Beyond Identity, HYPR, Oloid and Yubico

About HYPR

HYPR sells an identity security platform that unifies phishing-resistant passwordless authentication, adaptive risk mitigation and automated identity verification. HYPR positions its platform to detect, prevent and eliminate identity-related risks at every point in the identity lifecycle, from onboarding to goodbye. HYPR's platform is aimed at confirming that employees and customers are who they claim to be.^[3][9][13]

HYPR Authenticate transforms a smartphone into a FIDO2 passkey, replacing passwords and shared secrets with secure public key cryptography. The user provides a chosen verification factor, such as a TouchID, and HYPR supports hardware options such as YubiKeys. In the HYPR login flow, the verification factor gives access to the private passkey, which is used to sign the challenge. If a user already signed into a desktop using HYPR, the verified identity is automatically passed to the SSO, with no additional verification steps unless step-up authentication is required. HYPR supports biometric authentication, synced passkeys, device-bound passkeys, FIDO hardware security keys and built-in platform authenticators. HYPR Authenticate is FIDO Certified on all components. The HYPR Authenticator App provides passkey-based MFA on a smartphone to replace passwords.^{[3][5][6][12]}

HYPR incorporates standard synced passkeys and device-bound HYPR Enterprise Passkeys into its Identity Assurance platform. HYPR Enterprise Passkeys are built on device-bound FIDO passkeys, which cannot be passed amongst devices. HYPR Enterprise Passkeys for Microsoft Entra ID are a non-syncable FIDO2 passkey built for large-scale workforce authentication. HYPR Enterprise Passkeys are strictly non-syncable and are owned and managed entirely by the enterprise. HYPR Enterprise Passkeys extend passwordless security to the workstation login for Windows, macOS and VDI environments. HYPR Enterprise Passkeys deploy phishing-resistant FIDO2-based MFA with no fallback to factors such as passwords or push notifications. HYPR Enterprise Passkeys come with audit logs for all events. HYPR provisions and manages hardware tokens such as YubiKeys and smart cards. HYPR supports deploying all types of FIDO passkeys across a business through a single solution.^[3][7]

HYPR Adapt adds risk-based adaptive authentication and continuously assesses risk from a broad and diverse set of sources. HYPR's policy engine uses data from devices, browsers and other security tools to implement adaptive risk mitigation strategies. HYPR enables organizations to enforce step-up authentication and block fraudulent logins based on real-time risk intelligence. On the HYPR platform, software and hardware passkey authenticators are managed, provisioned and deployed, and user risk scores are tracked alongside adaptive authentication policies in one place.^[3][6][9]

HYPR Affirm identity verification was designed to meet enterprise KYE needs across the entire employee lifecycle, from new hires to long-time team members. HYPR supports identity verification for the entire employment lifecycle, from pre-interview screening for job applicants to continuous verification for long-term employees. HYPR identity verification for employees uses AI-powered chat, document verification, video and face recognition. HYPR offers automated account recovery.^[9][10]

HYPR integrates with existing IdPs and security tools. HYPR integrates FIDO2 phishing-resistant passwordless authentication with Entra ID (Azure) or other IAM environments. HYPR supports passkey-based MFA for SSO providers, including deployments with multiple providers. With HYPRspeed Desktop SSO, a verified identity from desktop authentication with HYPR is passed to the SSO provider automatically. HYPR offers mobile and web SDKs that put emphasis on rapid deployment. HYPR connects apps to existing identity providers through open standards such as SAML, OpenID Connect and OAuth. HYPR provides jailbreak and root detection that prevents compromised devices from accessing apps and services. HYPR supports passwordless transaction approvals, including step-up authentication.^{[3][5][10][11]}

HYPR identity verification for customers uses AI-driven chat, document authentication, video analysis and facial recognition. HYPR supports PSD2 Strong Customer Authentication (SCA) and transaction signing compliance, including cryptographic signing of every transaction and unique dynamic linking. HYPR supports multiple authenticator options including smartphone app, Windows Hello, TouchID, passkeys and hardware security keys.^[13]

