# Authaz

> Authaz is an identity and access management (IAM) platform for the AI era —
> one identity model for humans, machines (M2M / mTLS), and multi-tenant
> organizations, with unified agent identity as a first-class part of the
> model. Login, machine-to-machine auth, mutual TLS, and fine-grained
> authorization live in the same SDK, with the same audit trail and policy
> engine. Built for AI-native startups, agent platforms, and B2B SaaS that
> ship multi-tenant on day one.

**Status: pre-launch.** The marketing site is live and early access is
rolling out to waitlist teams now, with general availability staged through
2026. The only action available today is joining the waitlist.

## What Authaz is

Authaz collapses three identity stacks — customer IAM, workforce IAM, and
machine/workload identity — into one model. Every token, policy decision, and
audit row carries organization context by default. Authentication methods
(password, passkey, magic link, OAuth, SAML SSO, MFA, SMS OTP, M2M tokens,
mTLS-pinned clients, and agent identities) share one API and one audit trail.
Authorization (RBAC, ReBAC, and per-tenant policy) is a managed primitive, not
something you rebuild per feature.

## Who it's for

- **AI SaaS & agent platforms** — agent identities, scoped tokens for model/LLM calls, per-action audit.
- **API platforms & machine workloads** — service-to-service traffic with mTLS and scoped M2M tokens, modeled like human sessions.
- **Modern multi-tenant SaaS** — workspaces, member roles, and customer-managed SSO modeled correctly out of the box.
- **B2B platforms graduating into enterprise** — SAML, SCIM, audit, and step-up available without replatforming or add-on bills.

## Key pages

- [Homepage](https://authaz.io/): product overview and positioning.
- [Products](https://authaz.io/products): full feature catalog (user management, SSO, multi-tenant orgs, MFA, RBAC, and more).
- [Pricing](https://authaz.io/pricing): MAU and machine-identity plans (Hobby / Starter / Pro / Scale / Enterprise). Machine-readable version at [/pricing.md](https://authaz.io/pricing.md).
- [Security](https://authaz.io/security): encryption, tenant isolation, key rotation, and compliance posture.
- [Auth0 alternative](https://authaz.io/alternatives/auth0): comparison and migration path from Auth0.
- [Cognito alternative](https://authaz.io/alternatives/cognito): comparison and migration path from AWS Cognito.
- [SaaS authentication](https://authaz.io/saas-authentication): authentication patterns for B2B SaaS.
- [Fine-grained authorization](https://authaz.io/fine-grained-authorization): RBAC, ReBAC, and per-tenant policy.
- [Changelog](https://authaz.io/changelog): launch progress and GA cutover.

## For AI agents

- [auth.md](https://authaz.io/auth.md): how agents obtain credentials and call Authaz-protected resources (registration, token exchange, mTLS, revocation).
- [Agent skills index](https://authaz.io/.well-known/agent-skills/index.json): callable skills, including the waitlist skill.
- [OAuth Protected Resource (RFC 9728)](https://authaz.io/.well-known/oauth-protected-resource)
- [OAuth Authorization Server (RFC 8414)](https://authaz.io/.well-known/oauth-authorization-server)
- [OpenID Provider Configuration](https://authaz.io/.well-known/openid-configuration)

## Key facts

- **Category:** Identity and Access Management (IAM) / Customer Identity (CIAM) / authentication and authorization platform.
- **Pricing model:** MAU and active-machine-identity allowances with no per-seat fees. Hobby starts at $5/mo; SAML SSO and multi-tenant support start with Starter at $29/mo; Enterprise is custom.
- **Auth methods:** 11+ methods through one API, including SAML SSO (IdP- and SP-initiated), MFA (TOTP, passkeys), M2M tokens, and mTLS.
- **Architecture:** multi-region active-active, sub-50ms p99 auth decision latency, immutable audit logs exportable to SIEM or S3.
- **Migration:** documented paths from Auth0, AWS Cognito, and homegrown auth.
- **Languages/SDKs:** TypeScript, Go, Python, Rust; REST API, webhooks, and CLI (declarative YAML config).