Top Free Risk-Based Authentication Software - Page 2

Akku

Akku is an Identity and Access Management (IAM) solution that is packed with features including single sign-on, password policy enforcement, IP- and device-based restrictions, multi-factor authentication and YouTube filtering. It provides enterprises with complete control over data access and privacy on the cloud while ensuring that they stay compliant to statutory industry standards. Akku also offers a dedicated deployment support service, without the need for a third-party system integrator, along with round-the-clock support for operations, maintenance, and troubleshooting. With this, Akku enables the seamless integration of on-premise legacy applications with that of a company’s cloud environment.

Average Rating: 4.5/5.0

Total Reviews: 10

Authsignal

Authsignal is a B2C consumer authentication and orchestration platform. Built to deliver enterprise and mid-market teams' rapid capabilities to deploy omnichannel authentication and verification flows. Engineered to drop into existing architecture, Authsignal delivers the world's fastest path to uplifting and implementing passkeys and risk-based multi-factor authentication (MFA) flows without the need to overhaul your current identity stack, with seamless integrations for best-in-class identity platforms, such as AWS Cognito, KeyCloak, Azure AD B2C, and Identity Server, integration has never been this fast. Deploy with lightning speed utilizing pre-built authentication flows or create customized UI experiences, leveraging Authsignal's React Native UI components, headless APIs, and mobile SDKs for iOS and Android. Optimizing user experience and balancing security is a breeze with Authsignal. With our No-code rules engine, create and deploy strong customer authentication flows in minutes. A drag-and-drop interface enables product and risk teams to easily secure customer accounts and enable seamless login experiences.

Average Rating: 4.7/5.0

Total Reviews: 3

Entrust Identity as a Service

Entrust Identity as a Service is a cloud-based identity and access management (IAM) solution with multi-factor authentication (MFA), credential-based passwordless access, and single sign-on (SSO). Entrust Identity as a Service secures access to devices, applications, and resources with an analyst top-rated identity solution that has been proven across critical banking, government and healthcare infrastructures for more than 25 years. Point-and-click provisioning and out-of-the-box integrations with a variety of on-premises and cloud applications make Entrust Identity as a Service easy to deploy, so you can be up and running in under 30 minutes. Features include: • User self service - password reset, authenticators • VPN remote access • SSO portal • AD sync • Office 365 (SAML integration) • Additional SAML applications (e.g. SDFC, WebEx) • Mobile soft token and push notifications • SMS/Email OTP, KBA, Google Auth, FIDO2, Grid • Native device biometrics • Email, web & telephone support: Mon-Fri 8am-8pm EST • Adaptive/risk-based policy engine • System for Cross-Domain Identity Management (SCIM) • Desktop login (via Desktop Agent) • On-prem application integrations (OAM, Netsuite, IIS) • Azure Active Directory (AD) sync • OpenID Connect applications integration • Azure AD CAC • SIEM integration (Splunk) • Auth API (Custom web / mobile apps) • Admin API (users / groups / policies) • Cross-platform facial biometrics • LDAP database sync • OAuth 2.0 URL/API protection • Mobile smart credential/bluetooth login

Average Rating: 4.4/5.0

Total Reviews: 11

Group-IB Fraud Protection

Group-IB Fraud Protection is a solution that combines device fingerprinting, fraud intelligence, and behavioral analysis. It already protects more than 500 million users of web and mobile apps for banking and fintech services, e-commerce marketplaces, and gambling sites across the globe against advanced digital threats, malware, payment fraud, social engineering attacks, and bad bots. Fraud Protection is a set of tools and services that help organizations detect, identify, prevent damage and protect from digital fraud; it comprises both fraud prevention and fraud detection strategies. Fraud Protection is used to protect the digital identity of users, block bot activity and prevent fraud. Fraud Protection helps reduce fraud losses and improve user experience in automated customer systems. Fraud Protection is enriched with high-quality explainable AI that can issue transparent and understandable explanations for its actions, ensuring compliance with ethical and responsible use frameworks. The solution acts in real-time and across all digital channels. Group-IB Fraud Protection allows you to detect the following types of fraud: social engineering attacks (phishing sites, email scams etc.), user account fraud, payment fraud, malicious bot activity, web injections, mobile trojans, malware-related and credit frauds etc. Group-IB Fraud Protection utilizes key Threat Intelligence insights contained in Group-IB’s Unified Risk Platform to provide the company’s experts with full visibility of the fraud landscape, and they are able to leverage this and their professional expertise to turn these insights into actionable anti-fraud strategies for Group-IB’s clients.

