Authentik is an open source Identity Provider that aims to unify identity needs into a single platform, replacing traditional solutions like Okta and Active Directory. The XZ backdoor incident highlighted the importance of transparency in open source security products, as it was caught by the community due to being open-source. This approach provides visibility into code, owners, and changes, making it harder for attackers to exploit vulnerabilities. In contrast, proprietary solutions lack this transparency, making it difficult for users to trust their identity management systems. Authentik Security is built on top of authentik, with both the enterprise version and source code available, ensuring transparency by default. This approach also aligns company and community incentives, as the business has a clear financial incentive to support the open source project. By building in the open, Authentik can operate transparently, define clear standards around documentation and communication, and publish the results of pen tests, providing security benefits for users and customers. However, relying on community-maintained projects also comes with risk, as seen in the XZ project's vulnerability due to a lack of dedicated staff. To mitigate this risk, open core models can provide a middle ground between business ownership and community involvement. By maintaining an open source project, Authentik can build trust with its users, attract top talent, and continue to develop its security features through transparency and collaboration.