document lookups are billed when the registry answers, including no matches. A listed rate does not mean the method is enabled in your environment.
Checks stop when the balance runs out. At zero balance, new paid checks pause; historical results stay accessible. Set automatic top-ups and balance alerts in the Business Console.
Pricing and plan conditions
Self-serve billing uses a prepaid workspace balance. You top up, and each completed check debits its price. Eligible document checks use the free allowance first. Pay as you go has zero monthly minimum, zero seat fees and zero contract. Didit says it never raises prices without 60 days notice. The plan card promises automatic volume discounts; Didit also says Enterprise volume discounts come from a custom sales quote. The MCP server has no per-call charge, but the checks it runs bill at the normal rate. Didit says its pricing changes on November 1, 2026, so re-check the rates below after that date.
Scroll sideways to see all columns. With a keyboard, focus this table and use the arrow keys.
| Plan | Published price | What it adds |
|---|---|---|
Free | $0 / month · no card | 500 full KYC verifications every month (ID, liveness, face match, device & IP); 200+ fraud signals, blocklist, duplicates; reusable KYC across the Didit network; workflow builder, case management, SDKs; AI support (in-console AI agent, docs, community). The counter resets on the 1st of each month; unused checks do not roll over. |
Pay as you go | $0.33 per full KYC | Everything in Free, plus: AML screening and monitoring from $0.07; business registry pricing by country and data tier; transaction monitoring at $0.02 each; wallet screening at $0.15 per check; white-label flow under your own brand. |
Enterprise | Custom annual contract | Everything in Pay as you go, plus: committed-volume pricing; custom legal terms and a 99.99% uptime SLA; data residency, retention, security review; manual reviewers on demand; reseller and white-label terms; priority human support with a 24/7 shared Slack channel and a named success manager. |
Scroll sideways to see all columns. With a keyboard, focus this table and use the arrow keys.
| Module | Published price |
|---|---|
ID Verification | $0.15 per check |
NFC Reading | $0.15 per check |
Proof of Address | $0.20 per check |
Passive Liveness | $0.10 per check |
Active Liveness | $0.15 per check |
Face Match (1:1) | $0.05 per check |
Face Search (1:N) | Free per search |
Biometric Authentication | $0.10 per auth |
Age Estimation | $0.10 per check |
AML Screening | $0.20 per check |
Ongoing AML Monitoring | $0.07 per user/year |
Company AML Screening | $0.20 per check |
Person AML (per UBO/officer) | $0.20 per person |
Device & IP Analysis | $0.03 per check |
Email Verification | $0.03 per check |
Phone Verification | From $0.03 per check; pricing varies by channel |
Database Validation | Variable per check; pricing varies by source, listed inside the Workflow Builder |
Public signals
About these signals
Verified factual signals from public sources. They indicate observable activity or interest, not total adoption, product quality, or cost.
4 GitHub commits 90d29 GitHub stars0 vulnerabilities across 1 package
See all signals from 4 sources
npm · @didit-protocol/sdk-web@0.5.3
Alternatives to Didit v3
The reviewed substitutes for Didit v3 among the identity verification, and what would make each one the better answer.
Other approaches
A different approach to the same problem. Each substitutes only for the workload named beside it.
- Outris Identity MCP
- Both are MCP servers an agent calls to decide whether a signup is genuine, and they overlap on exactly one check. Didit's MCP exposes phone and email verification as a low-cost pre-KYC filter alongside documents, biometrics and AML; Outris does phone and email investigation only, returning platform registrations, linked names and breach exposure. So Didit stands in for Outris on the screening question and carries the regulated checks Outris cannot do at all, while Outris answers an investigative question — where else is this number registered, has it leaked — that Didit's compliance modules do not ask. Conditional rather than direct: neither covers the other's full surface.Applies to: Screening a phone number or email for fraud from an AI agent over MCP. Didit stands in for Outris when the same check must also satisfy regulated onboarding — document KYC, liveness, AML screening; Outris stands in for Didit when the need is investigative context on a number and not a compliance record.
