SurePassID Universal Server takes the pain out of Zero Trust MFA
The Defense Industrial Base faces unprecedented cybersecurity challenges. Employees, contractors, and partners need access to applications and data across the IT/OT spectrum, often while working remotely using their own devices. Meanwhile penetration attempts using stolen credentials and insider attacks are at an all-time high, threatening Intellectual Property (IP), Personally Identifiable Information (PII), Classified Information (CI), and Controlled Unclassified Information (CUI). This has led to Multi-Factor Authentication (MFA) requirements in new mandates that defense contractors must meet:
- Cybersecurity Maturity Model Certification (CMMC) 2.0 Levels 2 and 3
- Supplier Performance Risk System (SPRS) NIST 800-171 Self-Assessment (DFARS Interim Rule 252.204–7019)
- Federal Acquisition Regulation (FAR) 52.204-21
- Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012
- Cyber Liability Insurance (CLI)
SurePassID specializes in highly secure, highly extensible solutions for compliance with MFA requirements. Customers from Top 5 prime contractors to small manufacturing companies rely upon our SurePassID Universal Server for secure access to their apps and data. You can too.





POWERFUL FEATURES
SurePassID Universal Server secures user access to air-gapped systems
CUSTOMER CASE STUDY
MFA for Air-Gapped Systems, including SCIFs and SAPFs

BENEFITS
Benefits of using SurePassID MFA for Air-Gapped Systems
CMMC 2.0 Compliance
Where CUI goes, MFA must follow. Only SurePassID secures user access to all IT/OT apps and their data.
Secured IT/OT Apps
Zero Trust = IT in the cloud, OT on-prem or in private clouds. SurePassID makes it easy to secure all apps no matter where they live.
4 Nines Availability
MFA is mission critical for your business. SurePassID has the availability, redundancy, and automatic failover you need.
Improved MFA ROI
From administrative automation to MFA consolidation, SurePassID gives you the maximum leverage on MFA ROI.
Cyber Liability Insurance
Securing admin accounts with MFA is a foundational requirement of CLI. Achieve it rapidly and cost-effectively with SurePassID.
Phishing- Resistant MFA
FIDO2 and CAC/PIV are the only two forms of phishing-resistant MFA that exist today. SurePassID enables you to make the most of both.
360° View of User Access
SurePassID delivers a 360 degree view of user access across your IT/OT apps and integrates it with your SIEM or SOAR solution.
AI-Based Access Monitoring
SurePassID’s AI-based access monitoring automates the alerting and interventions associated with lateral movement and unauthorized access.

““We selected SurePassID due to their performance and professionalism during a multiple vendor competition for a multi-factor authentication solution. But their outstanding technical support is what we have valued most over the years. Very impressive.”
AUTHENTICATORS
SurePassID Universal Server works with all open-standard authenticators
Authenticators are the user experience of MFA. SurePassID works with all open-standard authenticators, enabling you to meet any use case or budget requirement.
- Phishing-Proof FIDO2 Security Keys
- FIPS 140 Validated Tokens
- OTP Keyfobs and Display Cards
- Converged Credentials
- Mobile Apps
With SurePassID you can mix-and-match authenticators for specific users or user categories, and import any existing tokens you may have.



