CyberSafe

About CyberSafe

CyberSafe holds a significant position in the cybersecurity market, tracing its origins to 1991 when it was established as the first commercial provider of Kerberos-based security solutions. The company, also formerly known as Open Computing Security Group, focused on developing authentication and encryption tools tailored for enterprise applications, particularly within the SAP ecosystem. A notable milestone in its history was the acquisition by SecurityBridge on July 23, 2025, which integrated CyberSafe's specialized authentication products into a broader, SAP-native cybersecurity platform.

The company's core offering is the TrustBroker product family, a suite of security software designed to enhance identity and access management for businesses using SAP. This product leverages a client's existing Microsoft Active Directory infrastructure, eliminating the need for separate SAP passwords and streamlining user access. TrustBroker facilitates secure single sign-on (SSO), allowing users to access SAP applications with the same credentials they use to log into their workstations. It also supports multi-factor authentication (MFA) and a pioneering feature called step-up authentication (SUA), which can enforce additional verification based on contextual risk signals.

CyberSafe's business model is centered on selling software licenses for its TrustBroker products, which can be used as standalone solutions or integrated with the SecurityBridge platform. The company serves a global customer base across various industries, targeting organizations that rely on mission-critical SAP applications for their operations. The solution's value proposition lies in reducing IT help desk costs associated with password resets, improving user productivity, and strengthening regulatory compliance. Following its acquisition, TrustBroker's capabilities were enhanced to act upon real-time threat intelligence from the SecurityBridge platform, enabling dynamic security policies. For instance, the system can automatically require MFA when a user logs in from a new device, outside of normal work hours, or after a long period of inactivity.