YOUR PROJECT + OUR INFRASTRUCTURE
authentik VPS
A VPS with authentik pre-installed · By authentik
One sign-on for all of your company's applications.
Identity provider with SSO over OIDC, SAML and proxy, with akadmin created at install and the setup page closed before the site opens.
- Single sign-on over OIDC, SAML and authenticating proxy
- Admin created and setup page closed before the site opens
- Login flows and MFA configurable from the interface
from R$59.90/mo
Pay with Pix, bank slip or card · You choose the location and the plan on the next screen. Nothing is charged until you confirm.
Ready in minutes
Automatic provisioning once the order is confirmed.
24/7 support
Our own team, by chat and ticket.
Pick the right plan for authentik
Every plan includes public IPv4 and IPv6, NVMe storage and a 1 Gbps uplink. Click one to reach the checkout with everything filled in.
How to size your project
The project's minimum, 2 vCPU and 2 GB, is the plan's, and 4 GB leaves room for team use. Load grows with active users, simultaneous logins and the number of applications and outposts. PostgreSQL also serves as cache and queue, so it concentrates the load; disk follows the size of the database.
- Recommended for authentik
How to order authentik
Pick a plan
vCPU, memory and disk sized for your project. You can grow it later without reinstalling.
Confirm the order
Pix, bank slip or card. Nothing is charged until you confirm, and you have a 7-day guarantee.
authentik ready in minutes
The server comes up with authentik installed and configured. Access details appear in the panel.
What to use a authentik VPS for
Some of the most common uses. The server is yours — run whatever you like on it.
- Centralize the login of internal panels and tools behind a single SSO with MFA
- Protect applications that have no login of their own with the embedded proxy outpost
- Act as the OIDC or SAML provider for the applications your company builds
- Manage users and groups in one place, with configurable login and recovery flows
authentik VPS specifications
- Virtualisation
- KVM, virtual server with your plan’s resources
- vCPU
- 2 to 48
- Memory
- 2 GB to 192 GB
- Storage
- NVMe, 30 GB to 2 TB
- Network
- 1 Gbps, public IPv4 and IPv6 included; DDoS protection available
- Datacenters
- Belo Horizonte (Brazil) · Dallas (USA)
- System
- authentik, pre-installed
- Management
- Web panel, API and MCP, VNC console, snapshots, backups and firewall
- Billing
- Monthly, quarterly, semi-annual or annual (discounted); Pix, bank slip or card
- Support and guarantee
- 24/7, 7-day money-back guarantee
About authentik
authentik is an open-source identity provider: one sign-on (SSO) for a company's applications, over OIDC/OAuth2, SAML, LDAP or an authenticating proxy, with configurable login flows and MFA. IT teams use it to centralize users and access instead of keeping accounts in every system.
At Master da Web, authentik 2026.8.3 arrives with server, worker and PostgreSQL 17 behind Caddy over HTTPS. The akadmin account is created at install from bootstrap values, the setup page is closed before the site is public, and the bootstrap API token is revoked. The generated password comes in the order e-mail.
It is up to you to turn on MFA for akadmin, create your applications and providers and, for recovery and notification e-mails, set up SMTP in the .env. LDAP or RADIUS outposts are deployed by hand. Backing up PostgreSQL and /opt/authentik/data is also yours.
Software features
- authentik 2026.8.3 with server, worker and PostgreSQL 17, no Redis
- The akadmin account is created at install; setup page closed before the site opens
- Bootstrap API token revoked and removed from .env and the containers
- Generated password sent by e-mail; MFA for akadmin is a step for you
- OIDC/OAuth2, SAML and proxy ready; LDAP and RADIUS outposts by hand
- Port 9000 on 127.0.0.1 only; Caddy is the only public entry
- Secret key and database password generated on the server; telemetry and Gravatar off
- Configuration in AUTHENTIK_* lines in /opt/authentik/.env
Requirements
Platform minimum
- vCPU
- 2 vCPU
- Memory
- 2 GB
- Storage
- 30 GB
Below this the order is refused — the checkout raises the disk for you automatically.
Recommended for production
- vCPU
- 2 vCPU
- Memory
- 4 GB
- Storage
- 30 GB
What we would put it on, not a limit.
What your authentik gets at Master da Web
Manage infrastructure from one panel: security, recovery, connectivity and growth. Check prices and availability when configuring your server.
Snapshots
Take a snapshot of authentik before a risky update and roll back to it with one click, without reinstalling anything.
Automatic backups
Scheduled copies of the whole server, kept off the host. Restore the complete authentik whenever you need to.
Managed firewall
Rules by port and source, applied from the panel, no iptables editing. Open only what authentik needs.
Security Center
Continuous external scanning of your server, with findings prioritised and the fix spelled out for each one.
Private network (VPC)
Connect authentik to databases and other servers over an isolated network with nothing exposed to the internet. With a VPN Gateway for remote access.
DDoS protection
Volumetric attack mitigation for your authentik server. Check protection options and prices when ordering.
Grow without reinstalling
Add vCPU, memory and disk from the panel and pay only the difference, and authentik stays exactly as it is.
API and MCP for automation
Create, resize and manage servers through the public API — or straight from an AI assistant, over MCP.
Related applications
Kali Linux
Kali Linux
The Kali Linux distribution, Debian-based and built for penetration testing, on a server of your own for labs and authorized audits.
Recommendedfrom R$49.90/moView details →Keycloak
Keycloak
Identity and access management with SSO over OpenID Connect and SAML, in production mode with PostgreSQL and a permanent admin created at install.
from R$59.90/moView details →OpenBao
OpenBao
Secrets manager forked from Vault, installed already initialized and unsealed, with KV v2, an admin user and the API and web UI over HTTPS.
from R$49.90/moView details →Vaultwarden
Vaultwarden
Server compatible with the Bitwarden apps, with sign-ups closed, the owner already registered and a generated master password, behind HTTPS.
from R$49.90/moView details →
Know what to expect from day one.
Ready infrastructure, with the freedom to configure your application your way.
With your VPS
Your chosen image installed, the plan’s resources and a panel to manage the server. Administrative access is provided after provisioning.
Configure for your business
The order e-mail carries the admin interface address, the akadmin user and the password. Sign in, turn on MFA for akadmin and create the first application with the right provider. SMTP for recovery e-mails, LDAP and RADIUS outposts and the PostgreSQL backup are up to you.
Expand when you need to
Backups, snapshot capacity, DDoS protection, private networking and other features are available as you need them. Check prices and availability when configuring your server.
You administer the system and application, including updates and data. For help with configuration or management, talk to our team about the scope of support.