THANK YOU FOR SUBSCRIBING
× 
Enterprise Security Mag Weekly Brief
Be first to read the latest tech news, Industry Leader's Insights, and CIO interviews of medium and large enterprises exclusively from Enterprise Security Mag
Enterprise Security Magazine
SecureAuth
Authentication and Access Management for Frictionless Login Experience
Martin Savitt, CEO
The SecureAuth Intelligent Identity Cloud delivers out-of-the-box functionality that enables highly flexible and highly secure experiences for every identity, without the need for cumbersome implementations and integrations with third party services. The cloud-based service immediately provides key building blocks to enhance your identity management program and employs a big-data approach to identity intelligence, improving identity security by clearly identifying legitimate users and stopping bad actors.
With the customizability of their solution, the company has earned the appreciation of several satisfied customers from various industries such as utilities, retail, and public sector. In one instance, SecureAuth helped a healthcare provider that was struggling with the access requests to medical records. They wanted to secure their electronic transfer of medical records with varying levels of accessibility to contractors, employers, or insurers but, at the same time, didn’t want to put any barriers that hinder users (especially practitioners) from immediately addressing a medical emergency. SecureAuth added an alphanumeric method to its solution, which further enabled users to check symbols on their device, match options, and gain access. This made working on the system easier and faster as it eliminated the need to type the one-time code. In another instance, a life science company had numerous login journeys with different security requirements for employees and partners. They needed to provide a separate access experience for both employees and partners based on different security requirements rather than rely on a single workflow. With its full-stack access management solution, SecureAuth allowed the firm to ensure the seamless movement of employees and partners without having the need to enter the password every time they moved around.
We adhere to the FIDO2 standard that makes it quick and easy to manage the authentication by handling the password behind the scene and removing the human element from the process
With many such stories up their sleeves and a vast customer base in the North American region, the company is currently looking forward to extending its footprints in Europe and the Asia Pacific. SecureAuth is continually focusing on the flexibility of dynamic identity journeys and bringing continuous authentication into its solution portfolio. Following the continuous adaptive risk and trust assessment (CARTA) by Gartner, the company is expanding its ability to craft a smooth login journey by continually assessing different as well as changing risk factors to ensure secured access without interrupting the users. “We are trying to bring a centralized policy for online fraud, identity proofing, and behavioral biometrics to enhance the user experience,” says Ulery.
Company
SecureAuth
Management
Martin Savitt, CEO
Description
SecureAuth provides the most flexible and adaptable identity and access management solution to secure all workforce and customer identities everywhere: hybrid, on-prem, and cloud. Leading organizations use the SecureAuth® Identity Platform to secure access for everyone and everything that connects to their business. SecureAuth helps reduce threat surface, enable user adoption and meet business demands by delivering a frictionless user experience that drives engagement and productivity
SecureAuth News
SecureAuth and HashiCorp join forces to deliver passwordless continuous authentication
SecureAuth Awarded New Patents for Identity Proofing
Innovative Methods for Identity Verification Enhance Passwordless Continuous Authentication
IRVINE - SecureAuth, announced that the United States Patent and Trademark Office (USPTO) has granted the company three groundbreaking patents for identity verification using Bluetooth®, personal attributes, and environmental information. Capabilities derived from these patents are included in SecureAuth’s Arculix™ product portfolio.
“SecureAuth is dedicated to protecting organizations from the onslaught of cybersecurity identity threats,” stated Paul Trulove, CEO of SecureAuth. “Since inception, innovation has been part of our culture. We have been granted 57 patents with an additional 8 pending—a true testament of our unique vision and powerful platform. As identity threats continue to become more sophisticated, we spend countless hours innovating in an effort to stay ahead, ensuring our customers have the right technology in place to keep their customers and employees safe.”
The patents granted by the USPTO comprise:
1. U.S. Patent No. 11,562,455, titled "A Method and System for Identity Verification and Authorization of Requests by Comparing Them with an Active User Directory of Identity Service Entities Chosen by an Identity Information Owner," issued on January 24, 2023. This patent outlines methods for configuring specific authorization policies for an identity service provider, such as a credit agency. It also enables authorization of identity information requests by the identity owner.
2. U.S. Patent No. 11,657,396, titled "A System and Method for Bluetooth Proximity-Based Authentication," granted on May 23, 2023. This patent describes methods for establishing a proximity-based Bluetooth® communication link between a client device and an identity assurance provider. This ensures the correctness of authentication information and authorizes access by the identity assurance provider to entities like a bank.
