HYPR vs OneSpan

About HYPR

HYPR sells an identity security platform that unifies phishing-resistant passwordless authentication, adaptive risk mitigation and automated identity verification. HYPR positions its platform to detect, prevent and eliminate identity-related risks at every point in the identity lifecycle, from onboarding to goodbye. HYPR's platform is aimed at confirming that employees and customers are who they claim to be.^[3][9][13]

HYPR Authenticate transforms a smartphone into a FIDO2 passkey, replacing passwords and shared secrets with secure public key cryptography. The user provides a chosen verification factor, such as a TouchID, and HYPR supports hardware options such as YubiKeys. In the HYPR login flow, the verification factor gives access to the private passkey, which is used to sign the challenge. If a user already signed into a desktop using HYPR, the verified identity is automatically passed to the SSO, with no additional verification steps unless step-up authentication is required. HYPR supports biometric authentication, synced passkeys, device-bound passkeys, FIDO hardware security keys and built-in platform authenticators. HYPR Authenticate is FIDO Certified on all components. The HYPR Authenticator App provides passkey-based MFA on a smartphone to replace passwords.^{[3][5][6][12]}

HYPR incorporates standard synced passkeys and device-bound HYPR Enterprise Passkeys into its Identity Assurance platform. HYPR Enterprise Passkeys are built on device-bound FIDO passkeys, which cannot be passed amongst devices. HYPR Enterprise Passkeys for Microsoft Entra ID are a non-syncable FIDO2 passkey built for large-scale workforce authentication. HYPR Enterprise Passkeys are strictly non-syncable and are owned and managed entirely by the enterprise. HYPR Enterprise Passkeys extend passwordless security to the workstation login for Windows, macOS and VDI environments. HYPR Enterprise Passkeys deploy phishing-resistant FIDO2-based MFA with no fallback to factors such as passwords or push notifications. HYPR Enterprise Passkeys come with audit logs for all events. HYPR provisions and manages hardware tokens such as YubiKeys and smart cards. HYPR supports deploying all types of FIDO passkeys across a business through a single solution.^[3][7]

HYPR Adapt adds risk-based adaptive authentication and continuously assesses risk from a broad and diverse set of sources. HYPR's policy engine uses data from devices, browsers and other security tools to implement adaptive risk mitigation strategies. HYPR enables organizations to enforce step-up authentication and block fraudulent logins based on real-time risk intelligence. On the HYPR platform, software and hardware passkey authenticators are managed, provisioned and deployed, and user risk scores are tracked alongside adaptive authentication policies in one place.^[3][6][9]

HYPR Affirm identity verification was designed to meet enterprise KYE needs across the entire employee lifecycle, from new hires to long-time team members. HYPR supports identity verification for the entire employment lifecycle, from pre-interview screening for job applicants to continuous verification for long-term employees. HYPR identity verification for employees uses AI-powered chat, document verification, video and face recognition. HYPR offers automated account recovery.^[9][10]

HYPR integrates with existing IdPs and security tools. HYPR integrates FIDO2 phishing-resistant passwordless authentication with Entra ID (Azure) or other IAM environments. HYPR supports passkey-based MFA for SSO providers, including deployments with multiple providers. With HYPRspeed Desktop SSO, a verified identity from desktop authentication with HYPR is passed to the SSO provider automatically. HYPR offers mobile and web SDKs that put emphasis on rapid deployment. HYPR connects apps to existing identity providers through open standards such as SAML, OpenID Connect and OAuth. HYPR provides jailbreak and root detection that prevents compromised devices from accessing apps and services. HYPR supports passwordless transaction approvals, including step-up authentication.^{[3][5][10][11]}

HYPR identity verification for customers uses AI-driven chat, document authentication, video analysis and facial recognition. HYPR supports PSD2 Strong Customer Authentication (SCA) and transaction signing compliance, including cryptographic signing of every transaction and unique dynamic linking. HYPR supports multiple authenticator options including smartphone app, Windows Hello, TouchID, passkeys and hardware security keys.^[13]

HYPR is SOC 2 Type 2 and ISO 27001, ISO 27017 and ISO 27018 certified. HYPR is a board-level member of the FIDO Alliance. HYPR adheres to NIST AAL3. HYPR helps organizations comply with PCI DSS MFA requirements. HYPR addresses MFA and risk-based authentication requirements of the NY Department of Financial Services (NYDFS). Kinaxis deployed passwordless as part of its Zero Trust program.^{[2][3][6][7][10][13][14]}