Average Rating: 5.0/5.0

Total Reviews: 4

miniOrange Identity & Access Management

miniOrange IAM trusted platform offers frictionless solutions like - Single Sign-On, Multi-Factor Authentication, User lifeCycle Management, Passwordless Authentication, and much more. miniOrange’s ultimate goal is to balance security for the enterprises and provide seamless access to their Workforce, Customer and partners to the exact dedicated resources so that they can focus on what's important. We trust in building a highly customizable solution which has support for both On-premise and Cloud deployment options like identity-as-a-service (IDaaS), which can be used by both IT and Developer teams. By harnessing the power of the IAM cloud, miniOrange allows people to access applications on any device at any time, while still enforcing strong security policies. It directly integrates with an organization's existing directories and identity systems, helping to implement the service quickly at large scale and low total cost. Safeguarding billions of login transactions each month for 5000+ organizations, miniOrange delivers convenience, privacy, and security so that customers can focus on innovation, work faster, boost revenue and stay secure. For more information, visit https://www.miniorange.com/ or Snapshot- Visit our site : www.miniorange.com Year Founded: 2012 Locations : Pune, India | New York, NY | SAN JOSE, CA Phone No. : USA: +1 978 658 9387 India: +91 97178 45846 Email : info@xecurify.com

Average Rating: 4.6/5.0

Total Reviews: 43

Castle

Castle is an identity and fraud risk management platform. We help security and fraud teams discover, investigate, report on and ultimately stop fraud at signup, login, and during transactions. Our SDKs integrate with your application code, after which security and fraud analysts use our website to monitor and manage attacks and fraud.

Average Rating: 3.7/5.0

Total Reviews: 3

cidaas

cidaas, the European cloud identity and access management system from Widas ID GmbH, delivers an out-of-the-box solution for federated identities, single sign-on and multi-factor authentication. With cidaas, companies create unique user identification and maximum security across all channels. Based on the standards OAuth2.0, OpenID and its "Everything is an API" architecture, cidaas can be seamlessly integrated into any software landscape and scales effortlessly up to many millions of users.

Average Rating: 4.3/5.0

Total Reviews: 3

Thales OneWelcome Identity Platform

The Thales OneWelcome Identity Platform is a cloud-based identity and access management solution designed to deliver secure, frictionless digital experiences for all external identities, including customers and partners. It provides a unified platform to manage identities across B2C, B2B, gig-workers, and workforce use cases, helping organizations build trusted digital interactions at scale. The Thales OneWelcome Identity Orchestrator (IO) is a next-gen Visual Orchestration tool that enables no-code orchestration of any user journey and acts as the central engine of an Identity Fabric, moving organizations away from siloed, product‑centric deployments toward a more connected, risk-aware system of systems that can compute dynamic decisions based on all available contextual signals. As a cloud-based component, IO provides a visual interface and execution engine to manage complex interactions across B2C, B2B, and gig worker markets. To support security and compliance, Thales incorporates Adaptive Authentication, combining multi-factor authentication and risk-based access controls, alongside Consent and Preference Management to help organizations meet privacy and regulatory requirements. Delegated User Management enables secure administration of partner and third-party access through self-service workflows. With support for Passwordless Authentication, including passkeys and hardware-based authenticators, and a modular architecture built on identity apps, the platform enables flexible deployment while helping organizations modernize identity, reduce complexity, and strengthen security across digital channels.