3. U.S. Patent No. 11,677,755, named "A System and Method for Utilizing Multiple Egocentric and Allocentric Factors to Identify a Threat Actor," issued on June 13, 2023. This patent details methods for entity authentication through identification (ID) proofing, utilizing both personal attributes and environmental information.
IRVINE - SecureAuth, announced that the United States Patent and Trademark Office (USPTO) has granted the company three groundbreaking patents for identity verification using Bluetooth®, personal attributes, and environmental information. Capabilities derived from these patents are included in SecureAuth’s Arculix™ product portfolio.
“SecureAuth is dedicated to protecting organizations from the onslaught of cybersecurity identity threats,” stated Paul Trulove, CEO of SecureAuth. “Since inception, innovation has been part of our culture. We have been granted 57 patents with an additional 8 pending—a true testament of our unique vision and powerful platform. As identity threats continue to become more sophisticated, we spend countless hours innovating in an effort to stay ahead, ensuring our customers have the right technology in place to keep their customers and employees safe.”
The patents granted by the USPTO comprise:
1. U.S. Patent No. 11,562,455, titled "A Method and System for Identity Verification and Authorization of Requests by Comparing Them with an Active User Directory of Identity Service Entities Chosen by an Identity Information Owner," issued on January 24, 2023. This patent outlines methods for configuring specific authorization policies for an identity service provider, such as a credit agency. It also enables authorization of identity information requests by the identity owner.
2. U.S. Patent No. 11,657,396, titled "A System and Method for Bluetooth Proximity-Based Authentication," granted on May 23, 2023. This patent describes methods for establishing a proximity-based Bluetooth® communication link between a client device and an identity assurance provider. This ensures the correctness of authentication information and authorizes access by the identity assurance provider to entities like a bank.
3. U.S. Patent No. 11,677,755, named "A System and Method for Utilizing Multiple Egocentric and Allocentric Factors to Identify a Threat Actor," issued on June 13, 2023. This patent details methods for entity authentication through identification (ID) proofing, utilizing both personal attributes and environmental information.
SecureAuth Named a Leader in KuppingerCole Leadership Compass Report for Customer Identity and Access Management
Overall, Product and Innovation Leader Accolades Highlight SecureAuth's Commitment to Advanced Security Solutions for CIAM
IRVINE -SecureAuth, announced its recognition as a leader in the 2024 KuppingerCole Analysts AG “Leadership Compass report for CIAM.” SecureAuth has been distinguished in the Overall Leader, Product Leader, and Innovation Leader categories, underscoring its commitment to providing cutting-edge CIAM solutions that meet the evolving needs of today's digital landscape.
The KuppingerCole report provides an in-depth analysis of the CIAM market, identifying solutions that offer integrated security and compliance capabilities for protecting cloud-native applications throughout their lifecycle. SecureAuth’s CIAM platform, bolstered by its recent acquisition of Cloudentity, is highlighted for its cloud-first approach and scalable, microservices-based architecture.
“SecureAuth excels at B2B CIAM,” said John Tolbert, Director of Cybersecurity Research and Lead Analyst at KuppingerCole. “Their solution allows compliance checks and sanctions screening, custom deny lists, granular authorization, complex delegated administration for hierarchical business relationships, per-customer communications, per-app ToS, and dedicated per-customer portals.”
SecureAuth’s CIAM solution is distinguished by several key strengths:
• Exceptional B2B CIAM Support: SecureAuth excels in addressing complex B2B scenarios, offering features like custom deny lists, granular authorization, and complex delegated administration for hierarchical business relationships.
• Wide Range of Authenticators: The platform supports various authentication methods, including passwordless options, biometric authentication, and all flavors of FIDO, ensuring robust security and user convenience.
• Modern, Secure Architecture: Leveraging cutting-edge technologies such as Docker, Kubernetes, and Istio, SecureAuth delivers a cloud-agnostic solution that can be deployed across public and private cloud environments.
• Dynamic Authorization: The integration of Cloudentity’s dynamic authorization capabilities allows for fine-grained, real-time access control, enhancing security and compliance for sensitive transactions.
“Being recognized as an Overall leader and as a leader in both the Product and Innovation categories by KuppingerCole is a testament to our team’s dedication to pushing the boundaries of what's possible in identity security,” said Brook Lovatt, Chief Product Officer at SecureAuth. “Our focus on developing advanced, user-friendly, and secure authentication solutions for both the CIAM and workforce identity space is unwavering.”
