Yubico

In 2007, Yubico was founded with the goal of creating a more secure and user-friendly way to authenticate digital identities. Yubico developed the YubiKey, a small USB device that provides strong two-factor authentication, and set out to make it widely available to consumers and businesses. The YubiKey is designed to be highly secure and easy to use, providing an additional layer of protection for user accounts and sensitive data. By requiring both a physical device and a password or biometric factor, the YubiKey helps to prevent unauthorized access and identity theft. It is widely compatible with a variety of platforms and services, including Google, Microsoft, Facebook, and Dropbox, and can be used for a variety of authentication methods, including one-time passcodes, public-key encryption, and passwordless login. Yubico has since grown into a global leader in authentication and security, with offices and customers around the world. The company has expanded its product line to include a range of hardware and software solutions, including the YubiHSM, YubiEnterprise Services, and the YubiCloud authentication-as-a-service platform. Yubico's products are used by a wide range of industries, including healthcare, finance, government, and technology, and the company continues to innovate and develop new solutions for the rapidly evolving digital security landscape.

<div>Yubico is a leading provider of hardware authentication security keys that offer a secure and user-friendly alternative to traditional password-based authentication. The company's flagship product, the YubiKey, is a small hardware device that generates one-time passwords or cryptographic keys for secure authentication across various online services and applications. YubiKeys supports multiple authentication protocols, including FIDO2/WebAuthn, FIDO U2F, one-time password (OTP), OpenPGP, and smart card/PIV.</div>

Ensuring the right people access the right resources at the right time

Identity & Access Management

Yubico's COO has sold shares for SEK 5.5 million

Microsoft

To bolster global business security, Yubico has expanded its collaboration with Microsoft, focusing on phishing-resistant multi-factor authentication (MFA).

Platforms that provide an additional layer of security beyond traditional username and password authentication, including controls such as one-time passwords (OTP), biometric data recognition (such as fingerprint, facial recognition), hardware tokens, or push notifications to mobile devices as a means to strengthen the authentication process

Azure

Yubico partnered with Microsoft to integrate its passwordless authentication solutions with Azure Active Directory (Azure AD)

Platforms that focus on managing user credentials, including passwords, to ensure secure access to systems, applications, data and resources

<div>
 
 Yubico is a leading provider of hardware authentication security keys that offer a secure and user-friendly alternative to traditional password-based authentication. The company's flagship product, the YubiKey, is a small hardware device that generates one-time passwords or cryptographic keys for secure authentication across various online services and applications. YubiKeys supports multiple authentication protocols, including FIDO2/WebAuthn, FIDO U2F, one-time password (OTP), OpenPGP, and smart card/PIV.
 
 
 YubiKeys requires users to physically insert or tap the device during the login process, providing an additional layer of security beyond just a username and password. This hardware-based approach mitigates the risk of phishing attacks, account takeovers, and other credential-based threats. YubiKeys require no client software or batteries, making them ready to use out of the box.
 
 
 Key customers and partnerships
 
 
 Yubico's notable customers and partners that have integrated support for YubiKeys include Google, Microsoft, Amazon, Dropbox, GitHub, Salesforce, and Coinbase.
 
 
 The company has also forged partnerships with leading industry organizations, such as the FIDO Alliance, IDESG, OpenID, and W3C, contributing to the development of open authentication standards like FIDO2, WebAuthn, and FIDO Universal 2nd Factor (U2F).
 
 
 Funding and financials
 
 
 In September 2023, Yubico became a publicly traded company on the Nasdaq in Stockholm, under the ticker symbol YUBICO. As of 2022, the company reported revenue of approximately USD 151 million and a profit of USD 24.8 million.
 
 
 
</div>

FortifID is a software company that puts individuals back in control of their identity and directly connects individuals to institutions. The company building a network to power secure, trusted &amp; robust consumer data for the digital world, also enabling individuals to seize control over the use of their personal data. They solve the needs ofbusinesses that use, buy or sell personal data, as well as the privacy needs of consumers for business using personal data, for business selling personal data, and for individuals. Their vision is a data solution for the digital age using blockchain and next-gen concepts from MIT. FortifID was founded in 2017 and is based in Mountain View, California, USA.

FortifID

<div>
 
 Keycloak is an open-source identity and access management (IAM) solution developed by Red Hat. It provides robust user authentication, authorization, and single sign-on (SSO) capabilities, allowing users to securely access multiple applications and services with a single set of credentials. Keycloak supports industry-standard protocols such as OpenID Connect, OAuth 2.0, and SAML 2.0, ensuring interoperability and seamless integration with various applications and frameworks.
 
 
 One of Keycloak's key features is its ability to act as an identity provider (IdP), handling user authentication and attribute assertions. It can also function as a service provider (SP), relying on external IdPs for authentication and authorization. Keycloak offers a user-friendly administration console, where administrators can manage users, roles, and permissions, as well as configure authentication methods, federation settings, and authorization policies.
 
 
 Keycloak supports user federation, allowing it to integrate with existing user stores such as LDAP and Active Directory. It also enables identity brokering, empowering users to authenticate using their existing social media accounts or external identity providers. Additionally, Keycloak provides customizable login pages, password recovery mechanisms, and support for multi-factor authentication, enhancing security and user experience.
 
