Introducing AuthFI — The Identity Control Plane

AuthFI unifies authentication, cloud IAM, eBPF service security, and AI threat detection into one platform. One identity controls everything.

Today we’re sharing what we’ve been building: AuthFI, the Identity Control Plane.

The Problem

Identity is fragmented. Most teams use 5+ tools to manage access:

Auth0 or Okta for login
AWS IAM / Azure AD for cloud access
Istio or Linkerd for service-to-service auth
VPNs for network access
SIEM tools for audit and detection

Each tool has its own dashboard, its own policies, its own blind spots. No single tool sees the full picture.

The Solution: Four Layers, One Identity

AuthFI operates across four layers simultaneously:

Application Layer — SDK middleware validates JWT and checks permissions in your application code
Cloud Layer — OIDC federation provides short-lived credentials for AWS, GCP, Azure, and OCI
Service Layer — eBPF validates JWT at the Linux kernel (~45μs, no sidecars, no code changes)
Network Layer — eBPF controls TCP connections so only authorized processes reach databases

Built from Specifications

We don’t wrap third-party libraries. AuthFI implements:

OAuth 2.0 + PKCE (RFC 6749, RFC 7636)
OIDC (OpenID Connect Core)
SAML 2.0 (OASIS specification)
SCIM 2.0 (RFC 7644)
JWT (RFC 7519)
LDAP directory integration

AI Security — Included for Everyone

Every AuthFI deployment includes AI-powered threat detection:

Impossible travel detection
Credential stuffing prevention
Behavioral risk scoring
Privilege escalation alerts
Cross-layer correlation

This isn’t an enterprise upsell. It’s included in the free tier.

What’s Next

AuthFI is currently in beta. General availability is planned for Q2 2026. We’re shipping 7 SDKs (Go, Node.js, Python, Java, C#, PHP, Ruby) on day one.

Visit authfi.app to learn more, or contact us to discuss how AuthFI can support your infrastructure.