Security
Authentik Hosting
Single sign-on for your applications with OpenID Connect, SAML, MFA and a user directory. Deploy it in one click on Caliber Node — no compose file, no server to prepare, HTTPS working the moment it boots.
From $4.00/mo on the Small subscription
$5.00 free credit when you sign up — your first month of Authentik, free
- One click
- Deploys in
- 2 GB
- Memory needed
- PostgreSQL
- Database
- $4.00/mo
- From
What you get
Authentik runs on a subscription — a pool of CPU, memory and disk that you own. Deploying it takes one click, and the same pool will run your other apps at no extra charge.
A hostname with HTTPS, immediately
Your app is reachable the moment it finishes deploying, on a certificate we issue and renew. Point your own domain at it whenever you like.
A managed PostgreSQL database
Created, wired up and given a generated password at deploy. It sits on a private network with no port open to the internet, and you can export it in one click.
A shell and SFTP
A real shell in the container and SFTP for its files. This is not a black box — if you want to get in and look, you can.
Updates you control
We check nightly for a new image and tell you when one lands. Applying it is your decision, per app, and a failed update rolls back to the exact image it replaced.
A free snapshot
One full archive of Authentik included, restorable in a click. Keep more with the snapshots add-on.
Your data, exportable
Export the PostgreSQL database whenever you want, plus SFTP for everything else.
What actually runs
No mystery images. Authentik deploys 3 containers, and these are exactly the ones:
postgres:16-alpinedatabaseghcr.io/goauthentik/server:2026.8.2webghcr.io/goauthentik/server:2026.8.2worker
Running Authentik yourself vs. running it here
Authentik is free software and you can absolutely run it yourself — we would rather tell you that than pretend otherwise. What you are paying for here is the part around it.
On your own server
- You write the compose file and keep it working
- You install, tune and back up PostgreSQL
- You configure a reverse proxy and renew certificates
- You watch for new releases and apply them
- You own the backups, and finding out they were broken
On Caliber Node
- One click, and it is running on HTTPS
- PostgreSQL deployed, secured and exportable
- Certificates issued and renewed for you
- Update checks nightly, applied when you say so
- A free snapshot, restorable in a click
Questions about Authentik hosting
- Can I try Authentik for free?
- Yes. Every new account gets $5.00 of Cloud Apps credit, applied automatically to your first invoice -- there is no code to enter and no card trial to cancel. On the plan Authentik needs, that covers your first month.
- How do I install Authentik?
- Pick Authentik from the catalog and deploy it. There is no compose file to write, no server to prepare and no reverse proxy to configure, and the PostgreSQL database it needs is created and wired up for you. It comes up on a hostname with HTTPS already working.
- What does hosting Authentik cost?
- Authentik needs at least 2 GB memory, so the Small subscription at $4.00/mo is the smallest that fits it. That size is a close fit for Authentik on its own -- if you want to run other apps alongside it, take the next plan up and share the pool.
- Do I get access to the Authentik files and database?
- Yes. Every app has a browser shell into its container, SFTP for its files, and a one-click export of the PostgreSQL database. Your data is yours and you can take it out whenever you want.
- Are updates to Authentik automatic?
- Only if you turn them on. We check nightly for a new image and tell you when one exists, but applying it is your call, per app. Database containers are never updated automatically -- a major version bump refuses to start against an existing data directory, which is a broken app rather than an upgrade.
- Can I use my own domain for Authentik?
- Yes. Every app gets a hostname on our domain immediately, and you can point your own domain at it instead. Certificates are issued and renewed automatically either way.
- Can I back Authentik up?
- Every app includes one free snapshot -- a full archive of its data you can restore from. Keeping more than one is a paid add-on on the subscription.
More security apps
WireGuard Easy hosting
Create and manage a private WireGuard VPN through a simple protected web interface.
AdGuard Home hosting
Block ads and trackers on your devices with a private DNS-over-HTTPS resolver and dashboard.
Keycloak hosting
Provide centralized identity, single sign-on, user federation, and application access management.
Infisical hosting
Store and distribute application secrets across environments with access control and audit logs.
2FAuth hosting
Store and generate two-factor authentication codes in a private web vault.
Cryptgeon hosting
Share a password or note through a link that destroys itself after one read.
Deploy Authentik in a click
Authentik, running on resources you own, with HTTPS and a free snapshot included.