The 1Kosmos perspective

Step-by-step technical guide for implementing AI agent runtime authorization with verifiable credentials, CIBA flows, and policy-based control.

Registration-time identity establishes who an AI agent is. Runtime authorization controls what it does. Learn the difference and why you need both.

AI agents can make unauthorized purchases without human approval. Learn how to prevent autonomous spending with policy-based controls and approval gates.

Ghost agents are AI agents that keep running after employees leave. Learn how to prevent orphaned agents from creating security and financial risks.

1Kosmos COO Huzefa Olia examines Gartner research on why workforce identity verification needs specialized vendors beyond consumer IDV tools.

The McKinsey Lilli breach exposed critical gaps in AI agent authentication. Learn why OAuth isn't enough and what enterprise AI security really needs.

Two 2026 healthcare breaches show why identity security and controls, not perimeter defenses, have become MedTech's critical attack surface.

Sr. Director of Healthcare Sales Patrick Phillips explains how health wallets and W3C-DID are shaping future healthcare cybersecurity and identity strategy.

1Kosmos Sr. Director of Healthcare Sales Patrick Phillips explains why healthcare is years behind, what it’s costing, and how modern IAM can close the gap.

Identity verification in healthcare is the overlooked attack vector costing billions. Learn how weak verification enables breaches and what stops them.

AI agent identity mapping isn't enough. Learn how 1Kosmos enforces trust, authentication, and human-in-the-loop approval for secure agent automation.

AI agent runtime authorization controls what autonomous agents do at execution time. Learn how to prevent unauthorized spending, data access, and ghost agents.

Behavioral biometric solutions verify identity by analyzing interaction patterns like typing rhythm and mouse movements to detect fraud.

Behavioral authentication verifies identity through typing patterns, mouse movements, and user interactions. Learn about typing biometrics and other methods.

Top IDV platforms that offer biometric authentication include 1Kosmos, Jumio, Veriff, Onfido, and Mitek. Compare features, certifications, and use cases.

Modern authentication trends beyond traditional MFA include passkeys, AI-driven adaptive auth, behavioral biometrics, and phishing-resistant methods.

SCIM automates user provisioning and lifecycle management, while SAML handles authentication and SSO. Learn how they work together in enterprise IAM.

Contact center fraud prevention stops criminals from exploiting call centers to steal data and drain accounts. Learn how 1Kosmos secures authentication.

FIDO2 security keys vs passkeys explained. Learn the difference between hardware keys like YubiKey, synced passkeys, and which is best for enterprise.

Struggling with slow onboarding due to identity checks? Learn how automated KYC and AI-powered verification speed up customer onboarding in under a minute.

Explore the top FIDO2 passkey solutions for 2026 and learn how enterprises can eliminate passwords with phishing-resistant, identity-backed authentication.

Learn what identity threat protection is, why IAM alone isn’t enough, and how organizations can stop identity-based attacks in real time.

Explore the best IDV solutions for financial services to stop fraud, meet KYC and AML requirements, and deliver secure, frictionless onboarding.

Learn how biometric identity verification modernizes call center security, eliminates KBA, reduces fraud, and improves customer experience.

Explore the top passwordless authentication solutions in 2026 and learn how verified identity and biometrics stop phishing and account takeover.

Learn what MFA fatigue attacks are, how they work, and how phishing-resistant MFA and Zero Trust stop them before damage is done.

A practical guide to IAM implementation, covering strategy, deployment models, risks, and ROI for securing access in 2026.

Learn the difference between 2FA and MFA, how authentication factors work, and which approach delivers stronger, phishing-resistant security.

Reimagine digital onboarding with secure identity verification that stops fraud, accelerates access, and turns first interactions into lasting trust.

Learn what phishing-resistant MFA is, why traditional MFA fails, and how to deploy passwordless, phishing-proof authentication across your organization.

1Kosmos was highly commended for Best Digital Trust Solution at the 2025 PayTech Awards USA, recognizing leadership in IDV and authentication.

FedRAMP High is the gold standard for cloud security, protecting sensitive federal data with 421+ controls, strict audits, and continuous monitoring.

Identity verification software authenticates individuals by analyzing documents, biometrics, and databases. Learn how to choose the right one for you in 2026.

eKYC uses AI, biometrics, and real-time checks to speed onboarding, cut costs, prevent fraud, and ensure compliance across finance, healthcare, and more.

FedRAMP Moderate secures federal cloud systems with 325 NIST controls, protecting CUI and covering 80% of providers. Learn its benefits, scope, and use cases.

