Solutions
Start from the problem you have.
By what you need to do, or by the kind of organisation you are. Each page shows what changes, how it works on real screens, and where to read on.
Find yours
17 use cases in three groups, and 4 industries.
AI enforcement
Identity, limits, approvals and a boundary for AI agents.
AI Auth: govern AI agents in production
AI Auth gives every agent an identity, limits and an off switch, on open standards.
See howGive an agent a boundary it cannot leave
On the machine it runs on, an agent reaches only what you granted. Enforced in the kernel.
See howCIBA approvals: a person decides for the agent
Sensitive agent actions wait for a named person, out of band, over OpenID CIBA.
See howMCP gateway: control which tools an agent can call
One MCP gateway for every tool: per-tool grants, checked arguments, no shared credentials.
See howStop an agent everywhere, at once
Revoke one agent in one action. The gateway, your services and your machines all refuse it.
See howIdentity and access
Sign-in for people, services, clouds and servers.
Zero-Code: sign-in for services, with no code
Zero-Code puts sign-in and access rules in front of services you already run.
See howWorkforce identity: a modern IdP
Single sign-on, provisioning, passkeys and devices, on open standards, with users included in the plan.
See howCloud and server access with no stored keys
Short-lived cloud roles and server sessions, granted by group.
See howSign-in for the product you sell
A hosted sign-in page under your brand, with organizations for your customers.
See howIdentity inside your own cloud
Run AuthFI in your own account, region or data centre.
See howSAML single sign-on for every app
AuthFI as your SAML identity provider, with one account and one set of groups.
See howSCIM provisioning: accounts that follow your directory
People are created, changed and removed for you, in AuthFI and in the apps downstream.
See howSecurity
Knowing what happened, and what would be refused.
One record of who did what
Every sign-in, grant, approval and refusal, for people and agents, on one chained record.
See howKnow which of your rules actually refuse
Every rule on the platform, and whether it refuses, only watches, or cannot bite.
See howProtect every account from takeover
Passkeys, a second step on every plan, lockout, breached-password checks and sessions you can end.
See howCatch an agent or workload behaving oddly
Findings when a workload runs something new and reaches out, or a sign-in looks wrong.
See howKubernetes compliance, with Kyverno
Score a cluster against CIS, SOC 2, ISO 27001, PCI DSS and HIPAA, and export the fix as Kyverno.
See howBy industry
The same product, from where you stand.
Financial services
For banks, fintechs and insurers: every action on the record, and data that stays put.
See howHealthcare
For hospitals, labs and health software: a named account behind every access.
See howSoftware and AI companies
Enterprise-ready sign-in for your product, and control of the agents inside it.
See howPublic sector and regulated India
Identity that runs in India, or inside your own data centre.
See how