See detailed alternatives analysis
If you are evaluating Didit v3 alternatives, you are likely looking for an identity verification platform that balances cost, compliance coverage, and integration speed. Didit bundles KYC, biometric liveness, face match, AML screening, and fraud detection into a single API with 500 free checks per month and pay-as-you-go pricing of $0.33 per full KYC verification. That is a strong package, but it is not the right fit for every team. Below we break down the security tools worth considering and when each one makes sense.
Top Alternatives Overview
Joinble AI KYC is the closest direct competitor in the identity verification space. It offers forensic deepfake detection, second-generation biometric verification, and AI-powered case management agents. Joinble supports ID verification from 190+ countries, includes a no-code workflow builder, and provides real-time analytics on conversion rates and fraud attempts. Its transparent pricing model eliminates the budget uncertainty that comes with opaque enterprise contracts. Choose Joinble AI KYC if you want forensic-grade deepfake detection and full autonomous control over your verification flows without vendor lock-in.
Vibio takes a deterministic approach to security scanning. Rather than relying on AI interpretation that varies between runs, Vibio executes 50+ rule-based security checks against your URL or GitHub repository. Results are predictable and reproducible with no hallucinations. Paid scans cost £4.99 for a one-time full scan, and subscriptions are £9.99 per month for 4 scans or £39.99 per month for 20 scans. Choose Vibio if you need consistent, repeatable security audits for your web application or codebase rather than identity verification.
DefenceNet focuses on real-time phishing and smishing protection powered by machine learning. It claims 96%+ detection accuracy, processes URLs in milliseconds, and works across SMS, email, and web channels. DefenceNet offers both cloud API and on-premise deployment options with a lightweight 50MB runtime. The platform is patent-protected and hosted in Canada under strict data privacy standards. Choose DefenceNet if your primary threat vector is phishing attacks rather than identity fraud.
Joinble AI KYC and Didit overlap most directly, but the remaining alternatives address adjacent security concerns. PromptBrake stress-tests LLM endpoints with 138 checks across 18 attack categories, catching prompt injection, data leaks, and policy bypasses. Pricing starts at $99 for a one-time pack of 5 scans valid for 30 days, and the Enterprise plan is $499 per month. Choose PromptBrake if you are shipping AI-powered products and need automated security testing for your LLM integrations.
EarlyCore scans AI agents for prompt injection, data leakage, and jailbreaks before deployment, then monitors them in production. It integrates with AWS Bedrock, Google Gemini Enterprise Agent Platform (formerly Vertex AI), and custom stacks with a 15-minute setup time. Choose EarlyCore if you need pre-deployment and runtime security for autonomous AI agents.
Flarehawk is an autonomous security operations layer that ingests Cloudflare telemetry, turns alerts into investigations, and generates remediation plans. Flarehawk has a free plan with 3 investigations, and paid plans cost $749 per month for Detect, $1,499 per month for Investigate and from $3,999 per month for Enterprise. Choose Flarehawk if you run Cloudflare Enterprise and want ML-driven threat detection with 5-year log retention and automated investigation workflows.
Architecture and Approach Comparison
Didit v3 operates as a unified identity stack where KYC, biometrics, liveness detection, face match, AML screening, and fraud prevention run through a single API and dashboard. The platform uses a visual node-based workflow editor that lets operations teams drag and drop verification features without writing code. Integration options span native iOS and Android SDKs, a Web SDK, iframe embedding, hosted verification links, and standalone REST APIs for server-to-server calls. Didit processes verifications in real time, syncing results via webhooks to your CRM or backend systems.
Joinble AI KYC follows a similar unified architecture but differentiates with forensic AI at its core. Its deepfake detection layer analyzes synthetic media and manipulated documents, while AI evaluation agents assess operations and make automated risk decisions. The platform also includes an AI onboarding assistant that guides end users through verification step by step, which can improve completion rates for complex flows.
