Authentik Security
Authentik Security Inc. provides an open-source identity provider and SSO platform supporting SAML, OIDC, SCIM, LDAP, RADIUS, and SSF protocols. It serves enterprise IT organizations, B2B SaaS vendors, and privacy-conscious organizations with a self-hosted deployment model and FIPS-compliant enterprise tier.
- Company typePrivate
- Founded-
- HeadquartersSan Francisco, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Authentik Security does
Authentik Security Inc. operates an open-source identity provider (IdP) and single sign-on (SSO) platform branded as "authentik," enabling centralized authentication and authorization across heterogeneous application environments. The platform is self-hosted and modular, supporting a broad set of protocols — OAuth2/OIDC, SAML 2.0, SCIM 2.0, LDAP, RADIUS, Kerberos, SSF (Shared Signals Framework), and proxy-based legacy integration — via dedicated provider modules. Core technical capabilities include a visual flow/stage builder for authentication orchestration, a policy engine for conditional and geographic access control, application entitlements for fine-grained authorization, MFA (TOTP, WebAuthn/Passkeys, Duo, SMS, email), outposts for distributed sidecar deployment, GeoIP/impossible-travel detection, and machine-to-machine (M2M) OAuth client credentials. The company reports over 1 million installations across its user base.
Authentik targets enterprise IT organizations, B2B SaaS application vendors that need to act as identity providers for their tenants, development teams authenticating against GitHub/GitLab/Atlassian stacks, and privacy-conscious organizations seeking to avoid third-party cloud identity services. Named customers span defense (Anduril), AI/cloud infrastructure (CoreWeave, Cloudflare), media (Der Spiegel), e-commerce (Gopuff), telecom (Orange Business, T-Systems), professional services (EXL), energy (ON Energy), public safety (SREC 911), and humanitarian (Austrian Red Cross) verticals, indicating horizontal applicability across regulated and non-regulated environments.
The business model is a classic open-core structure: the self-hosted software is free under an open-source license with community support via Discord and GitHub, while the "authentik Enterprise" tier monetizes via an annual subscription that adds FIPS compliance, enterprise support, SLAs, and advanced features. Pricing is described as streamlined with no add-on fees for core functionality, though specific price points are not publicly disclosed. Distribution combines product-led growth (self-serve download, comprehensive documentation, integration directory of 30+ applications) with an enterprise sales motion for larger deployments. The company is privately held, headquartered in Philadelphia, PA, and operates with a 1–10 person team, suggesting a capital-efficient, community-driven operating model.
Authentik Security firmographics
Firmographics- Name
- Authentik Security
- Legal name
- Authentik Security Inc.
- Website
- https://goauthentik.io
- Company type
- Private
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Authentik Security Inc. provides an open-source identity provider and SSO platform supporting SAML, OIDC, SCIM, LDAP, RADIUS, and SSF protocols. It serves enterprise IT organizations, B2B SaaS vendors, and privacy-conscious organizations with a self-hosted deployment model and FIPS-compliant enterprise tier.
- Ownership category
- akta.pro rank
Authentik Security industry classification
Industry- Product category
- Identity and Access Management (IAM)
- NAICS
- Computer Systems Design and Related Services (5415), Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Federation & Identity Standards (SAML/OIDC/OAuth, Federation Hubs) (HDADAAAG)
- akta.pro secondary industries
- Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers) (HDAEAJAB), Single Sign-On (SSO) & Federation (BPAMAEAF), Cloud Identity & Access Management Infrastructure (IAM/IdP/MFA) (HDABAHAF), Multi-Factor Authentication (MFA) & Passwordless Authentication (HDAEAJAC)
Keywords
Where Authentik Security is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Authentik Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Operations, Marketing or Sales, Infrastructure
Revenue model
- Enterprise Subscription: Enterprise tier with dedicated support, FIPS compliance, advanced features, and SLA guarantees for business customers requiring production-grade identity management
- Open Source (Community): Free self-hosted open source version with community support through Discord and GitHub
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Annual | Community/Open Source tier with free access |
| Subscription | Annual | Enterprise tier with advanced features and support |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels6 records
Authentik Security product offering
Product offeringCore offering
Authentik Security develops and distributes "authentik," an open-source, self-hosted identity provider (IdP) that unifies authentication and authorization across enterprise applications. The platform supports SAML 2.0, OAuth 2.0/OIDC, SCIM 2.0, LDAP, RADIUS, and the Shared Signals Framework, with built-in MFA, conditional access policies, and a visual flow builder. A commercial Enterprise tier adds FIPS compliance, dedicated support, and SLAs.
Product overview
Authentik Security offers an open source identity provider platform that unifies authentication and authorization across diverse applications. The core product is authentik, a self-hosted identity provider supporting multiple protocols including OAuth2/OIDC, SAML 2.0, SCIM 2.0, LDAP, RADIUS, and the Shared Signals Framework (SSF). The platform consists of a modular architecture with provider types (OAuth2, SAML, SCIM, LDAP, RADIUS, Entra ID, Google Workspace, Proxy, SSF) that can be deployed as applications with backchannel providers for extended functionality. The enterprise tier adds FIPS compliance and enterprise support. Key features include a visual flow builder with reusable stages (identification, password, MFA, consent), a policy engine for conditional access, application entitlements for fine-grained authorization within apps, and outposts (LDAP, Proxy) for distributed deployment. The platform supports over 1 million installations and targets both B2B and B2C use cases.
