#authentication

KeyHippo

Lets a Supabase app check "is this API key allowed to see this row" directly inside the database itself, instead of writing that permission logic separately in application code.

Userfront MultiModel

A single, monitored front door for every AI tool your company uses — ChatGPT, Claude, Gemini and the rest — so a regulated business can let employees use AI without leaking sensitive data or losing the audit trail.

Corbado

A dashboard that shows exactly where people give up trying to log in — which method, which device, which step — so a company can fix its login flow instead of guessing why signups drop off.

Phixo

A browser extension that quietly checks your Gmail or Outlook emails for phishing signs using four different detection methods at once, then explains the risk in plain English instead of just flashing a scary warning icon.

Clawvisor

An authorization gateway that sits between AI agents and the apps they touch — Gmail, Slack, GitHub, and more — approving a task once and enforcing it on every call, so agents never see real credentials. Free self-hosted, or from $50/month.

Agentic Fabriq

Identity and permissioning infrastructure for AI agents — described as 'Okta for agents' — giving each agent its own identity, least-privilege access, and full audit logs, free for up to 2,000 API calls/month or from $50/month.

Rindler

Turns websites that don't have an API into structured, reliable tools an AI agent can call — handling logins, 2FA and bot detection along the way.

Serial Subscriptions

A backend service that handles the boring-but-critical parts of running a subscription business — logins, Stripe billing, usage limits, upgrades — in one integration, instead of a solo founder stitching together five different services themselves.

Overslash

A middleman that sits between your AI agents and the online services they need to use (GitHub, Slack, AWS, and more), so the agent can act on your behalf without ever seeing your actual passwords or API keys.

SSOJet

Big customers often refuse to sign a contract unless your app supports "enterprise SSO" — logging in through their own Okta or Azure AD instead of a normal password. Building that yourself for every possible identity provider can take months; SSOJet plugs

Locke

A password manager built around stopping phishing specifically — instead of just storing your passwords, it gives you disposable email addresses and warns you when a site is impersonating a real one.

MonoCloud

Login screens, password resets, and "sign in with Google" buttons are the boring part of every app — MonoCloud is a drop-in service that handles all of it so you don't build your own login system from scratch.

InstantDB

A real-time database with built-in auth, storage and permissions — like a modern, open-source Firebase where data lives on the client and syncs instantly across users and devices.

Zluri

Identity governance platform that discovers, manages and secures every human and non-human identity (including AI agents) across a company's SaaS and cloud apps.

Alloy

Identity and fraud decisioning platform that connects a single API to 270+ data providers, letting banks and fintechs orchestrate KYC/KYB, fraud and transaction monitoring across the whole customer lifecycle.

Persona

Identity verification API for KYC, KYB and fraud checks — document scanning, selfie liveness checks, and no-code workflows to route or auto-approve verifications.

OpenBao

Community-governed, truly open-source secrets manager — a Linux Foundation fork of Vault, born when Vault went source-available.

Tutorials: How to set up two-factor authentication for SSH login on Linux

Tutorials: How to set up two-factor authentication for SSH login on Linux

![Build Status

![Build Status