AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 48 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~107 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.
Open-source identity provider with SSO, MFA, and application proxy capabilities
Known CVEs (48)5 newAbout this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an unauthenticated attacker can submit a malformed SAML message to an authentik deployment using SAML in eithe…
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an authentik SAML Source verifies an assertion's signature and validity period but does not ensure that the id…
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configu…
authentik is an open-source identity provider that offers single sign-on, multi-factor authentication, and application proxy capabilities, enabling organizations to centralize authentication and secure access to applications.
Strengths
Over 1 million installations
Resilient and trustworthy without third‑party reliance
Flexible and scalable with customizable workflows
Security through transparent open‑source code
Streamlined pricing covering B2B and B2C
Supports diverse protocols and applications
Pricing & packaging
Streamlined pricing covering both B2B and B2C use cases.
News about authentik (6)Where this comes fromItems from authentik's own public feeds — changelog, blog, GitHub releases or status page — that name authentik in the headline or summary. News from authentik that does not name this product is on the vendor's page instead. Each headline links to the original source; nothing here is written by 0-Doubt.
