Skip to content

runZero Recognized as a Customers’ Choice in 2024 Gartner® Peer Insights™ Report for Cyber Asset Attack Surface Management (CAASM)

runZero Receives the Highest Willingness to Recommend Rating 96%

AUSTIN, TEXAS — July 22, 2024 — runZero has been peer recognized as a 2024 Customers’ Choice in the Gartner® Peer Insights™ Voice of the Customer for Cyber Asset Attack Surface Management (CAASM) market category. Additionally, runZero received the highest willingness to recommend rating of any vendor at 96% based on 29 reviews as of 31st March 2024. The “Voice of the Customer” is a document that synthesizes Gartner Peer Insights’ reviews into insights for IT decision makers. This aggregated peer perspective, along with the individual detailed reviews, is complementary to Gartner expert research and can play a key role in your buying process, as it focuses on direct peer experiences of implementing and operating a solution.

With 29 Gartner Peer Insights reviews, the most of any vendor included in the report, runZero received ratings from customers at organizations with annual revenues ranging from 50M to 10B+. Their feedback reflects real-world experiences with the runZero Platform across multiple sectors, including some of the world’s largest enterprises. Reviewers consistently rated runZero highly across various aspects: Product Capabilities (4.7/5) based on 29 reviews, Support Experience (4.6/5) based on 26 reviews, Sales Experience (4.7/5) based on 25 reviews, and Deployment Experience (4.6/5) based on 28 reviews. Here is a sampling of the individual reviews:

  • “An Excellent Inventory Tool. As we say, you can’t secure what you can’t see, and I needed to know what was out there in a highly distributed environment that has 22 business lines, each with a high degree of disparity in their technology needs. From cameras, drones, ICS, SCADA, radios, non-traditional IoT devices, and traditional IT infrastructure. We’ve matured significantly in our asset inventory and event response because of this partnership and I think I’d have a mutiny on my hands if I ever took it away!” – IT Security and Risk Management in Government

  • runZero is a great product for asset management. One of the most standout features of runZero is its asset discovery capabilities. It’s really easy to deploy and it has a great accuracy during the scans. Also the speed of the scans are great, giving us the possibility to get results really fast and also accurate. Also its ability to map entire networks without any credentials is a great features. The product is really user friendly and has great ability to be used with APIs.” – Data Scientist in Software

Many CAASM solutions in the market rely heavily on integrations to inventory assets, leading to incomplete visibility into unknown and unmanaged assets, while others focus solely on IT devices, lacking coverage for OT and IoT assets. The runZero Platform combines powerful proprietary active scanning and native passive discovery with integrations to overcome these limitations, providing a comprehensive, unified solution that delivers complete visibility and accurate, in-depth fingerprinting for all IT, OT, and IoT devices across on-prem, cloud, and remote environments. runZero does not require credentials, agents, or appliances, enabling the platform to start delivering insights into complex environments in just minutes.

“Our approach at runZero sets us apart from traditional CAASM companies. We’re honored to have the market validate the unique path we’ve taken and to be recognized as a Customers’ Choice in our category,” said HD Moore, founder and CEO at runZero. “We are passionate about improving visibility and exposure management for security teams, as well as streamlining their operations and accelerating response times. It’s rewarding to see the success they are having and we appreciate their willingness to share their experience and recommend runZero to their peers.”

Disclaimer: Gartner® and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner® Peer Insights™ content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

Additional resources

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.

NIS2 implementation: Is your SaaS prepared?

The revised Network and Information Systems Directive (NIS2) signifies the European Union’s strengthened commitment to enhancing cybersecurity measures across the region. Scheduled to take effect in October 2024, NIS2 broadens the scope of its predecessor, the original NIS Directive from 2016. It imposes stricter requirements to elevate the overall information security and posture in Europe.

As a cornerstone of the digital economy, Software-as-a-Service (SaaS) providers must thoroughly examine the implications of NIS2 and take timely action to ensure compliance.

What is the NIS2 Directive? 