Digital identity verification mitigates fraud, ensures compliance, and streamlines onboarding with AI, biometrics, and privacy-first solutions like 1Kosmos.

Decentralized identity is a user-centric model where individuals own and control their digital credentials without relying on central authorities. Learn more.

IAM is the collection of technologies and practices that regulate who can authenticate and sign in, and what resources they are authorized to access.

A brute-force attack uses computers to attempt to breach authentication systems with rapid and overwhelming trial-and-error login attempts.

Asymmetric encryption is a form of cryptography that uses two distinct but linked encryption-decryption keys to protect information from outside viewing.

Digital identity management secures data with authentication, authorization, administration, and auditing. Explore benefits, challenges, and best practices.

Learn what FedRAMP High is, why it matters, and how 1Kosmos helps agencies achieve unmatched security and compliance.

Customer identity verification ensures fraud prevention, compliance, and trust. Explore best practices using AI, biometrics, and layered checks.

This annual report highlights the escalating threat of identity-based attacks and the rapid technological evolution needed to counter them.

Hiring fraud threatens remote teams as deepfakes and synthetic IDs slip through. Learn how identity assurance and 1Kosmos LiveID prevent costly breaches.

Universities face rising direct deposit fraud as attackers steal credentials and reroute paychecks. Learn how identity verification can stop payroll theft.

From CISO to 1Kosmos co-founder: building a platform that redefines authentication with verified identity and passwordless access.

1Kosmos has been named a Challenger in the 2025 Gartner Magic Quadrant for Identity Verification and earned the #1 Workforce Product Score.

Identity has become one of the most vulnerable parts of the digital world, and incidents show that the old ways of handling identity are no longer sufficient.

1Kosmos redefines digital identity with passwordless authentication, FedRAMP High authorization, and verified access that stops fraud before it starts.

Discover how 1Kosmos built the reference architecture for secure, passwordless, and privacy-first digital identity, and the future it’s enabling.

1Kosmos secures $57M Series B — led by top investors and backed by its own team — to accelerate global growth in secure, passwordless digital identity.

AI voice cloning weaponizes family voices for fraud. 1Kosmos liveness biometrics stop deepfake impersonation before it causes damage.

Digital certificates are electronic credentials that connect an entity with a public key. Think of them as digital ID cards, confirming the holder's identity.

Columbia's data breach reveals critical gaps in university cybersecurity. Learn how passwordless MFA and identity-first security can prevent the next attack.

FBI warns Scattered Spider targets airlines. Identity-first security stops social engineering, MFA bypass, and vendor compromise before attackers get in.

Scattered Spider breached Marks & Spencer via weak service desk controls. Identity-based authentication stops supply chain attacks.

British retailers hit by cyberattacks highlight rising threats of social engineering—and why traditional MFA can’t stop groups like Scattered Spider.

North Korean operatives use AI identities and deepfakes to infiltrate companies. Learn how 1Kosmos biometric authentication stops these threats.

Explore the UK's DIATF framework for digital identity, its economic impact, privacy challenges, and how 1Kosmos offers secure, decentralized solutions.

India's new Aadhaar app adds facial biometrics and privacy controls, advancing digital identity infrastructure with lessons for global governments.

Federated Identity Management (FIM) allows trusted domains to share a single digital identity, enabling users to securely access applications across sites.

Modern technology brings unique identity verification challenges. Verifiable credentials provide the solution for secure digital identity authentication.

Credential stuffing is a cyberattack that uses stolen usernames and passwords to attempt unauthorized access across multiple accounts and login forms.

Authentication proves users are who they say they are. Authorization permits users to access certain tools, data, or areas on a network.

Secure authentication methods and best practices for protecting user identities and preventing unauthorized access to systems and data.

Identity management (IM) is the practice of verifying user credentials, determining access permissions, and managing users within a system.

Authentication is used to verify a user's identity to protect against data breaches. But how do you authenticate someone's ID? There are a number of ways.

Workforce identity verification to combat social engineering, deepfakes & credential fraud. NIST & FIDO2 certified. Learn how 1Kosmos protects your org.

Modernize workforce authentication with 1Kosmos and Concentrix. Combat phishing and fraud with passwordless MFA, identity verification, and managed security.

Thailand's digital identity transformation uses biometrics and ThaID to enhance security, financial inclusion, and support the Thailand 4.0 vision.

