For features: I think https://www.enterpriseready.io/ has a nice checklist of the 12 things commonly required for enterprise apps (SSO, Audit logs, RBAC, GDPR, etc)