Average Rating: 4.4/5.0

Total Reviews: 6

UserLock

UserLock delivers Identity & Access Management (IAM) for organizations built on Microsoft Active Directory. It protects logins to corporate networks and SaaS applications across hybrid, remote, and even offline or air-gapped environments. UserLock verifies AD identity access with multi-factor authentication (MFA), single sign-on (SSO), and context-aware access controls, making secure logins seamless for users and simple for IT teams. Unlike cloud-first IAM solutions, it strengthens security without replacing AD or requiring complex identity migrations. Administrators gain real-time visibility and control over user sessions to stop account sharing, limit concurrent logins, and respond instantly to suspicious activity. Detailed auditing and reporting help organizations meet compliance standards such as ISO 27001, HIPAA, and NIS2.

Average Rating: 4.7/5.0

Total Reviews: 9

Centagate Cloud

CENTAGATE CLOUD offers a centralized login option that protects all applications from security breaches by using FIDO2 passwordless authentication. Control, protect and secure your application access. One login credential for all applications. A system that has strong digital security which eliminates phishing, fraud and password theft. Since the authentication is centralized, only one login credential is needed for all applications. Highly cost-effective with zero CAPEX and minimal OPEX. Some of important features that makes your authentications with CENTAGATE CLOUD more secured and protected. An authentication that requires two or more factor like what you have (device), what you are (biometrics) and what you know (password). An authentication based on previous login’s risk and behavior. Evaluating these risk could stop any trials of security breach. Pre-integrated certified Securemetric FIDO2 server for registration and authentication

Nametag

Nametag is the first identity verification platform for secure account recovery. Nametag’s out-of-the-box solutions deflect MFA and password resets to self-service while empowering helpdesk agents to quickly verify users at other critical moments. Innovative, security-focused organizations rely on Nametag to save costs and improve helpdesk efficiency while preventing social engineering attacks and account takeovers. Nametag's self-service and agent-assisted solutions are built on patented identity verification technology delivers the highest level of security by shutting down critical threats like digital injection attacks, AI-generated deepfakes and presentation attacks. Learn more at getnametag.com

Average Rating: 4.3/5.0

Total Reviews: 2

Secfense User Access Security Broker

Secfense is a proxy-based authentication platform that enables enterprises to deploy phishing-resistant multi-factor authentication (MFA), passkeys, Windows Hello, and microauthorizations across every application - without code changes or system replacements. Acting as a universal authentication layer: Secfense sits between users and applications, upgrading the security of all systems - even legacy or custom-built ones - to modern standards such as FIDO2, passkeys, or Windows Hello. Unlike traditional IAM solutions that require rewrites or proprietary integrations, Secfense works as a vendor-neutral overlay that brings passwordless, phishing-resistant login to every system. Most enterprises still rely on passwords or have partial MFA coverage. Legacy and on-premises applications and SSO often can't support modern authentication methods, and rewriting them is expensive and risky. As a result, more than 80% of breaches continue to originate from compromised credentials. Meanwhile, emerging regulations such as DORA and NIS2 mandate phishing-resistant authentication, something existing IAM tools alone cannot easily achieve across diverse applications. Secfense closes this gap. Operating as a reverse proxy, it intercepts login requests and dynamically injects FIDO2-based authentication - including passkey prompts, biometric checks, or hardware key authentication - before passing validated sessions to the protected applications. The entire process is transparent to both users and applications: No code changes, no app modifications, and no disruption to operations. Secfense seamlessly integrates with existing identity providers, including Entra ID, Okta, Ping, and others, via SAML and OIDC protocols. Rather than replacing these systems, Secfense extends them with phishing-resistant capabilities while allowing organizations to fully control their identity architecture. Trusted by banks, insurers, and other regulated industries, Secfense delivers the fastest, most practical path to secure, compliant, and passwordless authentication across the enterprise - reducing deployment times from months to weeks and cutting IAM modernization costs by up to 87%.

