AuthLite
AuthLite provides two-factor authentication software natively integrated with Microsoft Active Directory, serving enterprise Windows networks that need to enforce 2FA across logon, RDP, VPN, and offline scenarios without replacing existing authentication infrastructure.
- Company typePrivate
- Founded-
- HeadquartersSpringfield, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What AuthLite does
AuthLite is a privately held US software company (AuthLite, LLC, Illinois) that develops two-factor authentication (2FA) solutions purpose-built for Microsoft Windows Active Directory environments. Its core product extends Active Directory's native authentication protocol to validate one-time passwords at domain controllers, enabling organizations to enforce 2FA across console logon, RDP, VPN, Exchange services, and offline/cached workstation scenarios without deploying separate authentication infrastructure. The platform supports YubiKey hardware tokens and OATH-compliant software tokens including Google Authenticator, and offers differentiated capabilities such as Domain Admin protection against Pass-the-Hash attacks and HMAC/SHA1 challenge-response for secure offline authentication. AuthLite originated as a product under Collective Software and now operates as an independent LLC with 1-10 employees, serving enterprise customers globally.
The company sells software licenses on a per-domain basis through a direct online store and consultative sales motion, supplemented by free evaluation licenses that drive top-of-funnel adoption. Its go-to-market targets Windows-centric enterprises with existing Active Directory investments who need to add MFA without replacing their authentication stack, emphasizing native integration over bolt-on architectures. The current product release is v2.5, with version history showing continuous security patching and incremental feature additions (Linux/macOS support, expanded RADIUS-based integrations for Citrix, OpenVPN, Cisco ASA, VMware, Microsoft UAG) since 2013.
AuthLite is bootstrapped and founder-owned (Gregory Bell, Founder and CEO), with no disclosed institutional investment, acquisitions, or external funding events. Revenue figures are not publicly disclosed, and the company operates with a micro-employee headcount consistent with a niche, profitable lifestyle business rather than a venture-scaled enterprise. Its competitive position relies on a technically differentiated integration approach in a mature Windows security segment increasingly contested by larger identity vendors pivoting toward cloud and AI-driven authentication.
AuthLite firmographics
Firmographics- Name
- AuthLite
- Legal name
- AuthLite, LLC
- Website
- https://authlite.com
- Company type
- Private
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- AuthLite provides two-factor authentication software natively integrated with Microsoft Active Directory, serving enterprise Windows networks that need to enforce 2FA across logon, RDP, VPN, and offline scenarios without replacing existing authentication infrastructure.
- Ownership category
- akta.pro rank
AuthLite industry classification
Industry- Product category
- Identity and Access Management (Two-Factor Authentication Software)
- akta.pro primary industry
- Multi-Factor Authentication (MFA) & Passwordless Authentication (HDAEAJAC)
- akta.pro secondary industries
- Authentication (MFA/Passwordless/Biometrics) Platforms (BPAMAEAE), Directory Services & Identity Stores (AD/LDAP/Cloud Directories) (HDADAAAE)
Keywords
Where AuthLite is headquartered
LocationHeadquarters
- HQ city
- Springfield
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
AuthLite business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Software Licensing: AuthLite sells software licenses on a per-domain basis. Licenses are allocated to domains, with the License I.D. being the NETBIOS name of the domain. Customers can request evaluation keys at no cost and purchase permanent licenses through the online store or by contacting sales. The licensing system tracks user counts against license allocations.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Pay-as-you-go | Evaluation - Free trial for testing |
| Subscription | Multi-year contract | Permanent licenses - Quote-based pricing |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels5 records
AuthLite product offering
Product offeringCore offering
AuthLite sells a two-factor authentication software product for Windows Active Directory environments, enforcing second-factor (YubiKey or OATH/Google Authenticator) authentication on user logon, RDP, VPN, and Domain Admin access. The solution modifies Active Directory natively to validate OTPs at domain controllers, eliminating the need for separate authentication servers or client-side software changes. It is licensed on a per-domain basis and sold directly to enterprise customers worldwide.
Product overview
AuthLite is a unified two-factor authentication platform for Windows Active Directory environments. The core AuthLite product provides MFA enforcement by integrating YubiKey hardware tokens and OATH-based software tokens (Google Authenticator) into the Windows authentication system. The platform offers capabilities including: Domain Admin account protection against Pass-the-Hash attacks, two-factor Remote Desktop Protocol enforcement, secure offline/cached logon support using YubiKey HMAC/SHA1 Challenge/Response, VPN integration via Microsoft RADIUS/IAS/NPS, and LDAP-based authentication for third-party services. The product installs on domain controllers and member workstations to enable consistent 2FA enforcement across the enterprise, with version 2.5 being the current release supporting Windows Server and Windows 10/11 environments.
Differentiator
Problem solved
Functional benefit
Products and services
- AuthLite Two-factor authentication software for Windows Active Directory that enforces OTP-based second-factor authentication using YubiKey hardware tokens and OATH-compliant software tokens (Google Authenticator). The product modifies Active Directory to natively validate OTPs at domain controllers, supporting user logon, RDP, VPN, cached/offline logon, and Domain Admin protection against Pass-the-Hash attacks. Sold as per-domain software licenses to enterprise customers.