HYPR is SOC 2 Type 2 and ISO 27001, ISO 27017 and ISO 27018 certified. HYPR is a board-level member of the FIDO Alliance. HYPR adheres to NIST AAL3. HYPR helps organizations comply with PCI DSS MFA requirements. HYPR addresses MFA and risk-based authentication requirements of the NY Department of Financial Services (NYDFS). Kinaxis deployed passwordless as part of its Zero Trust program.^{[2][3][6][7][10][13][14]}

About Oloid

Oloid sells identity and access tools for deskless workers and shared devices. Oloid says its passwordless authentication is built for deskless workers across manufacturing, healthcare, pharmaceutical, and retail industries. Oloid says it tailors its approach to scenarios where mobile devices aren't permitted, company emails or phones aren't provided, and shared devices are the norm.^[1][2][4]

Oloid's passwordless product provides fast and secure access to shared devices such as PCs, kiosks, tablets, scanners and HMI. Oloid also implements passwordless authentication for operational technology (OT) environments. Oloid can transform existing RFID employee badges and physical access control systems into FIDO2 security keys. For workers who need to reset credentials, Oloid lets them reset passwords with face recognition or RFID/NFC badges, with no need for external devices or IT intervention.^[2][4][5][6]

Oloid Workflows is the company's automation layer for identity processes. Oloid Workflows uses a no-code, visual drag-and-drop editor that allows teams to build automation logic using triggers, rules, and actions. Oloid Workflows integrates with physical access control systems (PACS), HR information systems (HRIS), SSO platforms, IT service systems, and custom applications using connectors and APIs.^[7]

Oloid Aura is an AI agent for help desks. Oloid Aura is a purpose-built AI agent designed to establish employee identity in real time when help desk requests require higher assurance, from password resets to MFA resets, access changes, and sensitive HR updates. When the request risk is higher, Aura can invoke document based ID verification through the customer's preferred vendor, optimized for mobile-first worker experiences.^[2][9]

Oloid describes the industries it serves. Oloid says frontline workers in industries like manufacturing, retail, healthcare, contact centers, pharmaceuticals, pharmacies, and hospitality need fast, secure access to critical applications without the burden of passwords. For contact centers, Oloid provides a passwordless, multi-factor authentication solution based on facial recognition and RFID, removing the need for mobile phones or physical security keys. For pharmaceutical settings, Oloid says it supports regulatory requirements like FDA, GMP, and HIPAA and is 21 CFR Part 11 compliant. For retail, Oloid enables passwordless authentication and MFA using employee ID badges, proximity cards or facial biometrics.^{[10][11][12][13]}

Oloid also states company and customer facts. Oloid says it adheres to SOC 2 and GDPR standards. Oloid describes Tyson Foods, a food manufacturer with over 100,000 frontline workers, as seeing gains in productivity and a reduction in support costs. Oloid says its multi-user device access supports hundreds of users on a single device, for shift workers in high-turnover environments.^{[2][8][14][15]}

About Yubico

Yubico offers the YubiKey, a phishing-resistant, FIPS 140-3 validated key for multi-factor and passwordless authentication. The multi-protocol YubiKey protects access to computers, networks, and online services. A YubiKey connects through any USB port or NFC reader with no software to install. The YubiKey works with Windows and Mac login, Gmail, Dropbox, Facebook, Salesforce, Duo and other services.^[1][6][7]

The YubiKey 5 Series uses multi-protocol capabilities that can secure legacy and modern systems. The YubiKey 5 Series supports authentication protocols including FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP, OATH-HOTP, Smart card (PIV) and OpenPGP. The YubiKey 5C NFC provides tap-and-go authentication on NFC-enabled Android and iOS devices. The YubiKey 5C NFC is supported by Google and Microsoft accounts and password managers, and works with Windows, macOS, ChromeOS and Linux. The YubiKey 5C is built with glass-fiber reinforced plastic, is IP68 rated for water and dust, is crush resistant and has no batteries or moving parts. YubiKey Nano form factors stay in the device USB port and are tapped to authenticate. With firmware 5.8, YubiKeys enable preview support for hardware-backed signatures and security for digital identity wallets, payments and AI-driven workflows.^{[7][8][9][10][13]}