NIS2 is designed to build upon the foundation laid by the original NIS Directive. It aims to foster greater collaboration between entities and harmonize cybersecurity standards across all European Union member states. At its core, NIS2 emphasizes a risk-based approach, proactive monitoring, and corporate accountability.

The directive introduces more stringent reporting obligations, enforcement measures, and management training requirements. Non-compliance with NIS2 can result in substantial fines of up to €10 million or 2% of global turnover, whichever is higher.

These penalties underscore the importance of adhering to the directive’s mandates and prioritizing cybersecurity.

Who does NIS2 apply to?

The NIS2 Directive targets “essential” and “important” entities operating within critical sectors such as digital infrastructure, healthcare, energy, and transport. This comprehensive scope extends to many SaaS providers, even if they do not have a physical presence within the European Union, as long as they offer digital services to EU customers.

Who does NIS2 apply to: essential versus important entities

Given the nature of SaaS models, which typically involve handling sensitive data and ensuring continuous availability, these providers are significantly affected by NIS2’s risk management measures and business continuity planning provisions. As remote work trends increase reliance on cloud-based solutions, SaaS providers need to understand and address the potential implications of NIS2 implementation.

NIS2 for SaaS: its scope and impact

Due to its expanded scope and rigorous requirements, NIS2 will substantially impact SaaS providers. The Directive mandates that providers implement comprehensive risk management measures, including regular risk analysis and continuous monitoring, to detect and mitigate cyber threats. Providers must also establish robust incident response procedures to address any security incidents swiftly.

NIS2 enforces stricter reporting obligations, requiring SaaS providers to promptly notify relevant authorities and customers during a significant cyber incident. This enhances transparency, trust, and accountability within the digital ecosystem.

Additionally, NIS2 emphasizes the importance of cybersecurity training and awareness programs for management and staff. SaaS providers must invest in ongoing education to ensure their teams are prepared to handle evolving cyber threats and maintain compliance with the directive.

Why NIS2 compliance matters

Ensuring compliance with NIS2 is not just about avoiding penalties; it is a critical step toward enhancing your SaaS operations’ overall security and resilience. Here are key reasons why compliance with the European Directive is vital:

  • Protects sensitive data. SaaS providers often manage large volumes of sensitive and personal data. Compliance with NIS2 helps protect this data against cyber threats, reducing the risk of data breaches and the associated financial and reputational damage.

  • Maintains customer trust. Customers expect their data to be handled securely. By complying with NIS2, SaaS providers demonstrate a commitment to high standards of information security, thereby maintaining and potentially increasing customer trust and loyalty.

  • Avoids financial penalties. Non-compliance with NIS2 can result in hefty fines. Ensuring compliance helps avoid significant financial penalties and their negative impact on your business.

  • Enhances competitive advantage. In a market where information security is a significant concern, compliance with NIS2 can provide a competitive edge. SaaS providers prioritizing compliance can differentiate themselves by offering more secure and reliable services.

  • Ensures business continuity. NIS2 mandates robust risk management measures and incident response procedures. By adhering to these requirements, SaaS providers can minimize downtime and ensure continuous service availability, which is crucial for maintaining operations and customer satisfaction.

  • Strengthens corporate accountability. NIS2 emphasizes the role of senior management in cybersecurity. Compliance ensures that executives know their responsibilities and actively manage and mitigate cyber risks, leading to better governance and oversight.

  • Mitigates supply chain risks. With NIS2’s focus on the supply chain, compliance ensures that all third-party services and partners adhere to high-security standards. This reduces the risk of vulnerabilities introduced through external parties.

  • Aligns with global standards. As information security threats become increasingly global, aligning with the NIS2 Directive positions SaaS providers to meet international security standards, facilitating smoother operations across different regions and markets.

Compliance with NIS2 is a proactive measure that goes beyond regulatory obligations. Building a robust, secure, and trustworthy digital infrastructure that can withstand the constantly evolving cyber threats environment is essential.

By prioritizing compliance, SaaS providers safeguard their operations and contribute to enhancing cybersecurity across the European Union.

