ProAuth

$ proauth --init

ProAuth

Intelligent authentication & access management — for everyone.

An intelligent authentication and access-management platform — RFC-compliant MFA, real-time proxy/VPN defense, and an explainable AI risk engine that guards every session, not just the login.

Google Play Coming soon to Google Play Notify me

// what is ProAuth

ProAuth is a purpose-built identity platform — a fully-owned, self-hostable alternative to generic third-party auth tools, for anyone who takes security seriously.

It fuses TOTP/HOTP multi-factor authentication, a real-time anti-proxy & geo-intelligence engine, and an agentic AI access layer into a single security boundary you can put in front of any app, team, or service.

Engineered by ProvatSoft for its own ecosystem — and made available to individuals, teams, and enterprises everywhere.

// built for everyone

Serious security that feels effortless — whether you build software for a living or just want your accounts kept safe.

Sign in without the hassle

Generate secure codes or approve a login with a single tap. No passwords to memorize, no sticky notes.

Only you get in

Even if someone steals your password, they can't reach your accounts without your device in hand.

Suspicious logins, blocked

ProAuth quietly stops sign-ins from risky locations, VPNs and bots — before they ever get near you.

Your privacy, respected

No ads. No tracking. No selling your data. Self-hosted and built so your information stays yours.

Never get locked out

Lost your phone? Backup codes and simple recovery get you back in — no frantic support tickets.

Know the moment something's off

Get a heads-up about new or unusual sign-ins, so you're always the first to know.

// getting started

Up and running in three simple steps.

  1. Get the app

    Download ProAuth on your phone and set up your secure profile in under a minute.

  2. Connect your accounts

    Scan a QR code or tap to link the apps and services you already use every day.

  3. Sign in with confidence

    Approve logins with one tap and let ProAuth watch your back, around the clock.

// under the hood

For the technically curious — the engineering that powers every one of those benefits.

MFA Authentication Engine

TOTP/HOTP compatible with any RFC 6238/4226 authenticator (Google Authenticator, Authy, Microsoft Authenticator). Single-use backup codes and risk-adaptive step-up challenges.

  • RFC 6238
  • RFC 4226
  • Backup codes

Anti-Proxy & Geo-Intelligence

Real-time IP reputation and ASN analysis blocks Tor, VPN and datacenter origins. Four enforcement modes — HARD_BLOCK, CHALLENGE, FLAG_ONLY, TRUST_EXCEPTION — decided in <150ms.

  • MaxMind
  • AbuseIPDB
  • 4 modes

Agentic AI Access (URS)

Per-user behavioral baselines drive a real-time 0–100 User Risk Score. The engine autonomously suspends, challenges or restricts sessions — with human-readable explanations for every action.

  • Behavioral AI
  • Explainable
  • Impossible-travel

Tamper-proof Audit Logging

Immutable, cryptographically hash-chained logs with 24-month retention and SIEM integration. Pre-formatted evidence packs for ISO 27001 and SOC 2 Type II.

  • Hash-chained
  • 24-month
  • SIEM

Role-Based Access Control

Deny-by-default RBAC with server-side authorization on every route. Signed RS256 JWT sessions bound to device fingerprint and IP subnet, with per-user concurrent-session limits.

  • Deny-by-default
  • RS256 JWT
  • Session limits

Integration API

A REST API and webhooks to embed ProAuth across your own products and third-party clients. OpenAPI 3.0 spec, signed tokens accepted by every downstream service.

  • REST
  • Webhooks
  • OpenAPI 3.0

// security posture

// get the app

The ProAuth authenticator app is coming to Android. Get notified the moment it lands on Google Play.

Google Play Coming soon to Google Play

// notify me

Drop your email and we'll ping you when ProAuth ships. No spam — just the launch.