The report emphasizes the growing importance of CIAM solutions that cater to both B2B and B2C use cases, with a significant focus on identity verification, fraud prevention, and compliance with privacy regulations. SecureAuth’s robust offering, coupled with its ability to integrate with various third-party services, positions it as a comprehensive solution for organizations looking to enhance their identity and access management capabilities.
IRVINE -SecureAuth, announced its recognition as a leader in the 2024 KuppingerCole Analysts AG “Leadership Compass report for CIAM.” SecureAuth has been distinguished in the Overall Leader, Product Leader, and Innovation Leader categories, underscoring its commitment to providing cutting-edge CIAM solutions that meet the evolving needs of today's digital landscape.
The KuppingerCole report provides an in-depth analysis of the CIAM market, identifying solutions that offer integrated security and compliance capabilities for protecting cloud-native applications throughout their lifecycle. SecureAuth’s CIAM platform, bolstered by its recent acquisition of Cloudentity, is highlighted for its cloud-first approach and scalable, microservices-based architecture.
“SecureAuth excels at B2B CIAM,” said John Tolbert, Director of Cybersecurity Research and Lead Analyst at KuppingerCole. “Their solution allows compliance checks and sanctions screening, custom deny lists, granular authorization, complex delegated administration for hierarchical business relationships, per-customer communications, per-app ToS, and dedicated per-customer portals.”
SecureAuth’s CIAM solution is distinguished by several key strengths:
• Exceptional B2B CIAM Support: SecureAuth excels in addressing complex B2B scenarios, offering features like custom deny lists, granular authorization, and complex delegated administration for hierarchical business relationships.
• Wide Range of Authenticators: The platform supports various authentication methods, including passwordless options, biometric authentication, and all flavors of FIDO, ensuring robust security and user convenience.
• Modern, Secure Architecture: Leveraging cutting-edge technologies such as Docker, Kubernetes, and Istio, SecureAuth delivers a cloud-agnostic solution that can be deployed across public and private cloud environments.
• Dynamic Authorization: The integration of Cloudentity’s dynamic authorization capabilities allows for fine-grained, real-time access control, enhancing security and compliance for sensitive transactions.
“Being recognized as an Overall leader and as a leader in both the Product and Innovation categories by KuppingerCole is a testament to our team’s dedication to pushing the boundaries of what's possible in identity security,” said Brook Lovatt, Chief Product Officer at SecureAuth. “Our focus on developing advanced, user-friendly, and secure authentication solutions for both the CIAM and workforce identity space is unwavering.”
The report emphasizes the growing importance of CIAM solutions that cater to both B2B and B2C use cases, with a significant focus on identity verification, fraud prevention, and compliance with privacy regulations. SecureAuth’s robust offering, coupled with its ability to integrate with various third-party services, positions it as a comprehensive solution for organizations looking to enhance their identity and access management capabilities.
To increase security and deployment velocity for cloud DevOps environments, SecureAuth delivers support for Arculix MFA into the HashiCorp Cloud Platform (HCP) Vault via the Command Line Interface (CLI) and Application Programming Interface (API).
Organizations can easily authenticate into HCP Vault using single sign on (SSO) with SecureAuth’s Arculix. SecureAuth ensures that users have better security in their cloud DevOps environments and an improved experience with passwordless continuous authentication using a risk analytics Dynamic Level of Assurance (DLOA) engine driven by artificial intelligence/machine learning (AI/ML).
Starting immediately, HCP Vault customers can leverage SecureAuth’s next-generation authentication solutions. The SecureAuth solution can thus implement SSO with their product, providing visibility for both parties and allowing SecureAuth to be the credentials gateway for HashiCorp’s HCP Vault.
This integration bolsters identity security for HashiCorp customers, giving them device trust and passwordless authentication for a frictionless user experience.
“Security is a top priority for enterprises today,” said Asvin Ramesh, Sr. Director, Partner Alliances of HashiCorp. “By connecting HCP Vault with SecureAuth solutions, we’re giving our joint customers an integrated solution that offers a secure and frictionless experience to access their critical credentials.”
“We think that the HashiCorp Cloud Platform Vault is important for enterprises to have as an additional security layer for development life cycles,” said Mandeep Khera, CMO of SecureAuth.
“SecureAuth not only supports this product, but it makes HCP Vault more efficient and increases security. This partnership will provide HashiCorp users with the ability to seamlessly bolster security while providing frictionless user experience with passwordless continuous authentication,” Khera continued.
With SecureAuth, organizations can focus on a flexible and scalable AWS cloud environment, with HashiCorp lessening the need for static, hard-coded credentials by utilizing trusted identities.