Rising Star FusionAuth

FusionAuth is a developer-focused Consumer Identity and Access Management (CIAM) platform, spun out of Inversoft in 2017 and headquartered in Broomfield, Colorado. Operating primarily in North America with some European customers, it has hundreds of customers and steady revenue following a sizable funding round. CIAM differs from traditional workforce IAM by focusing on onboarding and authenticating external consumers, using progressive profiling to collect user data over time and offering multiple authentication methods aligned to varying assurance, regulatory, and business requirements. Digital transformation and the growing need to manage IoT device identities alongside human identities are major modernization drivers, while account takeover fraud and session hijacking have become prominent threats requiring built-in controls or integrations.

FusionAuth’s standout differentiator is single-tenant deployment, addressing demand for stronger logical/physical separation and data localization. It supports containerized deployment on-premises or in any customer-controlled cloud, while also offering SaaS hosted on public IaaS across multiple continents. For B2B2C scenarios, customers can create and isolate multiple instances and manage them centrally via a unified dashboard. The platform supports customizable self-registration templates, federation via OpenID Connect and SAML, and migration-enabling standards such as LDAP and SCIM, positioning it as an option for organizations extending or replacing legacy or homegrown CIAM systems.

Authentication options include email/SMS OTP, popular authenticator apps, YubiKeys, mobile biometrics, WebAuthn, and FIDO passkeys. Security features include risk-based authentication with device intelligence and “impossible travel,” plus session hijacking mitigations such as per-application timeouts and sliding refresh tokens. Challenges include lacking identity verification and third-party connectors, requiring customer coding for consent and some privacy compliance needs.

• FusionAuth was founded in 2017 and is headquartered in Broomfield, Colorado, United States.
• The company was spun out of Inversoft in 2017.
• FusionAuth has hundreds of customers across North America and some in Europe.
• The company is funded at the Series A stage.
• FusionAuth offers a free open-source version with basic features that can be used for development and production depending on requirements.
• FusionAuth supports single-tenant deployment options, including containerized deployments on-premises or in customer-controlled cloud environments.
• FusionAuth is also offered as a SaaS hosted on public IaaS across multiple continents.
• Authentication methods include email/SMS OTP, Authy, Duo, Google and Microsoft Authenticator, YubiKeys, Android/iOS biometrics, and FIDO passkeys.
• FusionAuth supports OpenID Connect and SAML for identity federation, plus LDAP and SCIM for migration and provisioning-related needs.
• FusionAuth’s SaaS instances are SOC 2 Type 2 certified.

• “CIAM solutions are designed to onboard and authenticate end-user customers and consumers rather than employees.”
• “CIAM systems use progressive profiling techniques, wherein consumer profile data is gathered as needed over time.”
• “FusionAuth's biggest USP (Unique Selling Proposition) is its support for single-tenant instances.”
• “Many organizations are looking for more logical and physical separation of instances, as well as guaranteed data localization.”
• “Customers can create and isolate multiple individual instances for increased security for B2B2C scenarios.”
• “Session hijacking, where attackers use man-in-the-middle (MitM) tactics or buy compromised session tokens from the dark web, is another trending threat.”
• “Consent collection for privacy regulatory compliance requires some coding and configuration by customers.”
• “Identity verification functions are not currently available and there are no connectors to third-party services.”
• “Digital transformation has been a big driver for CIAM modernization.”
• “Organizations looking for CIAM solutions, especially those with homegrown CIAM systems that are deeply entrenched with legacy business apps, should take a look at their platform.”