The YubiKey 5 FIPS certified security keys meet the AAL3 level of assurance of the NIST SP800-63B guidelines. The YubiKey 5C Nano FIPS connects to a device via USB-C, and its nano form factor is designed to stay in the device. The YubiKey 5C Nano FIPS is FIPS 140-3 validated for government and regulated organizations, at Overall Level 2 and Physical Security Level 3. YubiKey Bio Series supports biometric authentication using fingerprint recognition for passwordless logins. YubiKey Bio Series stores fingerprint templates in the secure element on the key.^[7][12]

The Security Key Series by Yubico delivers FIDO-only security keys for both consumers and enterprises. The Security Key Series supports only the FIDO2/WebAuthn and FIDO U2F authentication protocols. The Security Key Series combines hardware-based authentication with public key cryptography for use across desktops, laptops and mobile. Organizations can integrate support for the Security Key Series within their systems and applications that support FIDO, including mobile-restricted or shared workstation environments. Security Key Series keys for enterprises work with Google Workspace, Microsoft 365, IAM platforms, password managers and social media applications. Serial numbering on the back of the enterprise Security Key Series keys lets enterprises track distribution and usage. The enterprise-ready Security Key Series keys are available exclusively as part of YubiKey as a Service.^[7][13]

YubiKey as a Service is a subscription for organizations. Twitter turned to YubiEnterprise Delivery and YubiEnterprise Subscription services to distribute YubiKeys across its global workforce. The Yubico Authenticator app lets users store credentials on a YubiKey and not on a mobile phone. The Yubico Authenticator app can generate codes for logging into services. A range of computer login choices is available for organizations and individuals to secure Windows or Macs with strong authentication.^[7][8][10]

The YubiHSM 2 is a hardware solution for protecting Certificate Authority root keys from being copied by attackers, malware and malicious insiders. YubiHSM 2 secures cryptographic keys through their entire lifecycle, from key generation, attestation, storage, distribution and backup to destruction if needed. With the YubiHSM 2, keys are created, imported and stored, and all crypto operations run in the YubiHSM 2 hardware to prevent theft of keys at rest or in use. All cryptographic keys and other objects in the YubiHSM 2 belong to one or more security domains. The YubiHSM 2 features are accessible through an open source software development toolkit (SDK). YubiHSM 2 interfaces via YubiHSM KSP, PKCS#11, and native libraries. YubiHSM 2 can provide hardware backed keys for a Microsoft-based PKI implementation. YubiHSM 2 v2.4 allows secure data backups using asymmetric encryption. The Bring Your Own Key (BYOK) feature in YubiHSM 2 v2.4 lets organizations manage and store their own encryption keys in a multi-cloud environment. The YubiKey secures the software supply chain and 3rd party access with phishing-resistant MFA, and the YubiHSM secures the hardware supply chain by ensuring product part integrity.^[6][14]

Customers in over 160 countries protect their accounts with the YubiKey. OpenAI makes YubiKeys a standard part of how it protects its employees. Hyatt is deploying YubiKeys to get rid of passwords in its environment. Yubico offers a DOW approved hardware security key. YubiKeys are widely deployed in the US Government with over 150 unique implementations including US Army, US Navy, US Air Force, US Marine Corps, US Space Force, DOW Missile Defense Agency and more. Yubico offers DOD approved, FIPS 140-3 validated multi-factor authentication for non PIV/CAC eligible workers, mobile and BYOAD/BYOD users, air-gapped or closed networks, privileged users and remote workers. Yubico helps secure access to election infrastructures including voter registration databases, election management and reporting systems, and e-pollbooks. YubiKeys are securely manufactured in Sweden and programmed in the USA. Yubico matches up to 5% of the number of YubiKeys purchased on Yubico.com, donating them to non-profit organizations, election campaigns, journalists and humanitarian workers.^{[4][6][8][10]}