The non-KYC alternatives operate on fundamentally different architectures. Vibio runs deterministic rule-based checks rather than probabilistic AI models, which means identical inputs always produce identical outputs. DefenceNet uses behavioral pattern learning instead of signature-based blacklists, processing millions of requests per second at the network gateway level. PromptBrake and EarlyCore both focus on the LLM security layer, running attack simulations against API endpoints rather than verifying human identity. Flarehawk sits at the infrastructure level, consuming Cloudflare logs and building environment-specific ML models that improve over time.
Pricing Comparison
Scroll sideways to see all columns. With a keyboard, focus this table and use the arrow keys.
| Tool | Pricing Model | Starting Price | Free Tier | Key Detail |
|---|---|---|---|---|
| Didit v3 | Usage-based | $0.33 per full KYC | 500 full KYC checks/month | Pay only for completed verifications |
| Joinble AI KYC | Enterprise | Contact sales | Unknown | Transparent pricing promised, no public rates |
| Vibio | Per scan or subscription | £4.99 per scan | Not listed | Subscriptions from £9.99/month for 4 scans |
| DefenceNet | Enterprise | Contact sales | N/A | API or on-prem deployment |
| PromptBrake | Paid | $99 for 5 scans; Enterprise $499/month | N/A | Free trial: 3 scans over 7 days |
| EarlyCore | Enterprise | Contact sales | N/A | 15-minute setup |
| Flarehawk | Freemium | $749/month (Detect) | Yes (3 investigations) | Investigate plan at $1,499/month |
Didit v3 stands out with its usage-based model and 500 free monthly checks. On pay as you go, a full KYC verification costs $0.33, and single modules are priced per check, such as ID verification at $0.15, passive liveness at $0.10 and AML screening at $0.20. There are no setup fees, no contracts, and no monthly minimums. You are only charged when a check completes successfully.
When to Consider Switching
Switch away from Didit v3 when your security needs extend beyond identity verification into application-layer protection. If phishing attacks on your SMS or email channels are your primary concern, DefenceNet addresses that threat vector directly with real-time URL scanning and gateway-level blocking. If you are building AI-powered products, PromptBrake and EarlyCore cover the LLM security gap that identity platforms do not touch.
Consider Joinble AI KYC if you need forensic-grade deepfake detection as a core capability rather than a supplementary feature. Joinble's emphasis on synthetic media analysis and AI-driven case management agents may provide stronger fraud prevention for industries facing sophisticated document manipulation attacks.
Vibio makes sense if you need security scanning for your application code and web infrastructure alongside or instead of user verification. Its deterministic approach guarantees consistent results across scans, which matters for compliance audits where reproducibility is required.
Flarehawk is the right choice if you already run Cloudflare Enterprise and want to consolidate security operations with automated threat investigation and 5-year log retention for forensic analysis.
Migration Considerations
Didit explicitly markets same-day migration from competitors like Sumsub, Veriff, Persona, and Onfido. Their team helps map existing workflows, import historical verification data, and mirror your rules with minimal engineering time. If you are moving away from Didit, expect a similar migration effort in reverse, though not all alternatives offer the same level of migration support.
For teams switching from Didit to Joinble AI KYC, the transition is relatively straightforward since both platforms use visual workflow builders and webhook-based result delivery. You will need to remap your verification nodes and update API endpoints, but the conceptual model is similar.
Moving to a non-KYC alternative like DefenceNet or Vibio is not a migration but an addition to your security stack. These tools address different threat surfaces, so you would likely run them alongside your identity verification provider rather than replacing it. Budget accordingly: adding DefenceNet for phishing protection or a paid Flarehawk plan from $749 per month for security operations does not eliminate your KYC costs.
Key technical considerations include webhook format differences, SDK compatibility with your mobile stack (Didit supports iOS, Android, and Web SDKs), and compliance certifications. Didit holds GDPR compliance, ISO 27001, ISO 27017, ISO 27018, and iBeta Level 1 certifications. Verify that your target alternative matches the certification requirements for your regulated markets across EU, US, LATAM, and APAC regions.