Differentiator
Problem solved
Functional benefit
Products and services
- authentik Identity Provider An open-source, self-hosted identity provider that enables secure authentication and authorization across applications. Supports SAML 2.0, OAuth 2.0/OIDC, SCIM 2.0, LDAP, RADIUS, SSF, MFA (TOTP, WebAuthn/Passkeys, Duo, SMS), conditional access policies, and visual flow builder. Used by organizations to centralize workforce and customer identity management.
- authentik Enterprise Commercial Enterprise subscription tier that adds FIPS Compliance, dedicated enterprise support, advanced security controls, and SLA guarantees on top of the open-source authentik core. Targeted at organizations in regulated industries and large enterprises.
Quantifiable outcome
- Over 1 million installations worldwide
- +1 more outcomes
Companies that use Authentik Security
Customer profileNamed customers11 records
Segments4 records
Ideal customer profiles4 records
Authentik Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration29 records
Feature11 records
Authentik Security partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- CoreWeavecoreCoreWeave collaborates with Authentik Security to deploy authentik as an essential authentication tool for large AI enterprises. CoreWeave Engineering Manager reported ability to create robust and reliable system in under two weeks with help from Authentik Security team.
Scale indicators2 records
Recent moves6 records
Expansion highlights6 records
Authentik Security competitors and assessment
Company assessmentBroad incumbents
- Okta: Leading cloud-native identity platform providing SSO, MFA, lifecycle management, and adaptive access for workforce and customer identity. Operates broadly across the IAM category and competes with Authentik for enterprise SSO budgets, though delivered as SaaS.
- ForgeRock: Identity and access management platform (now part of Ping Identity) specializing in workforce and customer identity for large enterprises, including strong on-prem and hybrid deployment options comparable to Authentik's self-hosted positioning.
- Ping Identity: Enterprise-focused identity security platform offering SSO, MFA, and identity governance with strong deployment flexibility (cloud, on-prem, hybrid). Targets the same regulated and large-enterprise customers as Authentik's enterprise tier.
- Auth0 (Okta): Customer identity platform owned by Okta that focuses on B2B/B2C SSO and authentication APIs. Overlaps with Authentik's customer-identity and B2B SaaS use cases but delivers as a managed cloud service rather than self-hosted.
- Microsoft Entra ID (Azure Active Directory): Hyperscaler-scale identity service bundled into Microsoft 365 and Azure enterprise agreements, providing SSO, MFA, and identity governance. The default IdP for Microsoft-centric enterprises and the primary incumbent Authentik must displace in enterprise deals.
Direct peers
- JumpCloud: Cloud directory platform providing SSO, MFA, device management, and LDAP-as-a-service for SMB and mid-market IT teams. Competes with Authentik in the SME/IT-admin identity space, though delivered as SaaS rather than self-hosted OSS.
- Keycloak: Red Hat/IBM-sponsored open-source identity and access management solution supporting SAML, OIDC, and social login. Closest direct competitor to Authentik in the self-hosted OSS IdP space, with overlapping protocol support and similar target customers.
Emerging players
- Pomerium: Open-source identity-aware reverse proxy providing SSO, access control, and zero-trust application access. Adjacent/partial overlap with Authentik's proxy provider and application access use cases.
- Descope: Developer-focused customer identity and authentication platform that has directly compared itself against Authentik in SCIM-provider content. Overlaps with Authentik's B2B SaaS customer-identity use cases.
- Zitadel: Open-source identity infrastructure built on OIDC, SAML, and FGA, offered as both self-hosted and cloud. Direct emerging competitor to Authentik in the OSS IdP category with similar protocol coverage and target audience.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Authentik Security social profiles
Digital presenceAuthentik Security compliance and trust
Trust signalCompliance1 record
Authentik Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Authentik Security leadership team
Management profileNumber of profiles
Profiles1 record
Authentik Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Authentik Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Authentik Security
What does Authentik Security do?
Authentik Security develops and distributes "authentik," an open-source, self-hosted identity provider (IdP) that unifies authentication and authorization across enterprise applications. The platform supports SAML 2.0, OAuth 2.0/OIDC, SCIM 2.0, LDAP, RADIUS, and the Shared Signals Framework, with built-in MFA, conditional access policies, and a visual flow builder. A commercial Enterprise tier adds FIPS compliance, dedicated support, and SLAs.
Is Authentik Security a public or private company?
Authentik Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Authentik Security founded?
Authentik Security was founded in -1. It employs 1 to 10 people.
Where is Authentik Security based?
Authentik Security is headquartered in San Francisco, United States, in the North America region.
How does Authentik Security make money?
Two revenue lines are on record. Enterprise Subscription is the primary driver. The others are open Source (Community).
Who are Authentik Security's main competitors?
Broad incumbents on record are Okta, ForgeRock, Ping Identity, Auth0 (Okta) and Microsoft Entra ID (Azure Active Directory). Direct peers are JumpCloud and Keycloak. Emerging players are Pomerium, Descope and Zitadel.
Does Authentik Security have an API?
Yes. Authentik provides comprehensive APIs that enable developers to build custom workflows, automate user management, and extend functionality. The API supports programmatic access to applications, providers, property mappings, entitlements, and SCIM provisioning. Machine-to-machine (M2M) authentication is supported via OAuth 2.0 client credentials grant, where identification is based on username and authentication uses app password tokens.
What industry is Authentik Security in?
Authentik Security's product category is Identity and Access Management (IAM). Its primary akta.pro industry code is HDADAAAG, Federation & Identity Standards (SAML/OIDC/OAuth, Federation Hubs), with a secondary code of HDAEAJAB, Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers). Its NAICS code is 5415 and its SIC code is 7372.