Freedom251 › Passkey Authentication Software

Wenme

Paid APISelf-hostedWeb

What Wenme is

Wenme is a passwordless identity platform for banks and regulated enterprises. It is offered as on-premises, hosted, or hybrid deployment, with API, self-hosted, and web platforms listed. Authentication options include passkeys, TOTP, magic links, backup codes, SAML federation, and OAuth. Organizations can set passkeys to none, encouraged, or required, with overrides for individual OAuth apps. Wenme lists FIDO2/WebAuthn, OAuth 2.1, OpenID Connect, SAML 2.0, SCIM 2.0, LDAP/AD, and FAPI 2.0 support. SCIM provisioning can use Okta, Azure AD, or JumpCloud. Branding for each OAuth app includes 14 customizable fields. Integration guidance covers NextAuth.js, Auth.js, and compliant OIDC clients, with PKCE mandatory. Wenme says it stores no passwords and uses AES-256-GCM at rest and TLS 1.3 in transit. GDPR is implemented; SOC 2 and ISO 27001 certifications are pending. Pricing is available through sales.

Who it suits

Wenme is intended for banks and regulated enterprises requiring passwordless authentication, directory synchronization, and configurable deployment. It also suits teams integrating OIDC or OAuth applications with enforced PKCE.

What it does well

Supports multiple passwordless authentication methods
Offers on-premises, hosted, and hybrid deployment
Lists broad identity and federation standards
Provides per-app branding controls
SCIM sources include Okta, Azure AD, and JumpCloud

What to know first

Refresh-token grant is currently unsupported
SOC 2 and ISO 27001 certifications are pending
Pricing and user limits require sales contact
PKCE is mandatory for documented integrations

Plans

Plan	Billed and limits	Price
Per-user-per-month license	Price and user limits not stated; contact sales	On request
Perpetual license	Price and user limits not stated; contact sales	On request

As wenme.net lists them, read 9 Oct 2026. The maker's own page has the final word.

Verdict

Wenme provides configurable passwordless identity capabilities across several deployment models and standards. Buyers should account for the unsupported refresh-token grant and pending certifications when assessing fit.

Facts from Wenme's own pages

Authentication: It supports passkeys, TOTP, magic links, backup codes, SAML federation, and OAuth. · wenme.net, 9 Oct 2026
Branding: Per OAuth app, Wenme offers 14 customizable fields including logo, colors, fonts, favicon, footer, and legal links. · wenme.net, 9 Oct 2026
Company: Wenme is a KaritKarma Limited product, built and run in Dhaka, Bangladesh. · wenme.net, 9 Oct 2026
Compliance: The maker says GDPR is implemented, while SOC 2 and ISO 27001 certifications are pending; HIPAA and PCI DSS controls are described as in place. · wenme.net, 9 Oct 2026
Deployment: The product is offered on-premises, hosted, or hybrid. · wenme.net, 9 Oct 2026
Developer integration: Wenme documents OIDC/OAuth integration for NextAuth.js, Auth.js, and compliant OIDC clients, with PKCE mandatory. · wenme.net, 9 Oct 2026
Integrations: SCIM provisioning can use Okta, Azure AD, and JumpCloud as user lifecycle sources. · wenme.net, 9 Oct 2026
Notable limit: The documentation says refresh-token grant is currently unsupported. · wenme.net, 9 Oct 2026
Passkey policy: Organizations can set passkeys to none, encouraged, or required, with per OAuth app overrides. · wenme.net, 9 Oct 2026
Security: Wenme states that it stores no passwords and uses AES-256-GCM encryption at rest and TLS 1.3 in transit. · wenme.net, 9 Oct 2026
Standards: The platform lists FIDO2/WebAuthn, OAuth 2.1, OpenID Connect, SAML 2.0, SCIM 2.0, LDAP/AD, and FAPI 2.0 support. · wenme.net, 9 Oct 2026
Support: The security page says vulnerability disclosure reports receive a response within one business day. · wenme.net, 9 Oct 2026
What it does: Wenme is a passwordless identity platform built for banks and regulated enterprises. · wenme.net, 9 Oct 2026

Where Wenme stands on Freedom251

Passkey Authentication Software#45 of 55