Shared passwords
One login for everyone. Passwords float around in chats, can't be revoked, and a leak hands access to outsiders.
Works today
Your team bids on the same Copart and IAAI auctions as always. Monobid is a secure shell around them — one login, broker access to the sites, and a full record of who did what: every bid, purchase and won lot, with a screenshot as proof.
Works with Copart · IAAI

The problem we solve
Dealer teams bid on auctions through shared accounts. Today that means risk and mess.
One login for everyone. Passwords float around in chats, can't be revoked, and a leak hands access to outsiders.
Who placed this bid? Who bought this car? A shared account simply has no answer.
Won lots get keyed into spreadsheets by hand at the end of the day — errors, duplicates and mystery purchases.
What monobid is
You bid on the same auctions you always have. Monobid wraps them in a secure shell: one login, brokered access to the sites, and a full record of who did what.
Desktop app

Web admin panel

How it works
A secure login (Zitadel OIDC + MFA) opens the desktop. Monobid never stores your password.
Launch the real site — Copart, IAAI — in a managed tab. Monobid signs in for you.
You place bids on the site exactly as before. Nothing about the auction changes.
Every click, bid and purchase is captured — tied to a person and a screenshot, then securely transmitted.
Won lots land in Purchases automatically, attributed to the buyer.
Inside the platform
Not mockups — the desktop app and web panel your team uses every day.
Desktop app · buying team
The app opens each auction site in its own managed tab and signs in for you — credentials are transmitted securely, never shown, never stored on your machine. You trade on the real site; Monobid records every action.

Web panel · results
The moment a buyer wins, the lot is written up as a purchase: pulled from recorded actions and each site's “Lots Won” page, attributed to the buyer and de-duplicated by VIN or lot number. No end-of-day spreadsheets.

Security
Security isn't a feature here — it's the architecture.
Sign-in runs through Zitadel (OIDC + PKCE) with multi-factor auth. Monobid keeps no passwords — only a short-lived token.
Zitadel OIDC · PKCE · MFA
Site credentials sit in a separate encrypted vault and are released for a single sign-in only — never reaching the desktop or the browser.
Broker sign-in · never on device
Roles grant exactly the rights that are needed. Every server call is checked and each company's data is isolated.
RBAC · isolation · server checks
Public traffic passes Cloudflare WAF, DDoS protection and TLS; internal services talk over mTLS behind Traefik. Tokens are never logged.
Cloudflare WAF · Traefik mTLS
Actions and screenshots are encrypted on the device and delivered over a reliable channel with retries — nothing is lost, all time-stamped and attributed.
Encrypted buffer · reliable delivery
The recorder hides sensitive fields, a domain blocklist keeps recording on-task, sessions can require a VPN, and there's no silent auto-login.
Redaction · blocklist · VPN · no auto-login
Supported auctions
Available now · verified live
Soon · connecting in stages
Pricing
Price depends on how many cars you purchase per month — from $15 per car.
Right on the lot page, the extension analyses a car's photos, spots the damaged parts and instantly estimates the repair cost — parts, paint and labour.


Monobid — a secure shell around the auctions you already use: broker sign-in, a full recorded trail, and won lots collected for you.