Challenges of the NIS2 Directive for SaaS providers

As SaaS providers prepare to implement NIS2, they may encounter several challenges that require careful planning and strategic action. Below there is a list of potential hurdles that providers should be aware of:

  • Complex compliance requirements: Navigating the extensive and detailed requirements of NIS2 sectors can be challenging, especially for smaller SaaS providers with limited resources

  • Enhanced reporting obligations: Meeting the directive’s stringent reporting requirements may require significant changes to existing processes and systems

  • Increased costs: Implementing the necessary security measures and training programs can be costly, impacting the provider’s budget and resource allocation

  • Risk management: Establishing effective risk management measures involves continuous monitoring, regular assessments, and timely updates to security protocols

  • Corporate accountability: Ensuring that senior management is adequately trained and aware of their responsibilities under NIS2 can be demanding

  • Data sovereignty & localization: Adhering to data sovereignty and localization requirements, especially for providers operating across multiple jurisdictions, adds another layer of complexity

  • Supply chain vulnerabilities: Managing and securing the supply chain to ensure that all third-party services comply with NIS2 can be a daunting task

Prepare your SaaS for NIS2 compliance

To help SaaS providers navigate the complexities of NIS2 compliance, we have outlined a list of essential steps.

NIS2 compliance steps for SaaS

1. Conduct a comprehensive risk assessment

Perform a thorough risk analysis to identify potential vulnerabilities and threats within your network and information systems. Regularly update this assessment to reflect new risks and changes in the threat landscape.

2. Implement robust security measures

Ensure that your security measures align with NIS2 requirements, including Always-On VPN and Multi-Factor Authentication (MFA) for secure access, as well as dynamic firewalls and network segmentation to isolate environments and enforce least privileged access.

3. Establish incident response procedures

Develop and implement a robust incident response plan that includes procedures for detecting and responding to security incidents and clear communication protocols for notifying authorities and affected parties.

4. Invest in continuous monitoring

Utilize advanced monitoring tools such as cloud-delivered Intrusion Prevention Systems (IPS), Intrusion Detection Systems (IDS), and Web Application Firewalls (WAF) for continuous surveillance and protection.

5. Train management & staff

Provide regular cybersecurity training for management and staff to ensure their awareness of their responsibilities under NIS2 and their ability to respond effectively to cyber threats and security incidents.

6. Ensure data sovereignty & localization

Adhere to data sovereignty and localization requirements by using dedicated servers with fixed IP addresses to ensure data remains within the specified jurisdiction.

7. Engage expert compliance consultants

Consider partnering with compliance consultants to strategize and validate your NIS2 preparedness and ensure thorough attention to all aspects of the Directive.

Embracing the future of cybersecurity

As we move towards an increasingly digital future, the importance of robust cybersecurity cannot be overstated. Implementing NIS2 represents a significant transition in approaching security across the European Union, setting a new standard for resilience against cyber threats.

This directive is both a challenge and an opportunity for SaaS providers. By embracing NIS2’s requirements, providers protect their operations and build trust with their customers, enhance their competitive edge, and contribute to a safer digital ecosystem.

Compliance with NIS2 is more than a regulatory obligation; it is a commitment to excellence in cybersecurity. As cyber threats evolve, staying ahead requires proactive measures, continuous improvement, and a dedication to safeguarding data and infrastructure.

Take this opportunity to transform your SaaS business’ security practices, fortify your defenses, and create a secure digitalized environment.

How NordLayer can help

As a network security provider, NordLayer offers tools and services to help SaaS providers achieve NIS2 compliance by:

  • Access control policies. Implement strong Network Access Control (NAC) policies using NordLayers Virtual Private Gateways with a dedicated IP address. Additionally, adopt advanced features like Cloud Firewall for granular network segmentation, and Device posture security to ensure only known and compliant devices can enter the company’s network. Elevate your network protection with multi-layered authentication methods such as 2FA (SMS & TOTP) and biometrics to access your network.