Non-phishable biometric authentication to stop evolving cyber threats. 1Kosmos protects against phishing, ransomware & breaches. Modern MFA that works.

Unmasking the MGM Resorts Cyber Attack: Revealing Vulnerabilities and Identity-Based Authentication Solutions

Self-service user onboarding with biometric identity verification. 1Kosmos + Microsoft streamline onboarding, reduce IT workload & enhance security.

Enhance customer identity verification in financial services with AI, blockchain & biometrics. Advanced identity solutions for secure transactions.

Secure your hybrid environment with biometric, multi-factor & passwordless authentication methods. Enhance security, user experience & regulatory compliance.

Learn how Three-Factor Authentication (3FA) enhances security with 3 distinct verification steps, plus implementation tips and emerging cybersecurity trends.

Snowflake breach by Shiny Hunters exposed Ticketmaster & Santander data. Learn critical security lessons on MFA, encryption & third-party access protection.

Discover passkey authentication: enhance user verification, reduce vulnerabilities, and offer seamless logins for improved digital security.

Identiverse 2024 key takeaways: passkeys, biometric security & digital identity innovations from Andre Durand & United Airlines. Shaping identity's future.

Explore Gartner's "Seven Tracks to a Mature MFA Implementation" and how 1Kosmos enhances them through advanced MFA solutions.

Unlock secure authentication with 1Kosmos 1Key. Phishing-resistant biometric security for unlimited users per device. No lost or shared keys. Learn more.

Change Healthcare ransomware attack highlights the need for robust identity verification. Learn how 1Kosmos mitigates risks & prevents future breaches.

Change Healthcare ransomware attack underscores the need for robust identity verification. Learn how 1Kosmos platform mitigates such security risks.

Blockchain identity management offers decentralized security, transparency, and user control. Learn how it enhances privacy and reduces costs.

Explore fingerprint biometrics: how unique patterns, scanner types & emerging technologies shape security. Learn about implementation with 1Kosmos. Read more.

Magic link authentication provides passwordless login through unique, time-sensitive URLs sent to email. Learn how it works and enhances security.

Explore the evolution of authentication and how step-up authentication protects sensitive data with dynamic, risk-based security for high-risk transactions.

Discover passwordless IAM: evolution from passwords to biometric authentication. Explore technologies, real-world applications & implementation with 1Kosmos.

Stop AI-generated deepfake biometric attacks with advanced identity verification. Learn how LiveID+ detects and prevents injection attacks.

Learn what biometric spoofing is and how attackers use facial recognition, fingerprint, and iris scanning attacks to deceive authentication systems.

Stay informed and secure with insights from recent FBI reports on escalating cyber espionage from China, including the emergence of the Volt Typhoon botnet.

Multi-factor authentication (MFA) is pivotal in cybersecurity, but MFA fatigue from repetitive, cumbersome prompts challenges security and user experience.

Fast Identity Online (FIDO) eliminates passwords using cryptographic security & biometrics. Explore FIDO2 passwordless authentication with 1Kosmos today.

Unlock stronger security and efficiency with smart cards. Explore types, components, methods, benefits, and how 1Kosmos improves smart card security.

Fast, frictionless onboarding for customers, workers, and citizens demands strong identity and claim verification while preventing fraud and protecting privacy.

Distributed Ledger Technology is transforming IAM. See how 1Kosmos uses decentralized identity and a private, permissioned blockchain to stop PII honeypots.

Leverage advances in smartphones, cryptography, and blockchain with 1Kosmos to establish high-assurance digital trust and secure online interactions.

1Kosmos is now an AWS Cognito passwordless MFA partner, enhancing online account security with biometrics, one-time passwords, and phishing-resistant MFA.

1Kosmos advanced biometric authentication offers liveness testing, biometric encryption, and adaptive identity assurance, certified to FIDO2 and NIST 800-63-3.

Learn how PCI DSS 4.0 raises the bar for passwords and MFA, and how 1Kosmos helps orgs meet new authentication and security requirements out of the box.

Discover how 1Kosmos fortifies digital identities and enables secure digital transformations for government agencies and citizens.

With irrefutable proof of identity and immutable audit logs for all access, orgs can lift customer loyalty and capture market share from less tech-savvy rivals.

Strengthen identity governance and regulatory compliance with 1Kosmos. Learn how to manage roles, access, and identities securely across your organization.

Decentralizing the future with Distributed Ledger: Elevate organizational efficiency and data protection. Delve into the insights now!

