--- layout: home title: Home ---

The Java security engine to protect all your web applications

Available for most frameworks/tools:
J2ESpring BootSpring Web MVCSpring SecurityApache Shiro
Play 2.xVertxSpark JavaRatpackUndertow
CAS serverDropwizardKnox HadoopJooby

Supports most authentication mechanisms:
OAuth (Facebook, Twitter, Google...) - SAML - CAS - OpenID Connect - HTTP - OpenID - Google App Engine
LDAP - SQL - JWT - MongoDB - Stormpath


and authorization mechanisms:
Roles / permissions - Anonymous / remember-me / (fully) authenticated
CORS - CSRF - IP address - HTTP Security headers