  • Effective incident handling. Utilize threat prevention features like traffic encryption, IP masking, DNS filtering, and Always-On VPN to mitigate various threats that can infect your network. Improve threat detection with Device Posture Security and activity monitoring to maintain a resilient network infrastructure.

  • Solid cryptography policies. Utilize NordLayer’s VPN gateways with quantum-safe encryption of data in transit. Provide a secure environment for browsing online and accessing sensitive resources or hybrid networks.

With NordLayer, SaaS providers can simplify infrastructure security management and demonstrate compliance with some of the stringent requirements of the NIS2 Directive.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

Scale Computing Named a Finalist in CRN’s 2024 Tech Innovator Awards

Scale Computing Autonomous Infrastructure Management Engine Honored in Edge Computing/Internet of Things Category 

INDIANAPOLIS — July 31, 2024 — Scale Computing, a market leader in edge computing, virtualization, and hyperconverged solutions, today announced that CRN®, a brand of The Channel Company, named Scale Computing as a finalist for the 2024 CRN Tech Innovator Awards. Scale Computing was recognized for its Scale Computing Autonomous Infrastructure Management Engine (AIME) in the Edge Computing/Internet of Things category.

Scale Computing Autonomous Infrastructure Management Engine (AIME) is the orchestration and management engine that powers Scale Computing HyperCore (SC//HyperCore), the award-winning self-healing platform that identifies, reduces, and corrects problems in real-time. AIME handles day-to-day administrative tasks and maintenance automatically, monitors the system for security, hardware, and software errors, and remediates those errors where possible. It identifies the root cause and minimizes the impact of those issues when it cannot repair them automatically, notifying users with specific problem determination and action, versus just sending a stream of data that must be interpreted.

“Our mission is to deliver innovative, intelligent, and simple solutions that enable our partners and customers to successfully and reliably save time and resources with their IT infrastructure. AIME drastically reduces the amount of effort required to deploy, secure, manage and maintain on-premises infrastructure. It’s a core feature of SC//HyperCore, which is the ideal solution for MSPs as it saves time and valuable resources because software, servers, and storage are in one fully integrated platform,” said Jeff Ready, CEO and co-founder of Scale Computing. “Scale Computing is honored to be recognized by CRN and remains committed to providing our partners and customers with solutions that bring simplicity and scalability together, replacing existing infrastructure and providing high availability for running workloads, regardless of any hardware requirements. We’re excited to be named a CRN Tech Innovator finalist.”

This annual award showcases innovative vendors in the IT channel across 36 distinct technology categories ranging from cloud to storage to networking to security. The 2024 winners were selected by a panel of CRN editors who reviewed hundreds of vendor entries and solution provider testimonials. Standout innovators were selected as finalists based on a number of criteria, including key capabilities, uniqueness, technological ingenuity, and ability to address customer and partner needs.

“We are pleased to recognize the commitment to continuous innovation among this year’s CRN Tech Innovator Award finalists. Each of these vendors delivers cutting-edge technology that meets evolving customer needs and creates new opportunities for solution providers and the broader IT channel ecosystem,” said Jennifer Follett, VP, U.S. Content, and Executive Editor, CRN, The Channel company. “We look forward to future innovations from the recipients and to seeing how their solution provider partners use these offerings as the foundation of new, inventive solutions.”

The Tech Innovator Awards Finalists can be viewed online at crn.com/techinnovators. Winners will be announced on crn.com on August 7, 2024 and will be featured in the August issue of CRN.

To learn more about the award-winning Scale Computing Autonomous Infrastructure Management Engine and Scale Computing HyperCore, please visit scalecomputing.com/sc-hypercore.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Scale Computing 
Scale Computing is a leader in edge computing, virtualization, and hyperconverged solutions. Scale Computing HC3 software eliminates the need for traditional virtualization software, disaster recovery software, servers, and shared storage, replacing these with a fully integrated, highly available system for running applications. Using patented HyperCore™ technology, the HC3 self-healing platform automatically identifies, mitigates, and corrects infrastructure problems in real-time, enabling applications to achieve maximum uptime. When ease-of-use, high availability, and TCO matter, Scale Computing HC3 is the ideal infrastructure platform. Read what our customers have to say on Gartner Peer Insights, Spiceworks, TechValidate and TrustRadius.

