ovlt

> Most auth servers demand more RAM than your actual app — Keycloak at 512MB, Authentik at 735MB. OVTL is a self-hosted OAuth2 + OIDC server written in Rust that idles at ~20MB, giving you multi-tenant isolation, zero-knowledge encryption, MFA, Passkeys and social login in a single binary that runs on the cheapest VPS you can find. What makes it different is the security model — field-level encryption and zero-knowledge design mean data leaks expose ciphertext, not credentials. And because it's self-hosted with no per-seat pricing, you can scale a SaaS from day one without auth costs ever becoming a problem.