Your Identity.
Under Your Control.

Authentik is the leading open-source Identity Provider – and with authhost we run it for you on German infrastructure. Your own instance, fully managed, GDPR-compliant.

From €34.90/month — start your own instance in minutes.

Start free trialHow it works
Authentik Dashboard - SSO, Flows & User Management
GDPR-compliant
8 Regions Worldwide
Open Source & auditable
24/7 Monitoring
ISO 27001 DCs

authhost is an independent managed hosting provider and is not affiliated with Authentik Security Inc. (USA). Authentik is open-source software – we run it on German infrastructure. Learn more at goauthentik.io.

merkaio

More than just hosting.

authhost is a brand of merkaio. We specialize in operating, developing and managing open-source infrastructure. Identity is just the beginning — our ecosystem covers the entire stack.

Individual operation, installation or consulting for individual components also available.

You are hereauthhostIdentity & Access Management · AuthentikbirdhostVPN & Networking · NetBirdchirphostLoRaWAN & IoT Connectivity · ChirpStackthingshostIoT Platform & Device Management · ThingsBoardpanelhostMonitoring & Dashboards · Grafana
Learn more about merkaio

How companies use authhost

Central SSO for all applications

One login for intranet, cloud apps, DevOps tools and legacy systems. Employees sign in once and access everything.

Customer Identity (CIAM)

User registration, self-service and social login for your SaaS products or customer portals. B2C-ready.

Zero Trust & Conditional Access

Access based on user, device, location and risk. GeoIP detection and impossible travel detection included.

Whyauthhostinstead of self-hosting Authentik?

Authentik is great open-source software. But running an identity provider is business-critical – an outage means nobody can log in. Our expert team handles complete management — from setup through proactive monitoring to immediate incident response.

24/7 Monitoring & Incident Response

An identity provider must run around the clock. An outage means: nobody can log in – all applications stop.

Security Patches & Zero-Day Response

Identity providers are a prime target for attackers. Zero-day vulnerabilities require immediate action – 24/7.

Missing Expert Knowledge

OIDC, SAML, LDAP, flows, outposts, certificates – secure operation requires deep specialist knowledge most IT teams lack.

Hidden Operating Costs

Servers, monitoring, backups, personnel costs, on-call duty – the true costs of self-hosting quickly exceed any managed offering.

First-class Hands-on Support

Personal support from our expert team

Enterprise-Grade Security

Proactive patches, monitoring & incident response

Predictable Costs

One flat rate — no hidden personnel costs

View plans

Everything your Identity Management needs

Authentik provides a complete identity platform that outshines commercial alternatives.

Single Sign-On (SSO)

One login for all applications. Supports OAuth2, OpenID Connect, SAML2 and proxy-based authentication.

Multi-Factor Authentication

TOTP, WebAuthn/Passkeys and email OTP. Optional SMS (via Twilio) and Duo. Protect accounts with modern MFA methods.

Remote Access Gateway

Secure access to RDP, SSH and VNC via browser. No VPN needed.

LDAP Outpost

Full LDAP server as an outpost. Seamlessly integrate legacy applications without code changes.

SCIM Provisioning

Automatic user synchronization with external systems. Fully automated user lifecycle.

RADIUS Outpost

Network authentication for VPN, Wi-Fi and switches. Natively integrated into Authentik.

Application Proxy

SSO for applications without native OIDC/SAML support. Protect any web application with Authentik.

Customizable Flows

Configure login, registration and recovery flows via drag-and-drop. No developers needed.

Custom Branding

Login pages with your own logo, colors and text. Your brand, your identity.

Audit Logs & Compliance

Complete logging of all authentication events. Exportable for SIEM integration.

3 steps to your Identity Provider

Your own instance in under 5 minutes. No waiting, no onboarding call.

01

Register & choose a plan

Create your account in the portal, choose the right plan and configure your domain – your own or provided by us.

02

Hit Deploy

One click on Deploy and your dedicated Authentik instance is automatically provisioned – including SSL, outposts and admin access.

03

Connect applications

Connect your applications via OIDC, SAML or Proxy. Your team signs in via SSO – we monitor and update.

Get started
NEW

Self-Service Portal – Deploy your own Authentik instance in just a few clicks through our new portal.

→

Transparent pricing. No surprises.

Start your own instance in 5 minutes. Unlimited users in all plans.

