Ironchip solutions

Ironchip covers six common use cases with the same location technology. Each section explains the problem, what the platform provides, and its benefits, and links to the documentation of the product that solves it.

Use case	Product and documentation
Service isolation and protection	Safe zones and policies
User authentication	Identity platform and authentication methods
Third-party connectivity	Privileged access
Incident management	Monitoring and ITDR
Fraud detection system	Fraud detection
Remote work	RDP and VPN

Service isolation and protection

Attacks are becoming more sophisticated and better at evading detection.

Ironchip restricts the use of different systems by assigning user privileges and limiting access to specific areas. This keeps intruders and unauthorized users away from the rest of your systems and stops them from misusing information, which reduces the impact of an attack or a malicious user.

Protection against attacks

Restrict access to specific areas, even allowing it only from authorized locations. If a vulnerability appears, you avoid a total shutdown of activity because you can detect the entry vector and fix it quickly.

Role-based privilege management

Assign different privileges to each user. Prevent unauthorized users from reaching the rest of the system and misusing information, which reduces the risk from malicious users. See Roles and permissions.

Real-time access monitoring

See who accesses your systems, when, and from where, in real time from the admin console. Review user activity, view access on a timeline, and download reports for full control.

Vulnerability detection

Detect anomalous behavior based on location, with alerting and risk assessment of your services to prevent unauthorized access.

User authentication

According to figures quoted by the U.S. national cybersecurity chief, multifactor authentication (MFA) could prevent up to 80-90% of cyberattacks.

Give your employees the easiest-to-use authentication system. It is 100% adaptable to your needs: it integrates with any service quickly and conveniently for high-security requirements, and it verifies identity with three factors in a single interaction, or even with no interaction.

Single sign-on for many applications

Ironchip’s secure authentication integrates with most applications. Ironchip single sign-on gives you convenient and secure access. See the available protocols and integrations.

The balance between security and user experience

The technology generates a unique digital identity by analyzing environmental signals, and it becomes more secure transparently each time the user authenticates.

Maximum security without friction

Make it easier for your company to adopt security and avoid the frustration of managing passwords, codes, and tedious controls that people end up bypassing. Handle three proofs of identity in a single interaction, or even none. This is the benefit shared by all the use cases on this page.

User privacy comes first

Protecting the privacy of location data is fundamental. Ironchip only stores the prediction algorithm that can determine whether a location is valid. More detail in Location data privacy.

How frictionless authentication works

1. The user receives a notification. Authentication traffic travels over a double-encrypted channel that combines TLS with asymmetric elliptic-curve encryption.
2. The user authorizes access. Ironchip analyzes location behavior to validate the access. Locations are not stored, only the prediction algorithm that can determine whether a location is valid.
3. No password, no friction. Ironchip is one of the first solutions that can certify a user’s identity without storing their access data, with the utmost respect for user privacy.

Third-party connectivity

Researchers were able to escalate privileges from the limited access granted to a contractor to administrator access. From that position, a real attacker could compromise the system, and the company would find out too late to act.

Use Ironchip to control supplier access to your company’s most sensitive systems. Bringing in third parties to maintain systems, machinery, or even the production process is necessary, but it increases vulnerability and turns every access into a possible entry vector. Privileged access grants temporary sessions with approval and recording.

A unique, secure, non-transferable key

Human mobility patterns are highly unique. The places we visit regularly are a set of data that identifies us as clearly as our date of birth, name, or national ID, which makes them a factor of our identity.

Total access control

Monitor who accesses your systems, when, and from where, in real time from the admin console. Review user activity, view access on a timeline, and get all the metrics you need.

Intrusion detection system

Scammers know how to bypass common security controls. Move to location-based authentication and stay ahead of fraud.

Incident management

Intrusion attacks, social engineering, and basic web application attacks account for 83% (overall) of breaches in Europe, and the main motive is financial (89%).

Manage and monitor access to your company with Ironchip. Ironchip monitors access from the admin console, which lets you manage incidents, minimize unwanted access, and get real-time visibility to confirm everything works properly and to detect vulnerabilities, and their scope, early.

This use case relies on the same capabilities already described:

• Real-time access monitoring and vulnerability detection, described in Service isolation and protection. See Monitoring and ITDR.
• Role-based privilege management, with roles and permissions.
• Service isolation and protection: access restricted to authorized places, which lets you detect the entry vector and fix a vulnerability without shutting down activity.
• Event export to your SIEM: see Event export.

Fraud detection system

The future is using data mining techniques to eliminate fraud in real time, at its lowest level.

Ironchip’s fraud detection systems alert banks to suspicious operations carried out from anomalous user locations. See the fraud detection documentation to learn how to integrate it.

It builds on the same ideas as user authentication, applied to every transaction:

• Vulnerability detection: detects anomalous behavior based on location, with alerting and risk assessment of each transaction to prevent unauthorized access. See Risk assessment.
• Balance between security and user experience: the unique digital identity becomes more secure transparently each time the user makes a transaction.
• User privacy: Ironchip only stores the prediction algorithm, not locations.
• Maximum security without friction for the bank, with three proofs of identity in a single interaction, or even none.

Remote work

93% of CISOs said they are concerned about new distributed workforces, which have introduced new vulnerabilities.

Ironchip secures remote access to your services and corporate network. Integrate Ironchip MFA into any service quickly and conveniently to protect any remote access solution, both RDP and VPN (for example, OpenVPN), and allow access only from assigned locations to prevent unwanted access. Your workforce gets the same frictionless experience and the same real-time access monitoring as in the previous use cases.

Secure remote access for any environment

Use Ironchip technology in your own environments: security and interoperability are its core pillars, so it supports most integrations.

Scale as far as you need

The technology adapts in real time to new working conditions and supports new environments with simple configuration and deployment.