See how distributed digital identity (DDI) with 1Kosmos empowers users, enhances data privacy, and modernizes identity verification for the digital era.

Explore how Portugal blends Old World charm with cutting-edge digital identity, leads in SSI, and uses distributed ledger tech with 1Kosmos securing the future.

Rob MacDonald and Mike Engle discuss the MGM attack, vishing threats, and how identity verification prevents social engineering breaches.

Vishing (voice phishing) is a social engineering attack where fraudsters use phone calls to deceive victims into revealing sensitive information.

In this blog post, we'll explore what passkeys are, their significance in modern authentication, and how they are being utilized in various domains.

Identity-based passwordless authentication: the future of online security. Dive into benefits, challenges, and data protection advancements.

Rob MacDonald and Vikram Subramanian discuss how to integrate identity verification into your SSO implementation.

Dive into eKYC: Boost verification, combat fraud & streamline onboarding. Discover a future of security & efficiency in our overview!

Learn how modern customer verification, including two-factor authentication and age checks, helps businesses protect privacy, prevent fraud, and build trust.

Navigate the world of Anti-Money Laundering Compliance: its impact, challenges, and the tech solutions elevating its effectiveness. Explore now!

Discover Continuous Authentication: Elevate cybersecurity, optimize user experience, and tackle evolving threats. Dive in!

Know Your Business (KYB) checks are critical for managing risk, fighting fraud and money laundering, and meeting global AML/CTF regulations.

Symmetric encryption uses a single private key to both encrypt and decrypt data.

Identity Orchestration is an Identity and Access Management (IAM) approach that automates managing and securing digital identities across diverse platforms.

Explore the fascinating world of digital document verification in this comprehensive guide. Discover the evolution of technology, methods of identity verification, real-world applications, and its significance across various sectors. Uncover the role of AI and machine learning in enhancing security, compliance, and trust. Safeguard your operations with privacy considerations in this age of digital interactions. Enhance your document verification efforts with advanced tools like 1Kosmos. Join us on this journey of understanding the art of sniffing out the genuine from the fraudulent in the hyperconnected world.

Singapore leads in digital identity innovation. Discover how this city-state uses advanced verification systems to secure transactions and services.

Identity Threat Detection and Response is a collection of security tools and practices for monitoring, identifying, and responding to identity-related threats.

"Identity fabric" isn't a solution in and of itself, but rather represents a comprehensive and holistic approach to managing digital identities and security.

Federated identity refers to linking a person's electronic identity and attributes stored across multiple identity management systems.

Identity Lifecycle Management (ILM) is the technologies, processes, and policies governing digital identity creation, management, and deletion.

Discover how Belgium leads the way in digital identity and revolutionizes online interactions. Learn about the itsme mobile ID scheme, its convenience, and security features. Explore the upcoming EIDAS 2.0 and the potential for Self-Sovereign Identity. Find out how distributed ledger technologies enable secure authentication and protect personal information. Unlock the future of digital identity with 1Kosmos, the certified platform. Schedule a free demo and take a step towards a safer and more convenient online world.

Celebrate the diversity of human identity and the importance of inclusivity with 1Kosmos. In a world where bias still lurks, we have built a digital identity proofing platform that is fair and inclusive. Discover how our innovative approach, free from AI facial recognition, ensures every individual is seen, respected, and acknowledged. Say goodbye to biased decisioning and hello to a system that achieves non-bias racial and gender decisioning, empowering individuals with objectivity, equity, and fairness. With a focus on security and user-friendliness, we prioritize your data privacy, giving you control over your personal information. Join us in setting a new standard for identity verification, where everyone's identity is recognized and respected, regardless of their background or resources.

Account takeover prevention actively reduces attack surfaces by which hackers can break into and use system accounts for malicious purposes.

Encryption converts information into a secret code to protect it from unauthorized access, ensuring privacy and security of transmitted and stored data.

MITRE ATT&CK is a globally accessible knowledge base of adversarial tactics and techniques that provides comprehensive understanding of cyber threats.

LinkedIn has joined the ranks of social media platforms offering ID verification badges designed to assure users that the person associated with a profile is in fact who they claim to be.

The 2023 Verizon DBIR finds 74% of breaches involve the human element. Stolen credentials remain the top attack vector at 44.7% of all breaches.

Windows Credential Manager stores authentication credentials that are used to log in to websites or other computers on a network.

Login credentials are unique pieces of information that verify the identity of a user accessing a digital system.

