Your apps.
Your front door.

Caddy Security has been a game-changer for managing my internal and external web servers. It seamlessly integrates multiple services through its robust reverse proxy functionality. What truly impressed me was its ability to safeguard sensitive website areas during relaunch. Caddy Security ensured only authorized persons could access these sections for testing, providing an extra layer of confidence before publishing. The integration with Shibboleth as a custom identity provider further strengthens the overall security posture. In a nutshell, Caddy Security simplifies server management while significantly bolstering security.

Caddy serves as a critical entry point for our network appliance's API. Securing this API was essential, and Auth Crunch provided an ideal solution. AuthCrunch's implementation streamlined the process of integrating the necessary authentication and authorization mechanisms. This ease of use saved us valuable time and resources, while ensuring the robustness of our API's security posture.

The Caddy Security team was quick to address and fix security edge-cases relevant to our production environments. The plugin has made handling server-level authentication with Caddy a breeze.

Caddy Security is a well-engineered solution and the LDAP integration is a must-have when building SaaS apps in many large enterprises. Paul does an amazing job maintaining this project and is very proactive about seeking feedback and adding new features to it. I encourage everyone who uses the Caddy web server to go check it out.

My home network is more secure and easier to manage thanks to AuthCrunch and Caddy. I can manage external access to my at-home server from a well known OAuth2 provider with ease now. AuthCrunch being open source also gives me confidence knowing how it all works. Paul is extremely knowledgeable, helpful, and dedicated to making a great product!

I needed a reliable way to secure my home server and its services behind a reverse proxy with authentication and authorization with Google Identity. After some searching I found AuthCrunch (in the form of caddy-security) which I quickly realised would check off every need I had. After some short tinkering with configuration, which was quite easy with inspiration from the template Caddyfiles provided, I was up and running and it just worked. Awesome!

I am currently working for "Volkswagen Digital Solutions" and we move from nginx to Caddy to have more flexibility in the server we were implementing, and started to implement the auth access we needed, but became cumbersome and our focus was not to implement a whole authentication/authorization process; finally we found caddy-security which gave us a great push forward to keep implementing what was really needed (our business logic). Not only do we use it, but it was easy to collaborate in the project to enhance it with real use cases we were working on, having a smoother and quicker development.

I have had the pleasure of using the caddy-security plugin for several years. From the outset, what struck me most was the simplicity of its configuration. Unlike many other security tools that require navigating a labyrinth of settings, caddy-security offers a clear and straightforward path to securing my applications. My experience with the caddy-security plugin has been exceptionally positive. The developer and the community around this project have created something truly remarkable. The blend of ease of use, comprehensive documentation, community support, and robust design makes it a standout choice for anyone looking to secure their web applications efficiently and effectively.

Caddy Security helps me add additional security for all services I deployed on my DevSecOps cluster. It can act's as the earliest authentication layer protecting the service from any unauthenticated HTTP request without disrupting the real (browser-based) authentication flow used by the protected services. The end result was like having VPN but one that gets connected without leaving your browser, hence avoiding dedicated client software installation.