For the business
Put AI to work, and stay in control of it.
AuthFI is the identity platform for companies adopting AI agents: one place that decides what every person and every agent can do, and can stop either.
What changes for the business
Four results, without a new team to run them.
Say yes to AI agents
Security can approve an agent, because each one has an owner, a limit and an off switch.
One platform, not four
Staff sign-in, customer sign-in, cloud and server access and agent control, on one bill.
Ready for the audit
One record of who did what, for people and agents, sent to the tools you already use.
No rewrite
It protects the services you already run. Nothing in your applications changes.
Who it is for
Three people usually decide. Each has a different question.
Security leaders
Know what every agent and person can reach, and stop any of them in one action.
Security and auditEngineering leaders
Ship agents and services without building sign-in, permissions or approvals yourselves.
Zero-CodeFounders and finance
A plan price with your users included, in your region or your own cloud.
PricingOne platform, not four
Most companies buy these separately and then try to make them agree. Here they share one console, one set of groups and one record.
The whole platformAuthFI
One console, one set of groups, one record
How you buy it
Simple enough to explain in a budget meeting.
Users included in the plan
Team is $999 a month with up to 50 staff accounts and 25,000 monthly active users of your application included. Professional is $3,999 with up to 250 and 50,000.
See the plansYour region, or your cloud
Run it in our regions, or in your own AWS, Google Cloud, Azure, Oracle or data centre.
Build a planA program for startups
Early companies can apply to start on a plan at no charge.
ApplyOur region
Virginia, USA
AWS, US East
us-east-1Our region
Mumbai, India
Google Cloud, Mumbai
asia-south1Your own cloud
Any cloud
AWS, Google Cloud, Azure, Oracle, or your own data centre. Run by you, or by us inside your boundary.
EnterpriseStart from your problem
By what you need to do, or by the kind of organisation you are.
All solutionsAI enforcement
Identity, limits, approvals and a boundary for AI agents.
AI Auth: govern AI agents in production
AI Auth gives every agent an identity, limits and an off switch, on open standards.
See howGive an agent a boundary it cannot leave
On the machine it runs on, an agent reaches only what you granted. Enforced in the kernel.
See howCIBA approvals: a person decides for the agent
Sensitive agent actions wait for a named person, out of band, over OpenID CIBA.
See howMCP gateway: control which tools an agent can call
One MCP gateway for every tool: per-tool grants, checked arguments, no shared credentials.
See howStop an agent everywhere, at once
Revoke one agent in one action. The gateway, your services and your machines all refuse it.
See howIdentity and access
Sign-in for people, services, clouds and servers.
Zero-Code: sign-in for services, with no code
Zero-Code puts sign-in and access rules in front of services you already run.
See howWorkforce identity: a modern IdP
Single sign-on, provisioning, passkeys and devices, on open standards, with users included in the plan.
See howCloud and server access with no stored keys
Short-lived cloud roles and server sessions, granted by group.
See howSign-in for the product you sell
A hosted sign-in page under your brand, with organizations for your customers.
See howIdentity inside your own cloud
Run AuthFI in your own account, region or data centre.
See howSAML single sign-on for every app
AuthFI as your SAML identity provider, with one account and one set of groups.
See howSCIM provisioning: accounts that follow your directory
People are created, changed and removed for you, in AuthFI and in the apps downstream.
See howSecurity
Knowing what happened, and what would be refused.
One record of who did what
Every sign-in, grant, approval and refusal, for people and agents, on one chained record.
See howKnow which of your rules actually refuse
Every rule on the platform, and whether it refuses, only watches, or cannot bite.
See howProtect every account from takeover
Passkeys, a second step on every plan, lockout, breached-password checks and sessions you can end.
See howCatch an agent or workload behaving oddly
Findings when a workload runs something new and reaches out, or a sign-in looks wrong.
See howKubernetes compliance, with Kyverno
Score a cluster against CIS, SOC 2, ISO 27001, PCI DSS and HIPAA, and export the fix as Kyverno.
See howBy industry
The same product, from where you stand.
Financial services
For banks, fintechs and insurers: every action on the record, and data that stays put.
See howHealthcare
For hospitals, labs and health software: a named account behind every access.
See howSoftware and AI companies
Enterprise-ready sign-in for your product, and control of the agents inside it.
See howPublic sector and regulated India
Identity that runs in India, or inside your own data centre.
See how