Strivacity

Strivacity is an identity security company that helps brands deliver trusted digital experiences by managing customer, partner, and AI agent identities in a single product. It brings identity orchestration, account opening, sign in, consent management, and fraud prevention together to reduce friction, improve conversion, and give business and security teams clear visibility into where identity drives or blocks growth. Delivered as a single-instance SaaS solution, Strivacity supports data residency and consistent performance at scale. Leading brands use Strivacity to acquire, convert, and grow customers while maintaining trust, control, and security across every interaction.

Average Rating: 4.5/5.0

Total Reviews: 1

TrustLayer Mail: Compliant Email Archive

TrustLayer Compliant Email Archive gives organisations a centralised, tamper-proof email repository for compliance, eDiscovery and everyday email recovery. Every message sent, received or exchanged internally is captured and stored in a separate, secure cloud archive, so you can answer a regulatory disclosure, an internal investigation, a GDPR Subject Access Request or a lost email in seconds rather than days. How it works Capture is journal-based. Your email platform sends a copy of every message to the archive using its standard journalling feature, so there is no proxy in the traffic path and no MX change. Exchange (all versions), Exchange Online in Microsoft 365, Google Workspace, Domino and GroupWise are supported, with EWS and IMAP collection available as alternatives to SMTP journalling. Setup takes minutes and needs very little day-to-day administration. Archived messages are de-duplicated, compressed, indexed and encrypted with AES-256 at rest and TLS in transit, then held in a high-availability cloud hosted on AWS. You choose your data location at provisioning: London (UK) or Frankfurt (EU). Retention is configurable, from indefinite to automatic deletion at a set age, and retention changes are gated behind Data Guardian approval. Search covers sender, recipient, subject, body, dates, keywords, wildcards and attachment content. Users can open results in their native email client, forward, restore to their mailbox, print or save to PDF, and an Outlook add-in lets them browse their personal archive without leaving Outlook. Governance built in Five access levels keep control tight. Standard users see only their own nominated addresses. Privileged users run eDiscovery searches across some or all mailboxes, with a full audit trail of what was searched and opened. Data Guardians, typically a DPO or Compliance Officer, review privileged activity and receive alerts whenever a search runs. Privileged and Delete users can remove messages through an audited process to support the right to be forgotten. Administrators manage accounts and settings but cannot search the archive. An immutable audit log of all search activity, AD and SSO authentication with Multi-Factor Authentication, and audit reports emailed automatically to designated mailboxes give you the evidence of governance that auditors ask for. Why organisations choose it Respond to investigations and Subject Access Requests without trawling individual mailboxes Cut premium mail server costs by up to 75% Users find and restore their own lost emails, without a ticket to IT Historic email stays accessible via the web interface if your primary email service goes down Only active users need a licence: old mailboxes and ex-employees are not chargeable Migrate from an incumbent archive with PST and IMAP import, plus an optional legacy import service Part of the TrustLayer platform Compliant Email Archive is an add-on to Email Security in the Mail layer of TrustLayer One. Four layers, eight solutions, one portal. Protection is priced per user, per month, per layer, and sold and switched on through BT, MSPs and resellers. TrustLayer (formerly Censornet) has spent 16+ years in UK security, protecting 4,000+ organisations and blocking 700 million threats.

Average Rating: 5.0/5.0

Total Reviews: 1

TWOSENSE.AI

Twosense is changing the way that BPOs handle identity security. Deploying Passive or Continuous Multi-Factor Authentication powered by passive biometrics allows for organizations to deploy phishing-resistant, PCI-compliant MFA to every agent, everywhere. Twosense is a no-phone, software-only, multi-factor authentication tool designed specifically for call centers. Save time and money without the need for hard tokens, and secure more security-conscious customers with a best-in-class identity security policy.