VPS plan
ZAP Spark
€7.29/ 30 days
- 4 GB RAM
- 2 CPU
- 60 GB NVMe
- 1 Gbit/s Uplink
Self-hosted identity providerAuthentik VPS hosting.
Deploy self-hosted Authentik in one click via Coolify, with full root access, DDoS protection and locations in Europe and America.
4.4Trustpilot
19,543+ Reviews
Packages 1–3 of 9
AuthentikConfigure yourself
Your project. Your setup.
No package fits? Choose your CPU, RAM and storage—you only pay for what your project actually needs.
Powerful CPUs
100 Gbit/s host network
Juniper Firewall
DDoS protection
Payment types
Visa
Mastercard
American Express
PayPal
Google Pay
Apple Pay
Klarna
Amazon Pay
What is Authentik?
Authentik: one login for all your self-hosted apps
Instead of juggling separate passwords for Nextcloud, Grafana, Jellyfin and every other tool, your users sign in once and get straight to work. Authentik is an open-source identity provider that handles logins, multi-factor authentication and user management for all of them via OIDC, SAML, LDAP or a forward-auth proxy. At ZAP-Hosting you deploy self-hosted Authentik in one click through Coolify on your own KVM VPS.
Because the VPS is yours, the user directory, sessions and audit logs stay on a server you control instead of a third-party cloud. Full root access lets you pin Authentik versions, adjust its environment variables, attach your own domain and run further apps next to it in Coolify, all behind the same login. SSH, Docker and the Coolify dashboard are there whenever you need them.
Features
Your identity layer, fully under your control
Single sign-on across your apps, login flows you can reshape step by step and instant security alerts, all managed from Authentik's own admin interface.
Federated user sources
Existing directories and social logins come together on one login page.
One-click deploy via Coolify
Authentik is running within minutes, without writing a single Docker Compose file.
One login for all your apps
Users sign in once and reach every connected app, with no extra passwords.
Customizable login flows
Shape every sign-in step by step and see exactly where a login stopped.
Security alerts on events
Get notified the moment a suspicious login or policy violation happens.
Full root access
Run updates, migrations and recovery commands yourself, straight over SSH.
Locations in Europe and America
Your server. Your location.
4 data centers in Europe and America — choose the location closest to your users.
Europe
FFM/Eygelshoven
America
Dallas
Los Angeles
Ashburn
Inside Authentik
What you can do with Authentik
Authentik gives your apps one central login with multi-factor authentication and lets you decide who may access what, with every session visible in one place.
Open-source IdPHomelab to teamStandards-basedFlow-driven logic
Authentik
Login
Authentik
Branded login page
One clean sign-in page for all your apps. Users log in with username or email and can stay signed in on trusted devices. They can also start a password reset themselves, so admins spend less time on lockouts.
Username or email loginRemember-me optionSelf-service password resetCustom branding per domain
Get started now
Authentik on your VPS in minutes — no complicated setup.
Instant setupCancel anytime1-click deploy
Host Authentik on a VPSBackups & snapshots
Your VPS stays restorable.
Snapshots let you roll back quickly. ZapX Pass unlocks Restore, manual Backups, and longer retention for daily Backups.
Backups with ZapX Pass
SECUREDZapX Pass
- Manual Backups
- Keep daily Backups longer
Snapshots for quick rollback
RECORDEDZapX Pass
- Snapshot before deployment
- Jump back immediately
- Snapshot with RAM
More control with ZapX Passextra storage, restore, Pass perks, and Lifetime VPS without activity checks
Reviews
What customers say about ZAP-Hosting
Real feedback on support and setup.
4.4
19,543+ Reviews on Trustpilot
FAQ
Frequently asked questions about Authentik
Answers to the most important questions before you start.
Order a VPS and choose Authentik in the one-click app installer. Coolify pulls the official images, sets up the PostgreSQL database and starts the server and worker containers. You then open the initial setup flow in your browser and create your admin account. There's no Docker Compose file to write, and you keep full root access afterwards. Learn more in the Help Center
- One-click deploy via Coolify
- Full root and SSH access afterwards
- Manual Docker setup still possible
Authentik's official documentation recommends at least 2 CPU cores and 2 GB of RAM. That covers a homelab or a small team with a handful of connected apps. If you run Nextcloud, Grafana or other services on the same VPS, add their requirements on top and choose a larger plan. Plans scale by RAM, CPU and storage, not by user count.
- Minimum: 2 CPU cores and 2 GB RAM
- More RAM for apps running alongside
- No per-user limits from the VPS
The open-source edition of Authentik is free, so you only pay for the VPS it runs on. Authentik Security sells optional Enterprise licenses with extra features and support, but you don't need one for SSO, MFA, LDAP or proxy authentication. The current price of every VPS plan is shown live in the pricing section.
- Open-source edition: free
- You only pay for the VPS
- Enterprise license is optional
Yes. Point a DNS record such as auth.yourdomain.com to your VPS IP and add the domain to the Authentik service in Coolify. Coolify's built-in reverse proxy then requests a Let's Encrypt certificate automatically, so logins run over HTTPS from the start. With root access you can also run your own proxy setup.