Select Region

For small teams

Starter

Dedicated Instance · Email Support (48h)

Unlimited users (recommended up to 250)

No user limits. Recommended up to 250 users. From 250 users we recommend the Business plan.
€49.90€34.90/month

Billed as €418,80 / year · excl. VAT

  • Subdomain included (*.authhost.de)
  • Custom domain supported
  • Dedicated Authentik instance
  • SSO (OIDC, SAML, LDAP, SCIM, RADIUS)
  • 2 TB traffic incl.
  • MFA (TOTP, WebAuthn/Passkeys, email OTP)
  • Login flows, policies & user directory
  • Federation (Google, Azure AD, GitHub, etc.)
  • Proxy provider for apps without native SSO
  • Remote Access Gateway (RDP/SSH/VNC)
  • PostgreSQL included
  • 40 GB NVMe storage incl.
  • Email support (48h)
  • 99.9% SLA
  • 24/7 monitoring
  • Automatic backups & updates
  • Hosted in Germany
  • GDPR-compliant
  • 7-day free trial
Get started
Most popular

Business

Dedicated Instance · Priority Support (4h SLA)

Unlimited users (recommended up to 1,000)

No user limits. Recommended up to 1,000 users. From 1,000 users we recommend a consultation.
€149.90€104.90/month

Billed as €1258,80 / year · excl. VAT

  • Everything in Starter, plus:
  • 80 GB NVMe storage incl.
  • Priority support (4h SLA)
  • Personal setup call
  • 4 TB traffic incl.
  • 99.9% SLA
  • 24/7 monitoring
  • Hosted in Germany
  • GDPR-compliant
Get started
For large teams

Enterprise

10 Gbit/s NIC

Custom configurations with multi-node setups and dedicated outpost clusters – on request.

Contact us
  • Everything in Business, plus:
  • 1,000+ users
  • Dedicated contact person (2h SLA)
  • Custom onboarding support
  • Dedicated infrastructure
  • 99.99% SLA guarantee
  • On-premise option available

All plans include

No setup fee
Cancel monthly
Automatic backups & updates
DPA available

Why authhost?

Compare us with the alternatives.

FeatureauthhostSelf-Hosted AuthentikOkta Starter
PriceFrom €34.90/moOwn serversFrom $6/user/mo ($1,500/yr min.)
Flat-Rate PricingNo (per-user)
Dedicated instance
Open Source
Managed outpostsSelf-configure
Remote Access (RAC)Self-configure
GDPR Hosting DEOptional
Fully managedSaaS

Comparison based on publicly available information as of April 2026. Features, pricing and plans are subject to change — please verify directly with each provider. All trademarks, product names and logos are the property of their respective owners. Okta is a trademark of Okta, Inc. Keycloak is a CNCF project (the CNCF is part of the Linux Foundation).

Customers trust managed services bymerkaio

The merkaio portal brings managed hosting for open-source infrastructure into one place: LoRaWAN with ChirpStack, identity with Authentik, VPN with NetBird, IoT platforms, Grafana observability, and Pangolin tunnels.

I signed up with chirphost to host a managed ChirpStack instance for a LoRaWAN monitoring service I'm building in the US. The instance was live within minutes of signing up, no provisioning delays or back-and-forth. Great support makes all the difference. I needed to confirm the correct US915 sub-band mapping for my gateway setup and had a few questions about Basics Station with TLS certificates. Timo responded quickly every time and gave clear, specific answers relevant to my configuration. Actual technical guidance from someone who understands the stack. I run a Rakwireless gateway with Dragino sensors through my chirphost instance, and the entire chain has been solid. If you need managed ChirpStack and don't want to deal with self-hosting, this is the right choice.
BG
Brian Guilfoyle
Geigyr LLC · geigyr.com
viachirphost·Managed ChirpStack
PARTNER PROGRAM

Offer Managed Authentik to Your Clients

Are you a system integrator, MSP or IT service provider? We handle operations – you keep the customer relationship.

White-Label

Custom domain, custom configuration. Dedicated instances for each of your clients.

Co-Managed

You handle first-level support. We take care of operations, monitoring and escalation.

Referral

You refer clients and earn a commission. No operational effort.

Discover Partner Program

Frequently Asked Questions

Still have questions?

Contact us

Custom inquiry or consultation?

For enterprise inquiries, custom configurations or a personal consultation. Send us a short message – we'll get back to you within 24 hours.

Timo Wevelsiep

Your Contact

Timo Wevelsiep

Founder, merkaio

[email protected]

By submitting, you agree to our Privacy Policy.