SecureAuth

SecureAuth operates within the identity and access management (IAM) market, a sector projected to exceed $12 billion as of 2022 and grow at a 13% compound annual growth rate through 2032. Founded in 2005 by Garret Grajek and Craig Lund, the company aimed to create a unified solution for identity governance and access security. Craig Lund brought over 25 years of experience from technology companies like IBM and Tricipher, Inc. to his role. The company's trajectory was significantly influenced by the rise of cloud and mobile computing. In 2017, SecureAuth was acquired by K1 Investment Management for $225 million and subsequently merged with Core Security, a firm specializing in vulnerability discovery and threat management.

The company's business model is centered on providing IAM solutions that can be deployed in the cloud, on-premises, or in a hybrid environment. SecureAuth serves a wide array of industries, including finance, healthcare, retail, and government, with a client base that includes large enterprises with over 10,000 employees as well as smaller businesses. Revenue is generated through these offerings, with an estimated annual revenue of around $44.2 million to $75 million. The solutions are designed to be scalable, accommodating businesses from small startups to large corporations with millions of users.

SecureAuth's core offerings are structured under two main products: SecureAuth Workforce and SecureAuth CIAM (Customer Identity & Access Management). These platforms provide features like multi-factor authentication (MFA), single sign-on (SSO), and adaptive authentication driven by an AI-based risk engine. This engine analyzes behavioral signals to make context-aware access decisions, aiming to reduce friction for legitimate users. The company has expanded its capabilities through strategic acquisitions, including a startup named Acceptto in late 2021, and more recently, Cloudentity and SessionGuardian. The acquisition of Cloudentity enhanced its CIAM capabilities with features like Fine-Grained Authorization (FGA) and solutions for B2B2C ecosystems, while SessionGuardian added biometric continuous identity assurance. SecureAuth holds patents for methods that use automated risk-based behavioral modeling for user authentication. Keywords: identity and access management, IAM, cybersecurity, multi-factor authentication, MFA, single sign-on, SSO, adaptive authentication, passwordless authentication, CIAM, workforce identity, cloud security, identity governance, access control, B2B2C identity, API security, continuous authentication, risk-based authentication, biometric authentication, user behavior analytics