Protect your apps with OIDC, ForwardAuth, passkeys, TOTP, and email OTP. Single container, zero config files.
Any app that supports OIDC can delegate login to GateKeeper. Works with Grafana, Jellyfin, Portainer, Traefik Manager, and any standard OIDC client.
Protect apps at the reverse proxy level without touching their code. GateKeeper sits in front and verifies every request.
Passwordless login with passkeys (fingerprint, face, hardware key), TOTP authenticator apps, and email OTP - all configurable per user.
Manage users, OIDC clients, access policies, webhooks, and settings from a browser. No CLI or config files required.
Append-only record of every authentication and admin event with full filtering, retention controls, and date ranges.
Single binary, single SQLite file, single Docker container. First-run setup page - no env vars needed for the admin account.