Secfense

Founded by Marcin Szary & Tomasz Kowalski in 2018

Add phishing-resistant MFA and passkeys to apps without code changes

Cost

Demo

Rating

★ People love it

Time to value

Moderate Setup (1-3 hours)

You can use Secfense to add multi-factor authentication, passkeys, and phishing-resistant login to enterprise applications without modifying application code or replacing existing identity systems. It works as a proxy layer that intercepts traffic and injects security controls. You can hide VPNs, Citrix, and OWA from internet scanners, protect legacy apps, deploy passwordless login for employees and customers, and meet compliance requirements like DORA, NIS2, and PSD2 without rebuilding your architecture.

What Secfense does

Add phishing-resistant MFA to any web application via proxy configurationHide internet-facing services like VPN and OWA from public scannersIssue and manage enterprise passkeys for employee and customer loginConfigure authentication policies per application without code deploymentAudit and report on MFA coverage across the enterprise application portfolioOnboard users to passwordless login without requiring device re-enrollmentIntegrate with existing identity providers without replacing themAdd MFA to any web application without touching its source codeHide VPN, Citrix, and OWA endpoints from internet scannersDeploy enterprise passkeys across modern and legacy applicationsLightweight built-in identity provider with native passkey supportDeploy phishing-resistant authentication to thousands of users in weeksSupports DORA, NIS2, and PSD2 compliance requirementsWorks as a reverse proxy so no app integration project is neededExtends Windows Hello passwordless login to non-Microsoft apps