Keep your data.

A security key in your iPhone, iPad or Mac. Only your face or finger can use it.

Try Live Demo View TCO Analysis

3-Year Total Cost of Ownership

DUO charges per seat, per month, every year. Recluda is a one-time license plus a flat annual support plan, on infrastructure you own.

Organization Size Cisco DUO Essentials
list price, 3 years
Recluda
license + support, 3 years
You Save
100 users $10,800 $3,899
$2,999 license + $450/yr support
64%
500 users $54,000 $12,999
$9,999 license + $1,500/yr support
76%
2,000 users $216,000 $38,999
$29,999 license + $4,500/yr support
82%
10,000 users $1,080,000 $129,999
$99,999 license + $15,000/yr support
88%

DUO: Essentials tier at list price ($3/user/month), from publicly available Cisco rates Q1 2026; negotiated volume discounts may be lower. Recluda: one-time license including the first year of support, then 15% of the license per year for updates, security fixes and support. Runs on your existing VM or a redundant pair of Raspberry Pi 5 units (~$160 hardware, not included above). Contact Quantum V^ LLC for MSSP and multi-tenant terms.

Feature Parity

Everything you use DUO for, on servers you own.

Capability Cisco DUO Recluda
OIDC / OAuth2 ✓ ✓
Push MFA / Biometric approval ✓ ✓
Number matching ✓ ✓
RADIUS bridge ✓ ✓
JWKS / JWT token issuance ✓ ✓
Admin console ✓ ✓
Multi-tenant isolation ✓ ✓
Self-hosted / on-premises ✗ ✓
No per-seat monthly fee ✗ ✓
Key locked in the Secure Enclave, never leaves the device ✗ ✓
Runs on Raspberry Pi ✗ ✓

Platform Capabilities

Five implementation phases, all live in production.

OIDC Identity Provider

  • RFC 8628 Device Authorization Grant
  • JWKS endpoint + JWT issuance
  • OpenID Connect discovery
  • Secure Enclave biometric-key approval
  • Hardware-key claims (amr: hwk, mfa)

RADIUS Bridge

  • Translates RADIUS Access-Request → OIDC
  • Works with any RADIUS-capable infrastructure
  • VPN, network access, legacy systems
  • No infrastructure changes required
  • Live on UDP 1812

Multi-Tenant Architecture

  • Full tenant isolation per organization
  • API key per tenant for client registration
  • Single deployment, unlimited tenants
  • MSSP-ready — zero marginal cost per tenant
  • Admin console with tenant management

Recluda OIDC

Try the Device Flow

Click below to start a real OIDC Device Authorization request. You'll get a user code to approve on a second device — the same flow enterprises use to authenticate users via TV apps, CLIs, and IoT devices.

Approve it with Recluda on your iPhone, iPad or Mac.

Ready to replace DUO?

Enterprise licensing and MSSP partnerships available. Contact Quantum V^ LLC for terms.