AuthBeacon is a lightweight browser extension that discovers login pages across your organization. Full visibility into shadow IT — no agents, no proxies, no traffic inspection.
Your employees use more apps than you think.
The average organization has 3x more SaaS applications than IT knows about. Unmanaged apps create security gaps, compliance risks, and redundant spending. Most discovery tools require network proxies, endpoint agents, or CASB solutions that are expensive and invasive.
Three steps. Zero complexity.
Install on Chrome or Edge. Push silently to your fleet via Group Policy or Intune. IT configures the API key — end users don't need to do anything.
The extension passively scans for password fields in the DOM. When one is found, it reports the page URL and title — nothing else. No passwords, no form data, no browsing history.
Your dashboard shows every discovered application, who's using it, SSO coverage, and trends over time. Export to CSV or XLSX for compliance reporting.
Everything you need for app discovery.
Scans the DOM for password fields. No traffic interception, no proxy, no man-in-the-middle. Works on any page, including SPAs with dynamic login forms.
Isolated data per organization. Multiple companies on a single instance. Tenant-scoped API keys, member management, and role-based access control.
Sign in with email or enterprise SSO via OpenID Connect. Auto-provision users by email domain. Supports Azure AD, Okta, Google Workspace, and more.
Know which users and devices are accessing which applications. Each sighting captures device ID, user email, browser, and OS for full attribution.
Real-time overview with summary cards, top domains, trend charts, and recent discoveries. Export your full app inventory to CSV or XLSX.
Push extension config silently via Chrome/Edge managed policy. No end-user setup required. Works with Group Policy, Intune, and Jamf.
See which apps support SSO — and which don't.
AuthBeacon includes a catalog of 100+ known SSO-capable applications. Every discovered app is automatically matched against the catalog and labeled with its SSO status.
Built for enterprise trust.
Your data stays on your infrastructure. We never see, touch, or process your discovery data.
Only detects the presence of password fields. Never reads, captures, or transmits passwords or form data.
All communication between the extension and your server uses HTTPS. API keys are SHA-256 hashed.
Every API key creation, member change, and SSO override is logged with user, tenant, IP, and timestamp.
Deploy in minutes. No agents, no proxies, no complexity.