SHSelfHostIndex
CA

Caddy Security

Authentication and authorization plugin for Caddy

Identity & SSO ★ 2.3k stars Medium setup Apache-2.0

Caddy Security is an open-source plugin suite for the Caddy web server that adds authentication portals, authorization policies, and SSO. It provides self-hosted identity features directly inside the proxy.

Official siteSource code

Key features

  • Auth portal for Caddy
  • OAuth and SAML support
  • Authorization policies
  • MFA support

Strengths

  • Released under the Apache-2.0 license
  • Active community (2.3k GitHub stars)
  • Written in Go
  • Tiny footprint — runs in 128 MB RAM

Is Caddy Security secure?

No known vulnerabilities affect Caddy Security's latest release (v1.4.1). OSV.dev lists 1 past advisory for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2023-52430, published 2024-02-12 (975 days ago)

Source: OSV.dev, checked 2026-10-14. How this is measured.

Caddy Security replaces

Self-hosted Cloudflare Access alternatives

Health badge

Maintain Caddy Security? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 89 · excellent

Markdown
[![SelfHostIndex health score for Caddy Security](https://selfhostindex.com/badge/caddy-security.svg)](https://selfhostindex.com/app/caddy-security/)
HTML
<a href="https://selfhostindex.com/app/caddy-security/"><img src="https://selfhostindex.com/badge/caddy-security.svg" alt="SelfHostIndex health score for Caddy Security"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/caddy-security.svg
   :alt: SelfHostIndex health score for Caddy Security
   :target: https://selfhostindex.com/app/caddy-security/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Caddy Security

3 head-to-head comparisons.

Similar identity & sso apps