The Second Payment Services Directive (PSD2) is an EU law regulating electronic payment services within EU states and the European Economic Area (EEA).

The digital identity verification arena is swiftly adapting. This article will explore six prevailing trends in the realm of identity verification.

In this vlog, our COO, Huzefa Olia, is joined by Kevin Shanley, Principal at Amazon Web Services Identity to discuss bringing verified identity and passwordless to the masses.

Magic links are a passwordless authentication method that allows users to log in using a URL sent to their email.

Knowledge-Based Authentication (KBA) verifies a person's identity by asking them for specific information that only they should know.

Secure remote access is a method that lets authorized users access a private network as if they were on-premises with that network.

EIC or the European Identity Conference, in my opinion, is a premier identity conference, which is out there. It brings together the whole notion of how digital identity plays on the cloud with security as well. Very, very excited to see new emerging trends, which are going to be in the market for identity and digital identity in particular, as well as very excited to see our customers, partners and a few prospects as well.

Liveness detection is a process of biometric authentication where the system verifies that proof presented for authentication is from a live person.

FINRA compliance requirements ensure financial brokers adhere to anti-fraud laws through cybersecurity and identity verification controls.

Learn how Man in the Browser (MitB) attacks utilize malware to compromise secure web communications and how to protect yourself.

Learn everything you’ve ever wanted to know about AES encryption - the only publicly available block cipher approved by the NSA.

Enhanced due diligence is critical for KYC and AML compliance. Learn how to implement EDD processes to identify and manage high-risk customers.

JWT authentication is a reliable, secure way to authenticate users. Stateless design and token-based approach enhance scalability and simplify development.

Rainbow table attacks can allow attackers to access secure systems without guessing a password. Learn what they are and how to protect your company.

Private key cryptography is a form of encryption that uses a single, private key for both the encryption and decryption of data.

In this vlog, 1Kosmos VP of Product Marketing, Robert MacDonald, is joined by our VP of Product Management, Javed Shah, and our Marketing Manager, Abigail Edwards, to discuss their experience at Gartner IAM.

Privileged Access Management is a set of technologies and processes used to control and monitor access to privileged accounts that control or touch private or mission-critical data.

Biometric authentication is identity verification using unique physical or behavioral traits like fingerprints, facial patterns, and voice recognition.

Spear phishing is a type of social engineering attack that targets specific individuals or groups with tailored, sophisticated, and fraudulent communications.

In this vlog, 1Kosmos CSO, Mike Engle, is joined by CodeCluster CEO, Mike Vitez, to discuss how 1Kosmos, Arculus, and CodeCluster partner to reduce fraud.

Fraud detection is the process of identifying and preventing fraud before malicious parties can execute illegal or damaging actions.

Credential access is when hackers steal legitimate user credentials to infiltrate and propagate through systems for malicious purposes.

Password cracking is the use of different attacks to guess or expose a password and gain access into a user’s account.

Password guessing is the use of brute-force techniques to attempt to guess a password and break into a user’s account.

Twitter is giving SMS-based two-factor authentication (2FA) the bird for all but its paid subscribers. But there's a simpler way to secure Twitter accounts without ruffling anyone's feathers.

1Kosmos CMO, Michael Cichon and Chief Strategy Officer, Mike Engle, discuss how to deliver the privacy, security and convenience people expect online.

Prevent password sharing while keeping subscribers happy. Learn how streaming services balance security and user experience to reduce churn and boost revenue.

On February 8, Privacy by Design (PbD) officially became an international privacy standard—but the architecture you use to operationalize its principles may matter as much as the standard itself.

Adversary-in-The-Middle is the use of phishing sites to steal credentials and cookies from users to bypass MFA and access critical systems.

Credential dumping is when a hacker uses exploits to expose authentication credentials that they can use or sell.

Enabling biometrics with FIDO can help create more security for your logins and reduces the risk of login attacks from succeeding.

Identity-linked proofing can only help mitigate sophisticated cyberthreats especially for new hire onboarding and the risk of Day 1 access for the new hire.

Organizations need to make data and services available, but if it’s too easily accessible, too open, then a data breach can occur.

What can we use instead of passwords that will prevent these breaches and keep our workforce, citizens, and customers safe? And when we finally decide to go passwordless, what should our strategy be? If eliminating passwords isn’t enough, what are the three things that are missing in your current passwordless strategy?

What is blockchain verification? It’s the use of private blockchain technology to store and verify identity credentials.

Time-based one-time passwords use synced clocks to generate and cycle through authentication tokens for added system security.

