INDUSTRIES

MFA for
Defense and Aerospace

  on-premise
  private clouds
  air-gapped systems

Multi-factor authentication (MFA) that's highly secure, highly extensible, and built for CMMC 2.0

TALK TO AN EXPERT
CMMClogo1
THE BIG PICTURE

Take the pain out of DoD MFA requirements

The Defense Industrial Base faces unprecedented cybersecurity challenges. Employees, contractors, and partners need access to applications and data across the IT/OT spectrum, often while working remotely using their own devices. Meanwhile penetration attempts using stolen credentials and insider attacks are at an all-time high, threatening Intellectual Property (IP), Personally Identifiable Information (PII), Classified Information (CI), and Controlled Unclassified Information (CUI). This has led to Multi-Factor Authentication (MFA) requirements in new mandates that defense contractors must meet:

  • Cybersecurity Maturity Model Certification (CMMC) 2.0 Levels 2 and 3
  • Supplier Performance Risk System (SPRS) NIST 800-171 Self-Assessment (DFARS Interim Rule 252.204–7019)
  • Federal Acquisition Regulation (FAR) 52.204-21
  • Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012
  • Cyber Liability Insurance (CLI)

SurePassID specializes in highly secure, highly extensible solutions for compliance with MFA requirements. Customers from Top 5 prime contractors to small manufacturing companies rely upon our SurePassID Universal Server for secure access to their apps and data. You can too.

CMMClogo1
SPRS-Supplier-Performance-Risk-Assessment-logo
NIST800-207-Logo-1
dfars-regulations
CMMC_Model_2_0_graphic
POWERFUL SOLUTIONS

SurePassID secures the CUI that no other MFA solution can

SurePassID-Private-Cloud-400x323
SOLUTIONS

Private clouds

CUI often lives in on-prem data centers or hosted private clouds. SurePassID secures access to all of them, including GCC High instances.

SurePassID-Shop-Floor-400x323
SOLUTIONS

Shop floors

When CUI goes to the manufacturing shop floor, SurePassID secures it on Operational Technology (OT) industrial control systems.

SurePassID-Air-Gapped-Systems-400x323
SOLUTIONS

Air-gapped networks

CUI in air-gapped systems like secure enclaves, intellectual property repositories, and SCIFs/SAPFs? Not a problem for SurePassID.

CUSTOMER CASE STUDY

Top 5 prime contractor uses SurePassID for MFA consolidation

MFA-Replacement-and-Consolidation-Case-Study-2
OUTSTANDING BENEFITS

Reap the benefits of SurePassID MFA

Zero Trust everywhere

SurePassID makes it easy to achieve Zero Trust. Deploy MFA for IT in the cloud, OT on-premise or in private clouds.

Outstanding ROI

User self-service. Administrative automation. Unrivaled technical support. Everything about SurePassID maximizes your ROI.

Regulatory compliance

No matter what your cybersecurity mandate, SurePassID has the MFA solution you need for compliance.

Five 9s availability

MFA is mission critical. SurePassID has the Five 9s (99.999%) availability, redundancy, and automatic failover you need.

Phishing resistance

FIDO2 and CAC/PIV are the forms of phishing-resistant MFA that exist today. SurePassID enables you to make the most of both.

Cyber liability insurance

Securing privileged accounts with MFA is a foundational requirement of CLI. Achieve it rapidly and cost-effectively with SurePassID.

360° view of user access

SurePassID delivers a 360 degree view of user access across your IT/OT apps and integrates it with your SIEM or SOAR solution.

AI-based access monitoring

SurePassID's AI-based monitoring automates the alerting and interventions for lateral movement and unauthorized access.

TESTIMONIALS

What our customers say about us

“SurePassID is a valued partner for helping our clients achieve NIST 800-171 compliance. They meet requirements other MFA providers cannot and deliver outstanding support. We would recommend them to any company looking for a multi-factor authentication solution with a knowledgeable, committed team standing behind it.”

“We selected SurePassID due to their performance and professionalism during a multiple vendor competition for a multi-factor authentication solution. But their outstanding technical support is what we have valued most over the years. Very impressive.”

“In terms of support responsiveness, I have nothing but good things to say about SurePassID. Their team has always given us great support and responded to our issues and inquiries in a timely manner.”

MFA EVERYWHERE

Where CUI goes, MFA must follow

 

Domain and OS logons

Domain-Logons-screenshots-2

SurePassID MFA for Windows/MacOS/Linux with Offline 2FA

Web apps

Web-Apps-screenshots-2

SurePassID MFA via SAML2 or REST API

Mobile apps

Mobile-Apps-screenshots-1

SurePassID MFA via OpenID Connect or REST API

Legacy apps

Legacy-Apps-screenshots-1

SurePassID MFA via RADIUS, LDAP, TACACS+, REST API, or native integration

Domain-Logons-screenshots-2

SurePassID MFA for Windows/MacOS/Linux with Offline 2FA

Web-Apps-screenshots-2

SurePassID MFA via SAML2 or REST API

Mobile-Apps-screenshots-1

SurePassID MFA via OpenID Connect or REST API

Legacy-Apps-screenshots-1

SurePassID MFA via RADIUS, LDAP, TACACS+, REST API, or native integration

RESOURCES

Knowledge is power

FAQ

Frequently asked questions about SurePassID

What are SurePassID's deployment modes?

  • Software-as-a-Service (SaaS Public, SaaS Private)
  • Windows Installer Package (Microsoft Windows Server 2012-2022, any edition, and Microsoft Windows 8-11)
  • Virtual Machine (Microsoft Hyper-V)
  • Container Image (Docker/Kubernetes, Microsoft ACI, Amazon ECS)
  • Embedded (Windows 7 or later, Linux OpenEmbedded for 32/64-bit ARM/PPC/MIPS/x86)
  • Secure Element (NXP EdgeLock SE050/SE051, NXP A71CH/A71CL/A1006)

How long does it take to deploy SurePassID?

Cloud deployments can occur same day.

On-premise and air-gapped deployments will vary depending on the complexity of your requirements.

Regardless, our Customer Success team will be with you every step of the way.

Can SurePassID integrate with my IAM solution?

As a SAML 2.0 IdP, SurePassID easily and seamlessly adds MFA to any existing IAM solution, such as Okta or Ping Identity.

SurePassID also integrates with Third-Party directory services, such as Workday, Oracle, and SAP.

We even integrate with legacy SCADA systems that have built-in user directories.

What makes SurePassID better than other MFA solutions?

  1. Unmatched on-premise and air-gapped capabilities
  2. Outstanding technical support
  3. Unbeatable value

How secure is SurePassID?

SurePassID is the most hardened MFA solution on the market. We never stop innovating to protect our customers from evolving cyberthreats.

  • USA company
  • Secure SBOM (Software Bill of Materials)
  • Secure user and token provisioning (QR code to one-time-use provisioning page)
  • Comprehensive logging and audit trail
  • FIPS 140 mode
  • AES 256 encryption for data at rest
  • SHA 256 or SHA 512 encryption for data in iransit
  • And much more...

How much does SurePassID cost?

Visit https://www.surepassid.com/pricing for a complete guide to SurePassID Authentication Server pricing and features.

SurePassID-Contact-Sales-Chiclet-2
NEXT STEPS

Discover why leading defense contractors choose SurePassID

Talk to one of our MFA experts about your unique requirements. Or request a demo and see how easy it is to secure your data and apps with SurePassID Authentication Server.