How to find VMware/Broadcom ESXi installs on your network

Latest Broadcom ESXi vulnerabilities 

Broadcom has disclosed a vulnerability in their ESXi product that involves a domain group that could contain members that are granted full administrative access to the ESXi hypervisor host by default without proper validation.

CVE-2024-37085 is rated medium with CVSS score of 6.8 and allows an attacker with sufficient Active Directory (AD) permissions to bypass authentication.

What is the impact?

A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group (‘ESXi Admins’ by default) after it was deleted from AD. The three ways this can be exploited are:

1. Creating the AD group ‘ESX Admins’ to the domain and adding a user to it (known to be exploited in the wild)

2. Renaming another AD group in the domain to ‘ESX Admins’ and adding a new or existing user to it

3. Refreshing the privileges in the ESXi hypervisor when the ‘ESX Admin’ group is unassigned as the management group.

Are updates or workarounds available?

Product

Version

Fixed Version

Workarounds

ESXi

8.0

ESXi80U3-24022510

KB369707

ESXi

7.0

No Patch Planned

KB369707

VMware Cloud Foundation

5.x

5.2

KB369707

VMware Cloud Foundation

4.x

No Patch Planned

KB369707

 

How to find potentially vulnerable systems runZero

From the Asset Inventory, use the following query to locate systems running potentially vulnerable software:

os:ESXi

Additionally, using the runZero VMware integration, use the following query to locate virtual machines running inside VMware, which could be potential sources of exploitation:

source:vmware or source:broadcom

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.

Why passwordless authentication is the way forward

Moving beyond passwords

Passwords have been the go-to method for securing access to online accounts and data from the early days of the Internet. However, as cyberattacks grow increasingly sophisticated, relying solely on passwords may no longer suffice.

Hacker-controlled machines are now too good at cracking them, particularly because many people use weak or reused passwords across multiple accounts, unaware that this practice makes the attackers’ job effortless.

And so, the time has come to move beyond passwords and adopt more modern standards to safeguard digital assets. In other words, it’s time to go passwordless.

What is passwordless authentication?

Passwordless authentication is a cybersecurity method where users can access a service or application without entering a password. How does passwordless authentication work then? It allows users to utilize alternative authentication factors such as fingerprints or face IDs to verify their identity while logging into a service.

The goal of passwordless authentication is to provide a more convenient alternative to traditional passwords that can not only maintain but also enhance the level of protection against cyberattacks.

Types of passwordless authentication

Passwordless authentication can take many forms; however, some are now more popular than others. Let’s now go through a few of the commonly used authentication techniques that do not require passwords.

Biometric authentication

Probably the most popular passwordless authentication method available today, biometrics involves using built-in scanning tools on devices to verify unique biological characteristics such as fingerprints or facial features to confirm a user’s identity. This method has become highly popular because most modern mobile phones support it. Also, fingerprints can’t be as easily stolen as James Bond movies might suggest, which makes biometric authentication a more secure option than passwords.

Authentication apps

This popular password-free authentication technique uses a dedicated app to generate time-limited codes for accessing accounts, ensuring high security. It works well because most people have their mobile phones with them, making it easier to check the app for a code than to remember all their passwords for different online accounts.

Hardware Tokens

Generally speaking, hardware tokens are physical devices that generate authentication codes or utilize cryptographic keys to grant access to systems. They are quite popular due to their reliability in providing a second factor of authentication, which significantly enhances security. Also, hardware tokens do not rely on internet connectivity or software, making them more resilient against many forms of cyber threats.

Magic Links

With this method, users receive a link via email that, when clicked, allows them to log in to their account without entering a password. This approach simplifies the login process while ensuring security, as the link is usually valid for a limited time and can only be used once.

