Block anonymous traffic
at the edge
Authentication proxy powered by Cloudflare's global network. Protect your internal tools with Google OAuth — no code changes required.
Everything you need to protect your apps
AuthProxy handles authentication at the network edge, so you can focus on building.
Edge Blocking
Unauthenticated requests are blocked at Cloudflare's edge, before they ever reach your server. Reduce attack surface and save bandwidth.
Zero Code Changes
Add authentication to any HTTP service. No SDK, no library, no code changes. Works with any language or framework.
Identity Headers
User identity is passed to your app via trusted X-Auth-Email headers. Build personalized experiences without managing sessions.
Built-in CDN, WAF & SSL
Every site gets Cloudflare's CDN, DDoS protection, Web Application Firewall, and automatic SSL certificates. No extra setup.
Access Logs
See who accessed your app, when, and from where. Real-time visibility into authentication events for security and compliance.
Flat Pricing
No per-user fees that scale unpredictably. Pay a flat monthly rate regardless of how many users authenticate.
Protect your app in minutes
Three simple steps to add authentication to any HTTP service.
Create a Site
Add your app in the dashboard. Get a unique subdomain like admin-acme.on.authproxy.app.
Configure Access
Set allowed email domains or specific addresses. Only authorized users can access your app.
Done!
Your app is protected. AuthProxy handles OAuth, sessions, and passes user identity to your backend.
User identity is forwarded to your server via trusted headers:
// Headers received by your server
X-Auth-Email: [email protected]
X-Auth-Name: Alice Smith
X-Auth-ID: 123456789Simple, predictable pricing
No per-user fees. Start free, upgrade when you need more.
Free
- 1 protected site
- Up to 10 allowed users
- Google OAuth
- Access logs (7 days)
- Community support
Pro
- Up to 5 protected sites
- Up to 50 allowed users
- Google + Microsoft OAuth
- Access logs (30 days)
- Custom domains
- Priority support
Need more sites or users? Contact us for enterprise pricing.
How we compare
AuthProxy vs. popular alternatives. Honest comparison — including our limitations.
vs oauth2-proxy (self-hosted)
| Feature | AuthProxy | oauth2-proxy |
|---|---|---|
| Managed service (no ops) | ✓ | ✗ |
| Zero infrastructure to manage | ✓ | ✗ |
| Built-in CDN & WAF | ✓ | ✗ |
| Automatic SSL certificates | ✓ | ✗ |
| Setup time | 5 minutes | 1+ hours |
| Multiple OAuth providers | Google, Microsoft | 10+ providers |
| Self-hosted option | ✗ | ✓ |
vs Cloudflare Access
| Feature | AuthProxy | Cloudflare Access |
|---|---|---|
| Flat pricing | $29/mo (50 users) | $350/mo (50 users) |
| No per-user fees | ✓ | ✗ |
| Edge-based blocking | ✓ | ✓ |
| Identity headers | ✓ | ✓ |
| Access logs | ✓ | ✓ |
| SAML/OIDC support | ✗ | ✓ |
| Device posture checks | ✗ | ✓ |
Our honest limitations
- • Google & Microsoft OAuth only — No SAML, OIDC, or other identity providers yet
- • No device posture checks — We verify identity, not device security
- • Newer product — Less battle-tested than Cloudflare Access
Ready to protect your applications?
Start for free. No credit card required. Protect your first site in under 5 minutes.