Opportunities › Access management and identity federation › Proposed app
Doorplan
Single sign-on and plain-language access rules for teams with many apps
- Score
- 45
- confidence 53
- Evidence
- 6
- items on the page
- Rivals
- 2
- named in sources
- First version
- 60 d
- estimate
- Type
- Desktop app
- PWA: runs in the browser, installs on Mac and Windows
- Market since
- 2001
- Mature market · AI estimate
ScreensConcept
Desktop app: IT teams write access rules in plain language, check permissions, review change history, and manage policies—work that demands careful configuration and review. Sample screens on a computer, in the proposed brand. Their numbers are sample data.
Apps
All sign-ins healthy6 apps
About this appAI proposal
Doorplan is a hosted sign-in and access service for engineering and IT teams that run several web, mobile and cloud apps. Connect each app once with standard protocols, and people sign in one time and reach what they are allowed to reach.
Access rules are written as plain sentences, such as 'Contractors can open Billing only from managed devices', and checked in a preview before they go live. Each rule shows who it affects today.
It is for teams who want central control without running or tuning a heavy identity platform. Setup is guided, every change is logged, and a rule can be rolled back in one tap.
- Tagline
- Every app, one front door, rules you can read.
- Voice
- ClearCalmDirect
- Why this name
- A plan for your doors: it names what the product does, deciding who goes through which door, in two plain words.
In the first version
Members say which features they would use. It tells PWAS what people want; it changes no score.
Guided app connection
Add an app with a step-by-step flow for OpenID Connect or SAML. A test sign-in confirms it works before anyone else is affected.
No member yet
Single sign-on across apps
One login covers web, mobile and cloud apps. End a person's sessions in every app at once.
No member yet
Policies in plain language
Write rules as readable sentences. Each shows the people and apps it touches before you save.
No member yet
Access preview
Pick a user and an app and see whether access is allowed and which rule decided it.
No member yet
Brand identityAI proposal
Check the name against trademark registers before using it.
Palette
#0F4C5CDeep Teal · primary#F6F4EFPaper · surface#14262BInk · text#E8A33DAmber · accent#4C8C5AMoss · data: allowed
Typography
Aa
Doorplan
ABCDEFGHIJKLMNOPQRSTUVWXYZ 0123456789
Every app, one front door, rules you can read.
PricingAI proposal
Verified: Okta's pricing page lists paid plans from $6 to $17 a month; Ping Identity's lists $3 to $6 by usage. Tiers sit at or below these as a starting point to test. Units are not stated in the material.
Free
Free
- Up to 5 apps
- Up to 10 people
- Single sign-on
- 30-day change history
Team
$4 a month
- Per person, per month
- Unlimited apps
- Plain-language policies
- Risk-aware sign-in
- 1-year change history
Business
$8 a month
- Per person, per month
- Everything in Team
- Access requests and approvals
What it could be worthEstimate
What a software business making this much sells for today, from real deals. Pick a monthly revenue.
If it makes
Worth about
$194,000
Sale range $132,000 to $263,000
$120,000 a year in revenue
From 87 software businesses listed and sold on Empire Flippers in the last year, revenue vetted by the broker: they sell for about 19× their monthly revenue, most between 13× and 26×.
Measured on profit, the middle deal is 32× monthly net profit: about 2.7 years of profit.
An estimate, not an offer or financial advice. A real price depends on profit, growth, churn, how much of the work is the owner's, and the buyer.
How it would growAI proposal
How the product would reach new customers through its own use, and how the first ones would be found. A plan to test, not a result.
- Built-in loop
- Partners and integrations. Each connected app gets a ready setup guide and sign-in button listing. Listings in app marketplaces and developer docs send teams of those apps to Doorplan.
- Do they become customers?
- People reaching the sign-in page are employees, not buyers. Test whether admins at app vendors and customers adopt it from guides and listings, and whether they convert to Team.
- First customers
- Engineering leads at software companies of 20 to 100 people running five or more internal and customer-facing apps without a dedicated security team.
- Where to reach them
- Developer communities: Post worked examples of moving five apps to one sign-in in engineering forums and newsletters.
- Open-source identity users: Offer migration guides to teams running self-hosted access tools who want hosting handled.
- Direct outreach: Message CTOs and IT leads at small software firms with a free setup session.
- First milestone
- Ten teams connect three or more apps, and five convert to a paid plan within 60 days.
Why people already pay for this
- VerifiedGitHub repository gained 899 stars in 3357 days
- Public claimOpenAM provides single sign-on, adaptive authentication, and centralized policy control capabilities for managing identity and access.
- Public claimAccess management is needed across web, mobile, and cloud applications, indicating ongoing demand for this type of solution.
- VerifiedPing Identity's pricing page lists 2 paid plans, from $3 to $6 by usage, plus prices on request for larger customers
Tech stack
Every proposal builds on the same PWA base, installable from the browser on any phone or computer. Dashed boxes are what this app adds.
- AppNext.js and TypeScript
- PWAManifest and service worker
- UITailwind CSS
- Data and authSupabase Postgres
- PaymentsStripe
- EmailResend
- HostingVercel
- This app · Identity protocolsOpenID Connect and SAML libraryApps connect through standard sign-in protocols; a maintained, audited library avoids hand-written token code.
- This app · Secrets and signing keysManaged key service (KMS)Token signing keys need hardware-backed storage and rotation, not plain database columns.
RisksAI inference
- TechnicalA sign-in service is a single point of failure. Downtime locks everyone out of every connected app, so uptime and a fallback path must be proven early.
- CommercialIncumbents are trusted by large companies per their own site. Small teams may still prefer a known vendor or free open-source options.
- RegulatoryHolding customers' identity data brings security reviews and likely audit requests such as SOC 2 before larger buyers sign.
- TechnicalPlain-language rules must map exactly to precise policy logic. Ambiguous wording could grant or deny wrong access.
- CommercialPer-person prices at or below Okta and Ping leave thin margins on the free tier and support.
Everything marked AI proposal or AI inference was written by a model from the evidence on the opportunity page. The proposed name must be checked against trademark registers before it is used.