authentik
Identity provider and single sign-on server supporting OAuth2, OIDC, SAML, LDAP and proxy-based authentication, with a flow engine that composes login, enrolment and recovery as editable stages.
Identity provider and single sign-on server supporting OAuth2, OIDC, SAML, LDAP and proxy-based authentication, with a flow engine that composes login, enrolment and recovery as editable stages.
Secrets and configuration platform with per-environment scoping, versioning, access control and injection into running processes, plus scanning for credentials committed to source control.
Rust implementation of the Bitwarden server API, compatible with the official Bitwarden clients and extensions, covering vaults, organisations, collections, sends and file attachments.
Fundamental security infrastructure that protects your AI services with enterprise-grade authentication and secrets management. Authentik provides single sign-on (SSO) capabilities, allowing users to access multiple services with one secure login, while Infisical manages application secrets, API keys, and configuration safely. Vaultwarden rounds out the setup by providing a self-hosted password manager for your team. This combo addresses the critical security challenges of AI deployments: ensuring only authorized users can access sensitive AI models and data, protecting API keys and configuration from exposure, and maintaining security best practices as your stack grows in complexity.