- Custom domain per service in Coolify
- Automatic Let's Encrypt certificates
- Own reverse proxy possible via root
Yes. Deploy apps like Nextcloud, Grafana or Jellyfin next to Authentik and connect them via OIDC, SAML or LDAP. Apps without built-in SSO can sit behind Authentik's proxy outpost, which asks users to log in before the app loads. Choose a VPS size that fits the combined workload.
- OIDC, SAML and LDAP providers
- Proxy outpost for apps without SSO
- All apps managed in one Coolify dashboard
You choose from VPS locations in Europe and America when you order. Pick the one closest to your users so sign-ins feel quick; teams in North America often start with Ashburn. Available locations are shown live in the order flow.
- Locations in Europe and America
- Pick the region closest to your users
- DDoS protection included with your VPS
For a single VPS, Authentik is often the more practical choice. It has a modern admin interface, flexible login flows and a built-in proxy outpost for apps without native SSO. Keycloak is a mature Java-based identity provider that suits large enterprise setups but usually needs more memory. Both are open source and run on a VPS with root access.
- Authentik: modern UI, proxy outpost included
- Keycloak: suited to large enterprise realms
- Both open source and self-hostable
The easiest way is a VPS with a one-click installer. At ZAP-Hosting, you deploy Authentik via Coolify on your own KVM VPS and keep full root access. Plan enough CPU and RAM for your users and connected apps. DDoS protection is included, and you can cancel anytime.
- One-click Coolify deploy
- Enough CPU and RAM for your users and connected apps
- Cancel anytime
Any more questions?
Contact SupportZAPX Dashboard
Your VPS dashboard at a glance
Watch resource usage, manage settings and open the console of the VPS running Authentik, all from one dashboard.
zapx.zap-hosting.com/vserver
VPS DDoS Manager tab
VPS DDoS Manager tab
ZapX AI Agent
Stuck on an Authentik setting? Ask the ZapX AI Agent
Get clear, step-by-step advice on Authentik providers, flows and resource sizing. The agent can apply changes after you confirm, or you apply them yourself.
Authentik setup helpSSO troubleshootingResource sizingThe agent can run steps after you confirm, or you apply them yourself.
The ZapX AI Agent is part of ZapX Pass, together with Backup storage for your VPS.
Explore ZapX PassZapX AI Agent
panel.zap-hosting.com
Why does my Authentik login end in a redirect loop?
Usually the external URL or the reverse-proxy headers don't match. Check that the domain set in Coolify matches the redirect URI in your provider and that HTTPS is forwarded correctly. I can walk you through both checks.
Where do I find the redirect URI?
Open the provider in the Authentik admin interface. The redirect URIs are listed in its settings, so you can compare them with the URL your app sends.
Performance
Responsive logins on your own VPS
Measured CPU, storage and network values show the headroom you have for quick sign-ins, policy checks and LDAP syncs, even when several apps rely on Authentik at once.
Top-tier Performance
High-performance VPS, CPU model depends on the location
ZAP-HostingPowerful server CPUs
Typical budget VPSHardware varies
Typical VPS plans without a published host CPU
confirmed 2026-07-01
Standard CPUPowerful server CPUs, model depends on the location
StorageEnterprise NVMe U.3, Ceph
Support24/7 AI + escalation
Use cases
Secure your self-hosted apps with SSO
From a family homelab to a growing team, Authentik puts one secure login in front of every app you run, on a VPS you control.
Ready to deploy?
Put every app behind one secure login
Instant setupCancel anytime1-click deploy
Host Authentik on a VPSZapX mobile appComing soon
Keep your identity server in your pocket
Check the status of your Authentik VPS from your phone, which helps when a login issue comes up while you're away from your desk.
Check VPS status at a glance
Start, stop or restart on the go
Reach support from anywhere
Also available
We also offer the following apps.
WireGuard, Coolify, monitoring, and more — one-click setup on your VPS.
Private Cloud
Nextcloud
NextCloud is a self-hosted, open-source platform that provides file storage, collaboration, and communication tools for seamless data management.
FilesSyncCollaboration
Automatic setup
Included
automation
n8n
n8n is an extendable workflow automation tool.
n8nworkflowautomation
Ready in ~2 min
Included
vpn
Wireguard Easy
The easiest way to run WireGuard VPN + Web-based Admin UI.
wireguardvpnweb
Ready in ~2 min
Included
media
Plex
Plex organizes video, music and photos from personal media libraries and streams them to smart TVs, streaming boxes and mobile devices.
mediaservermovies
Ready in ~2 min
Included
Password Security
Vaultwarden
Vaultwarden is a password manager that allows you to securely store and manage your passwords.
EncryptedSelf-hostedOne-click
No manual configuration
Included
cms
WordPress with MariaDB
WordPress is open source software you can use to create a beautiful website, blog, or app.
cmsblogcontent
Ready in ~2 min
Included
Also available
WireGuard, Coolify, monitoring, and more — one-click setup on your VPS.
755
Available apps
Benefit
All apps included
The app marketplace is included with your VPS — no extra charge per installation.
One-Click AppsNo app surcharge
Choose your apps in the configurator and get started in minutes.
Ready?
Your users, your logins, your server
Deploy Authentik in one click, connect your apps and keep every login on a server you control. Cancel anytime.
4.4/5 Trustpilot32,000+ Active serversSince 2010
No setup. No risk. Online in 60 seconds.
Flexible TermCancel anytimeOnline in 60 seconds
Preferred source on Google