Passkeys

Compared to other types of passwordless authentication described in this section, passkeys are the new kid on the block, though already quite popular. Passkeys typically involve using a pair of cryptographic keys: a private key stored on the user’s device and a corresponding public key on the website’s server. Access is granted when these keys are successfully matched in a process often initiated through biometrics. This approach enhances convenience and significantly boosts security because attackers must acquire both keys to gain unauthorized access. Stealing the private key from the user’s device is extremely difficult.

The benefits of passwordless authentication

As we’ve already covered in this article, the benefits of passwordless authentication are plenty. These advantages become even clearer when compared to what passwords can provide. So, let’s delve into each major benefit in detail, starting with…

1. Enhanced security

The first, and arguably the most important, benefit of passwordless authentication is that it provides much more protection than traditional passwords. This is because it eliminates vulnerabilities commonly associated with password-based systems, such as phishing, brute-force attacks, and password reuse. With passwordless methods like biometrics or passkeys, authentication relies on unique and difficult-to-replicate factors, significantly reducing the risk of unauthorized access. As a result, adopting passwordless authentication strengthens overall security posture and helps keep outsiders at bay.

2. Ease of use

When it comes to user convenience, passwordless authentication delivers a knockout blow to passwords, preventing them from getting back up. Firstly, the passwordless approach is much faster as it allows users to log in to a service or application with one click, whereas with passwords… well, you know the drill. Secondly, with passwordless authentication, users don’t have to remember anything, freeing their minds and preventing the frustration of repeatedly entering incorrect passwords. And thirdly, this ease of use extends to business as well, preventing account lockouts and shopping cart abandonments, and keeping customers happier and more willing to use a given service.

3. Reduced password-related support

Unlike traditional authentication methods that frequently lead to forgotten passwords and subsequent support requests, passwordless authentication effectively eliminates these issues. This significantly reduces the need for password-related support, saving time and resources while enhancing user satisfaction with a seamless login experience.

4. Enhanced regulatory compliance

Embracing passwordless authentication is a strategic way for businesses to boost their compliance with regulations on data privacy. How so? By adopting secure methods like biometrics or passkeys, organizations can meet diverse data protection requirements without compromising user convenience. This proactive approach not only helps mitigate financial and reputational risks associated with non-compliance but also builds trust among customers and stakeholders.

 

Passwordless authentication use cases

With the support of organizations such as the FIDO Alliance, which helps develop authentication standards to reduce the world’s reliance on passwords, passwordless authentication methods have become highly popular among key players across all industries.

This should come as no surprise, especially considering that, according to a study by Secret Double Octopus and the Ponemon Institute called “State of Workforce Passwordless Authentication,” organizations can save up to $1.9 million by implementing passwordless authentication methods.

This explains why Microsoft has been promoting passwordless authentication through Windows Hello; why Amazon, Apple, and Google have introduced support for passkeys in their services; why Twitter offers password-free login options through third-party authentication apps and security keys; and so on — almost everywhere you look, a password-free login option is available. As a result, passwordless authentication is used today by millions of users worldwide and is gradually pushing passwords out of the picture.

How to enable passwordless authentication on your service

If your website or application requires customers to log in but doesn’t offer passwordless options, consider adding this feature to your to-do list. The answer to whether your company and your customers will benefit from that is undoubtedly yes. The real question is: how can you integrate a password-free login option effectively?

Well, although you can hire a team of IT professionals and ask them to write passwordless logins into your code, this approach requires significant upfront investment and is rather time-consuming.

Fortunately, there are alternatives. For example, you can use Authopia by NordPass, a free tool that allows you to easily add a passkeys widget to the login form on your website or service. Here’s how it works: you receive pre-written code that even those with basic IT skills can implement, you activate the widget by registering with Authopia, and voilà — you have a password-free login option up and running!

As already mentioned, Authopia is free to use, which means you can quickly integrate passkey logins into your service and observe improvements in sign-ups and conversions today. So, don’t miss out on this opportunity!

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

×

Hello!

Click one of our contacts below to chat on WhatsApp

Social Chat is free, download and try it now here!

×