smartphone – eliminating the human element from the authentication flow.

Authomate simplifies the user experience by allowing the user’s smartphone in proximity to an application, website, system, or device to seamlessly authenticate the user, while eliminating the need to enter user names, passwords and one-time codes or answering challenge questions – enabling companies to implement stronger, always on security and enforce policies, in each case, without complicating or frustrating their end users and customers. Key features include: enablement of multifactor authentication using contextually aware, dynamic factors; the ability to share access without sharing credentials; the ability to interface with VPNs and other non-web based applications that require credential input (including login for Macs and PCs); geofencing and geotagging; date and time restrictions; biometrics; defense against phishing sites; mitigating attack surfaces used to steal credentials; and robust logging of access.

Authomate allows enterprises to implement strong security policies that can be easily adopted by their users and customers, while eliminating the vulnerabilities of weak and reused passwords, forgotten passwords that lead to costly recovery processes, and password spreadsheets that may be shared between team members, and eliminates attack surfaces used to harvest credentials (e.g., malware, keyloggers, Man-in-the-Middle, Man-in-the-Browser, phishing and social engineering). Authomate’s solution is designed to fit within the enterprise’s existing security framework so it can be implemented in weeks, not months or years as required by other authentication solutions.

While Authomate’s initial focus is on user authentication, the solution extends beyond access to applications and can be used for any transaction requiring credentials to be given to establish trust and access. The solution architecture reverses the credential flow, thereby eliminating the ability to compromise static devices like point of sale terminals, kiosks, ATMs, or websites for card not present, disabling the ability to use these avenues as an attack vector to steal credentials.