 
 As an open-source project, Keycloak benefits from community contributions, ensuring its continuous improvement and adaptation to evolving business needs. Organizations can leverage the extensive documentation, forums, and resources provided by the Keycloak community for support and guidance during implementation and customization.
 
 
 
</div>

Keycloak

<div>
 
 miniOrange provides Identity and Access Management (IAM) solutions offering a range of products, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Cloud Access Security Broker (CASB). Its solutions secure access to various applications and cloud services while enabling seamless user experiences.&nbsp;
 
 
 miniOrange's technology allows organizations to implement access control policies based on factors like IP addresses, locations, devices, and time restrictions, providing granular control over data access. Additionally, its solutions integrate with platforms such as Microsoft 365, ServiceNow, Oracle EBS, and Zoom, enabling businesses to enhance security across their digital ecosystems. With a strong focus on compliance and data protection, miniOrange's IAM offerings help enterprises mitigate risks associated with unauthorized access, data breaches, and cyber threats.
 
 
 Key customers and partnerships
 
 
 miniOrange's client base spans various industries, including government entities, healthcare organizations, and enterprises across the US.&nbsp;
 
 
 miniOrange partners with companies like Oracle, Microsoft, ServiceNow, and Zoom, integrating their IAM solutions to secure access to these platforms seamlessly. Its extensive app integration library, comprising over 5,000 applications, allows organizations to optimize resources and costs while streamlining authentication and access management processes.
 
 
 
</div>

miniOrange

One Identity provides identity security solutions focused on protecting and unifying four core elements: Identity Governance and Administration (IGA), Access Management (AM), Privileged Access Management (PAM), and Active Directory Management. The company's solutions help organizations manage identities across on-premises, cloud, and hybrid environments through a modular and integrated approach to user account management. In October 2021, One Identity acquired OneLogin, which expanded its capabilities to include Single Sign-On, multi-factor authentication, directory integration, and user provisioning. The combination allowed customers to take a comprehensive approach to identity security through a unified identity security platform.

One Identity

<div>
 
 SailPoint provides identity security solutions for enterprises. Its identity governance and administration (IGA) platform, IdentityIQ, allows organizations to manage and secure access to applications, data, and cloud resources across their entire IT infrastructure. IdentityIQ automates user provisioning, access requests, access certifications, and policy enforcement, ensuring that users have the appropriate level of access based on their roles and responsibilities.
 
 
 IdentityIQ integrates with various enterprise systems, including cloud, mobile, and on-premises applications, through connectors and APIs. This integration allows for synchronized user access management across the organization's technology landscape. The platform's key components include, 1)Identity Cube, a centralized repository for user identities and access rights, 2)Policies for enforcing organizational and regulatory standards, 3)Workflows for automating identity-related processes, and 4)Tasks, scheduled or event-driven processes for executing specific activities).
 
 
 SailPoint's identity governance solution helps organizations streamline audit and compliance processes, enhance security posture, and improve operational efficiency. It offers features such as role-based access control (RBAC), separation of duties (SoD) enforcement, password management, and compliance reporting. The platform leverages AI and machine learning (ML) capabilities to automate tasks, analyze identity data, and assist in determining appropriate access levels.
 
 
 In August 2022, SailPoint was acquired by Thoma Bravo in an all-cash transaction valued at ~USD 6.9 billion. Subsequently, it was delisted from the New York Stock Exchange.
 
 
 Key customers and partnerships
 
 
 SailPoint has established partnerships with various technology companies and has a strong customer base spanning multiple industries. Some notable customers are General Electric, Vodafone, ADP, and Western Union. SailPoint has also formed a partnership with Circle Security, a decentralized threat prevention platform, to enhance the security offerings for its customers.
 
 
 SailPoint actively collaborates with industry leaders, such as Cisco and Rapid7, to expand its identity security solutions and integrate with their respective products and services. The company maintains a partner ecosystem, including managed security service providers (MSSPs) and resellers, to facilitate the deployment and adoption of its identity governance solutions across various market segments.
 
 
 
</div>

SailPoint

Platforms that manage and control user access to systems, applications, and resources and govern the policies, processes, and controls necessary to ensure appropriate access levels, permissions, and entitlements are granted to users based on their roles, responsibilities, and organizational requirements

Platforms that manage and maintain controls, policies, and systems that govern the entire lifecycle of an employee's access to company resources, systems, and data

Platforms that manage and secure the digital identities and access rights of customers or users across various applications, services, and resources of an organization

Platforms that enable users to authenticate once and gain access to multiple systems, applications, or services without the need to provide separate credentials for each system or resource access and usage

IAM solutions enable personalization by tailoring user rights, roles, and access to services based on individual profiles

IAM solutions enhance transparency and accountability by controlling user access, monitoring activity, facilitating audits, and preventing unauthorized access, ensuring business data integrity

AI/ML in IAM help automate risk analysis, anomaly detection, and adapt access controls, improving security.

Certain customer IAM providers also offer biometric authentication solutions

This is a key demand driver for IAM solutions as companies switch to a hybrid work environment, driving the increased need to manage user identity and access to organizational resources

Companies offering IAM solutions offer their solutions under a B2B SaaS model

Yubico

EDGE Insights

About EDGE

Contact Us

Resources

Area of Focus

Technology Research Made Effortless