Quantifiable outcome
- Eliminates Pass-the-Hash attack vector against administrative accounts by requiring 2FA before granting Domain Admins group SID
Companies that use AuthLite
Customer profileSegments1 record
Ideal customer profiles1 record
AuthLite technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration16 records
Feature5 records
AuthLite partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered core.
- YubicocoreYubico is the manufacturer of YubiKey hardware tokens, which are one of the primary supported token types for AuthLite two-factor authentication. AuthLite uses YubiKey OTP and Challenge/Response modes for authentication. Yubico is featured as a partner logo on the AuthLite website.
- OATH (Open Authentication)coreOATH (Open Authentication) is the open authentication standard that AuthLite supports for OATH-compatible tokens including software tokens like Google Authenticator and hardware OATH tokens. AuthLite is featured as an OATH-compatible solution.
- Microsoft Active DirectorycoreAuthLite integrates natively with Microsoft Active Directory, extending its authentication protocol to understand two-factor authentication. This partnership is fundamental to AuthLite's unique value proposition of teaching AD to natively support 2FA.
Recent moves6 records
Expansion highlights4 records
AuthLite competitors and assessment
Company assessmentDirect peers
- ManageEngine ADSelfService Plus: ManageEngine's ADSelfService Plus is a self-service password reset and MFA solution tightly integrated with Active Directory. It targets the same Windows AD admin use cases as AuthLite and is the most direct functional competitor in the AD-native MFA segment.
- Specops Software: Specops offers password policy, self-service reset, and MFA products that integrate with Active Directory. It directly competes with AuthLite in the SMB-to-mid-market AD security niche.
- Silverfort: Silverfort delivers agentless MFA and identity protection across AD and hybrid environments. It overlaps with AuthLite on AD-integrated 2FA but extends to broader identity threat detection, making it a more capitalised direct competitor.
- RCDevs (OpenOTP / OpenAccess): RCDevs offers OpenOTP and OpenAccess, MFA and SSO products tightly integrated with Active Directory and LDAP. It is a closely comparable smaller-vendor alternative to AuthLite for AD-centric authentication.
- PrivacyIDEA: PrivacyIDEA is an open-source MFA server with strong Active Directory integration supporting OATH, YubiKey, and RADIUS. It competes with AuthLite in the on-prem, token-flexible AD MFA niche.
Broad incumbents
- Duo Security (Cisco): Cisco Duo is a leading cloud-delivered MFA platform widely deployed in enterprises that also run AD. It is a broader incumbent alternative to AuthLite for organisations willing to use cloud-based 2FA.
- Okta: Okta is a major cloud IAM platform whose Adaptive MFA and AD integration compete with AuthLite. It represents the cloud-native displacement path for AD-centric 2FA customers.
- RSA SecurID: RSA is an established enterprise authentication vendor offering hardware tokens and MFA software. It overlaps with AuthLite on token-based 2FA for AD environments and is a legacy incumbent in the segment.
- Microsoft Entra multifactor authentication: Microsoft's native MFA offering within Entra ID (Azure AD) is the most consequential incumbent alternative — deeply embedded in the AD ecosystem AuthLite targets and capable of neutralising AuthLite's core integration differentiator.
- WatchGuard AuthPoint: WatchGuard's AuthPoint is an MFA service aimed at SMB and mid-market, often layered on top of AD. It is a broader incumbent alternative competing for similar budget-conscious enterprise customers as AuthLite.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
AuthLite social profiles
Digital presenceAuthLite financial estimates
Financial estimateRevenue estimate
Valuation estimate
AuthLite leadership team
Management profileNumber of profiles
Profiles1 record
AuthLite funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
AuthLite M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about AuthLite
What does AuthLite do?
AuthLite sells a two-factor authentication software product for Windows Active Directory environments, enforcing second-factor (YubiKey or OATH/Google Authenticator) authentication on user logon, RDP, VPN, and Domain Admin access. The solution modifies Active Directory natively to validate OTPs at domain controllers, eliminating the need for separate authentication servers or client-side software changes. It is licensed on a per-domain basis and sold directly to enterprise customers worldwide.
Is AuthLite a public or private company?
AuthLite is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was AuthLite founded?
AuthLite was founded in -1. It employs 1 to 10 people.
Where is AuthLite based?
AuthLite is headquartered in Springfield, United States, in the North America region.
How does AuthLite make money?
One revenue line is on record: software Licensing.
Who are AuthLite's main competitors?
Direct peers on record are ManageEngine ADSelfService Plus, Specops Software, Silverfort, RCDevs (OpenOTP / OpenAccess) and PrivacyIDEA. Broad incumbents are Duo Security (Cisco), Okta, RSA SecurID, Microsoft Entra multifactor authentication and WatchGuard AuthPoint.
Does AuthLite have an API?
No public API is recorded for AuthLite.
What industry is AuthLite in?
AuthLite's product category is Identity and Access Management (Two-Factor Authentication Software). Its primary akta.pro industry code is HDAEAJAC, Multi-Factor Authentication (MFA) & Passwordless Authentication, with a secondary code of BPAMAEAE, Authentication (MFA/Passwordless/Biometrics) Platforms.