The number of threats targeting enterprises is growing drastically every year. The remote work has opened up new opportunities for cybercriminals. With the User Access Security Broker from Secfense, big institutions can easily launch and scale strong authentication across the entire organization and step on a path into a passwordless future.
The difficult thing about cybersecurity was always balancing on the line of data protection and user comfort.
Two biggest challenges that security teams face every day are:
1. How to increase the level of security without making a user’s life too hard?
Although data security, in theory, should always be a priority of each business unit, in reality, people always look for ways to make life easier not harder, so if they can skip a security procedure that causes them too much burden – they will.
2. How to increase the level of security operating on a very limited budget?
Let’s face it. Cybersecurity always comes last, and the space in the budget for this area usually comes after something happens. A successful breach, phishing attack, data fraud. That’s the moment when CEOs decide to invest in data protection.
So what’s the remedy?
We call it “microauthorizations”.
Microauthorizations were designed to make the user journey almost unaffected while substantially increasing the level of data security.
Microauthorizations help easily add additional authorization step anywhere in the application, without touching its code.
With microauthorizations it is possible to:
It really can be that simple.
To learn more about microauthorizations you can check this short showcase that we did during the technology event in Berlin.
You can also watch a complete two-factor authentication (2FA) method deployment performed on Amazon.com and executed in just minutes.
The majority of 2FA methods rely on a one-time password (OTP) that you need to verify your credentials with. While all 2FA methods without doubt significantly increase the security level comparing to password-only protection it is still possible to compromise a user account with a more advanced attack (using tools for a real-time phishing, such as Modlishka or Evilginx2).
In contrast, Universal Second Factor (U2F) Security Keys employ a physical device that a user need to have at all times during the workday. This setup is regarded as the strongest authentication method and has not yet been compromised.
This technology had been battle-tested by Google and since deployed none of Google’s 89,000 of employees have been compromised by a succesful phishing attack.
The biggest reason why U2F security keys have not become a golden security standard just yet was a cost factor. Deploying this technology was tied to a long and expensive coding process. Most of times the maintenance of the application and the necessity of sticking to one vendor service was a good enough reason to give up on the idea of deploying U2F protection within a company.
Today, it is possible to deploy U2F security keys authentication in a matter of minutes and at a fraction of previous cost. And, big companies don’t need to share any of their information with third-parties any longer. Instead, U2F keys technology can now be added seamlessly on top of the current infrastructure.
At Secfense, we’ve built a technology that allows adopting any two-factor authentication method in a matter of minutes.
Without software development, without contractors, and without a vendor lock-in. The authentication process protection lays on the additional security layer that enables 2FA authentication on any applicacion without touching the code.
Testing enterprise solutions has never been easier. You can install a trial version of Secfense for free within one day, and within the next few days you can try out all of its mechanisms on as many applications as you like. Make an appointment with us and find out how to sign up for a free trial of the Secfense tool.
We are faced with new challenges every day. We must always be one step ahead of the attackers and know what they are going to do before they do it. We are convinced that the User Access Security Broker will bring security to a new level, both for those working at the office and from home. For us, working with Secfense is an opportunity to exchange experience with developers who put great value on out-of-the-box thinking.
Business Continuity and Computer Security Officer
BNP Paribas Bank Poland
As part of the pre-implementation analysis, we verified that users utilize a wide range of client platforms: desktop computers, laptops, tablets, smartphones, and traditional mobile phones. Each of these devices differs in technological advancement, features, and level of security. Because of this, and also due to the recommendation of the Polish Financial Supervision Authority (UKNF), we decided to introduce additional protection in the form of multi-factor authentication mechanisms based on FIDO. As a result, users of our applications can log in safely, avoiding common cyber threats such as phishing, account takeover, and theft of their own and their clients’ data.
We are excited to partner with Secfense to enhance our user access security for our web apps. By integrating their User Access Security Broker, we ensure seamless and secure protection for our applications and systems, delivering superior security and convenience to our customers.
IT & Infrastructure
Before investing in Secfense, we had the opportunity to talk to its existing clients. Their reactions were unanimous: wow, it’s so easy to use. We were particularly impressed by the fact that implementing their solution does not require the involvement of IT developers. It gives Secfense a huge advantage over the competition, and at the same time opens the door to potential customers who so far were afraid of changes related to the implementation of multi-factor authentication solutions.
Even when the network and infrastructure are secured enough, social engineering and passwords can be used to gain control of the system by attackers. Multifactor authentication is the current trend. Secfense addresses this and allows you to build zero trust security and upgrade your current systems to passwordless applications within minutes, solving this problem right away,” said Eduard Kučera, Partner at Presto Ventures and cybersecurity expert – former Director in hugely successful Czech multinational cyber security firm Avast.
One of the biggest challenges the world is facing today is securing our identity online. That’s why we were so keen to have Secfense in our portfolio. They make it possible to introduce strong authentication in an automated way. Until now, organizations had to selectively protect applications because the deployment of new technology was very hard, or even impossible. With Secfense, the implementation of multi-factor authentication is no longer a problem, and all organizations can use the highest standards of authentication security.
Two-factor authentication is known to be one of the best ways to protect against phishing; however, its implementation has always been difficult. Secfense helped us solve that problem. With their security broker, we were able to introduce various 2FA methods on our web applications at once.
Head of IT