| What it does | Open-source identity provider for unified authentication
| Not given
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | US
| Not given
|
|---|
| Pricing model | Freemium
| Free
|
|---|
| Pricing | Open Source (free): For homelab and simple use cases, includes OIDC, SAML, LDAP, SCIM, RADIUS, Kerberos, Proxy, and community Discord support. Enterprise: $5 per user per month (billed annually), includes everything in Open Source plus Privileged Access Management, agent accounts, integrations with
| Free plan includes every feature: identity, vault, limits, audit trail, alerts, kill switch, teams. Up to 25 active agents and 100,000 requests per month per organisation. Custom pricing for more than 25 agents or 100,000 requests per month.
|
|---|
| Key features | - Multi-factor Authentication with TOTP, WebAuthn/Passkeys
- Conditional Access policies based on user attributes, time, and location
- Role-based Access Control (RBAC) with multi-parent groups
- Privileged Access Management with just-in-time access requests
- GeoIP and Impossible Travel Detection
- Secure Remote Access via RDP, SSH, and VNC
- Self-service User Portal for password reset and authenticator enrollment
- Audit Logging with field-level detail for compliance
- Client Certificate Authentication (mTLS)
- OpenID Key Binding for token theft protection
| - Each agent gets its own identity with unique key and ID
- Credential vault keeping API keys encrypted and inaccessible to agents
- Scoped access policies controlling what each agent can do
- Complete audit trail of every registration, token and API call
- Kill switch to revoke one agent, a fleet or one API connection
- Alerts sent to Slack or email when limits are hit or policy violations occur
- Integration with Claude, ChatGPT, Cursor and LangChain
- SDKs for Node and Python plus proxy for any API
|
|---|
| What makes it different | - Over 1 million installations
- Complete self-hosted control without relying on third-party services
- Open source code continuously reviewed by community experts
- Supports all standard protocols and extensive customization
- No feature downgrades: open source features never move to enterprise
| - No shared API keys: each agent has its own identity so you know exactly which agent made each call
- Keys never touch agents: stored encrypted in vault and added to requests by PhysicsBase
- Automatic limits prevent runaway loops without person-in-loop approval
- One-click revocation takes effect within minutes, no need to rotate keys for all agents
- Complete audit trail answers which agent did what and why
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 74 ● no change since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 28 | 0 |
|---|
| Citation Flow (Majestic) | 46 | 17 |
|---|
| Referring domains (Majestic) | 2128 | 16 |
|---|
authentik
PhysicsBase