THANK YOU FOR SUBSCRIBING
× 
Enterprise Security Mag Weekly Brief
Be first to read the latest tech news, Industry Leader's Insights, and CIO interviews of medium and large enterprises exclusively from Enterprise Security Mag
Enterprise Security Magazine
SurePassID, Corp.
Securing Our Connected World
Kevin Raineri, VP Business DevelopmentHaving been in the security industry for over two decades, SurePassID has revolutionized the space through its groundbreaking authentication solutions for the cloud, on-premises systems, edge computing, and IoT devices. SurePassID offers a broad spectrum of multifactor authentication solutions that seamlessly integrate with any network, service, or app to secure access to any application or device, by any authorized user, at any time. The company primarily caters its solutions to commercial and government agencies such as defense, healthcare, government, aerospace, and other sectors that have high-security requirements. “We bridge the gaps that enterprises and traditional security companies cannot fill, offering a wide variety of authentication use cases, ensuring the needs of businesses and identity security requirements are met,” SurePassID’s VP Business Development Kevin Raineri says.
The expertise of SurePassID lies in delivering affordable authentication solutions that adhere to open standards such as Open Authentication (OATH), Fast Identity Online (FIDO), OpenId Connect (OIDC), and SAML2 that facilitate inter-operability and a hassle-free customer and employee authentication experience. The company recently achieved FIDO Universal Server Certification that supports all FIDO standards from U2F (Universal Two-Factor) to FIDO2. “We also have a complete SDK and API library to enable our customers to integrate two-factor authentication into any app (mobile, web, desktop, IoT), including third-party software vendor companies that do not support MFA capability,” Raineri says.
One unique solution addresses the need where many people are in an environment with shared workstations such as a hospital or manufacturing shop floor. SurePassID’s TapID
For resellers, SurePassID is multitenant, fully internationalized and localized, and can be private labeled or incorporated into other service offerings. SurePassID also provides unmatched sales, marketing, and technical support for partners.
As enterprises embrace IoT solutions, SurePassID is providing a comprehensive and scalable IoT solution securing IoT devices, edge networks, and critical infrastructure in a way that is an extension to their existing enterprise authentication and authorization systems. SurePassID is blazing the path to a unified security solution to lock down everything in the enterprise within a compliance and audit framework that enterprises require. Users may carry a single authentication device or app securing access to every critical physical and logical asset in and outside of the data center that cannot be repudiated.
We bridge the gaps that enterprises and traditional security companies cannot fill, offering a wide variety of authentication use cases, ensuring the needs of businesses and identity security requirements are met
SurePassID is working closely with chip manufacturers, Cloud and IoT partners such as NXP, Azure IoT and AWS IoT, to quickly enable IoT product and software developers to embed strong authentication into the design phase of their IoT projects.
Many clients seek out SurePassID for its expertise in high-security environments and its ability to customize the solution to suit the specific security challenges. For instance, a prominent healthcare company with multiple business units around the world selected SurePassID as their authentication services provider. They needed a platform they could use as their global authentication engine to serve all of their business units worldwide, with high security, high performance, and resilience. SurePassID delivered a holistic cloud-based solution aptly aligned with the client’s needs. The company provided full branding for their customer’s mobile app, which supports OTP, push authentication, and even the ability to secure oneclick over-the-air user provisioning.
SurePassID has created products and tools where users do not need a password to log in, and every login that takes place is done with the use of biometrics and integrated soft tokens. For the IoT space where over 70% of the connected products out there lack security, the company has developed an authentication server-on-a-chip to address this severe lack of built-in security for IoT devices, aimed at chip manufacturers and IoT product makers so that authentication can be designed into IoT products from the beginning. Raineri concludes, saying, “We offer the most powerful and proven suite of authentication tools for every business that needs fast and convenient authentication of its employees, customers, and now IoT devices, at the lowest total cost per user.”
Company
SurePassID, Corp.
Management
Kevin Raineri, VP Business Development
Description
SurePassID has revolutionized the space through its groundbreaking authentication solutions for the cloud, on-premises systems, edge computing, and IoT devices SurePassID offers a broad spectrum of multi-factor authentication solutions that seamlessly integrate with any network, service, or app to secure access to any application or device, by any authorized user, at any time. SurePassID is working closely with chip manufacturers, Cloud and IoT partners such as NXP, Azure IoT and AWS IoT, to quickly enable IoT product and software developers to embed strong authentication into the design phase of their IoT projects
SurePassID, Corp. News
Swissbit and SurePassID Announce Phishing-Resistant, Passwordless User Authentication Solution for Government Agencies and Large Enterprises
ST. PETERSBURG - SurePassID, announced a joint solution that allows government agencies and large enterprises to accelerate their Zero Trust initiatives while complying with phishing-resistant user authentication requirements.
Swissbit's new iShield Key Pro hardware authentication device, combined with SurePassID Authentication Server's unmatched scalability and availability, enables the rapid deployment of phishing-resistant, passwordless multi-factor authentication (MFA) across public cloud, private cloud, and air-gapped networks. Cybersecurity administrators can add FIDO2-based authentication quickly and easily to domain logins and web, mobile, and legacy applications, without incorporating insecure and costly public cloud gateways or orchestration layers. The joint solution also addresses access scenarios where FIDO2 is not available, automatically falling back to a compliant HMAC-based one-time password (HOTP) authentication method without any interruption to the user experience.
"Phishing-resistant, passwordless user authentication is a vital need for public and private sector enterprises that are seeking to meet their Zero Trust requirements and extend their cybersecurity infrastructures," said Claus Gründel, general manager of Swissbit's Embedded IoT Solutions division. "Swissbit and SurePassID deliver the joint solution needed to seamlessly deploy FIDO2-based authentication to all users, from those remotely logging into cloud applications and workplace systems to those on-premises and using applications and devices within high-security facilities."
"Adopting FIDO2 across network topographies must be done with Zero Trust principles in mind, because existing cloud-based authentication solutions and public cloud gateways are not appropriate for user authentication in private clouds and air-gapped networks," said Mark Poidomani, founder and CEO of SurePassID. "Our joint solution with Swissbit provides phishing-resistant, passwordless user authentication natively and wherever it is needed, along with the global scalability and 99.999 % availability that government agencies and large enterprises require."
To secure access to critical data and applications, various United States federal laws require government agencies and contractors to implement Zero Trust and phishing-resistant, passwordless user authentication as outlined in the White House's "Improving the Nation's Cybersecurity" (EO 14028) and the Office of Management and Budget (OMB)'s "Federal Zero Trust Strategy" (M-22-09). FIDO2 provides a convenient and cost-effective alternative to personal identity verification (PIV) or common access (CAC) cards, the only other form of phishing-resistant MFA.
Swissbit and SurePassID's joint solution provides an array of features that streamline iShield Key Pro deployments for large numbers of users across heterogenous networks, such as automated provisioning and deprovisioning and centralized credential management. Other features that address the requirements of government agencies and large enterprises include core security features such as a secure software bill of materials (SBOM) and default protection of secrets in Microsoft Key Vault, comprehensive logging and audit trail for all aspects of user authentication, and available premium 24/7/365 support.
"Swissbit and SurePassID believe that phishing-resistant, passwordless MFA should be ubiquitous," said Gründel. "Our joint solution provides the capabilities, robustness, and price points that will enable widespread adoption of FIDO2-based authentication throughout the private and public sectors."