It's 2023—do you know what your identity is doing? As the adoption of digital channels continues to be matched by corresponding levels of fraud, the ability to achieve digital identity verification will take on new urgency in the coming year. At least, let's hope so.

Michael Cichon is joined by Jay Baskar to discuss how to deploy passwordless authentication across a diverse IT environment.

GDPR is a set of regulations governed by seven principles to protect individual rights in a data-driven business world

KYC regulations require sufficient identity assurance and verification standards during customer onboarding to mitigate fraud and money laundering in finance and banking.

Adaptive authentication is a dynamic, risk-based approach that can use real-time information to guard against system breaches.

An APT is a complex, long-term attack against an IT system that intends to steal information, focused on obfuscation and concealment.

What is biometric encryption? Biometric encryption is using biometric data to encrypt and decrypt security keys to maintain user privacy and security.

Fingerprint biometric authentication verifies identity using unique fingerprint patterns for secure, convenient access through fingerprint scanning technology.

Michael Cichon is joined by Mike Engle to discuss how digital identity can modernize healthcare.

The future of healthcare is moving towards a model where individuals can create and control their own digital identity to access benefits and coverage.

New technologies, like push authentication, are leveraging mobile devices to address authentication issues for organizations' teams accessing system resources.

Types of phishing attacks include email, spear phishing, whaling, vishing, smishing, and more. Learn how each works and how to protect your business.

In this vlog, 1Kosmos' Product Manager, Sheetal Elangovan, joins 1Kosmos' CMO, Michael Cichon, to discuss how employee onboarding can be fixed with document verification and identity based authentication.

A SIM swapping scam can not only take over your phone but can also become detrimental to your financial health as scammers can steal bank logins or data.

Michael Cichon is joined by Mike Engle to discuss how digital identity verification can be used to combat synthetic identity fraud and account takeover.

SAML and SSO work together to create a more accessible and more secure login for users. But how, exactly, do these methods work?

In this vlog, our VP of Product Marketing, Robert MacDonald, sat down with our CMO, Michael Cichon to chat about his experience at the 2022 FIDO Authenticate conference. He also gives insights into his session, "How Web 3.0 Will Reshape Authentication".

SAML SSO vs LDAP can be difficult to parse out but we go through both methods to help clear up the differences and help you decide which to use.

While zero trust implementation can advance your security, you may want to know of the best practices to really get the most out of your zero trust framework.

SSO Protocols can be extremely helpful in your organization as it cuts down on time spent on logins but how do you choose which protocol to use?

As someone who's spent a career leading financial operations for successful cybersecurity startups such as Attivo Networks and Cloudmark, I knew it would be hard to resist an invitation from 1Kosmos board member Alberto Yépez to meet and talk with 1Kosmos CEO and founder, Hemen Vimadalal, about a role as the company’s first CFO.

As we close the celebration of the 19th annual Cybersecurity Awareness Month this October, it’s an ideal time to focus on the need to improve all cybersecurity measures by eliminating passwords and enabling organizations public and private to identify exactly who is accessing their online services.

While NIST's Cybersecurity Framework is probably the most well-known, there are other cybersecurity frameworks your organization should be aware of.

Principle of least privilege is meant to limit access to users in order to protect the information within the organization from being hacked or leaked.

Security Assertion Markup Language (SAML) vs OpenID Connect (OIDC): It can be difficult to choose between the two and to decide which one is best for business.

In this vlog, Mike Engle and Michael Cichon discuss how government agencies can securely deliver digital services to their constituents.

RBAC, ABAC, and PBAC are all access controls that can help keep certain information or systems restricted to those based on user, environment, role and more.

Many organizations use contractors and managing these non-employees through the HR system can be burdensome and risky so how can you make this process better?

Passwords are becoming a thing of the past with biometrics taking over. But what does this mean for security and what types of biometrics can be used?

What is passport scanning? Is there a convenient way to securely scan passports remotely? Our CSO, Mike Engle, joins our CMO, Michael Cichon, to answer these questions and more in their recent vlog.

As an information security standard, ISO 27001 can be beneficial to understand and comply with, but what exactly is ISO 27001?

Behavioral biometrics is a security method that analyzes unique user patterns like typing rhythm and mouse movements to verify identity.

Fingerprint verification is one of the most widely recognizable biometric solutions, but how does it work? Keep reading to learn about this type of security.

Looking to implement zero trust in your organization but don't know where to start? Keep reading to find the best way to get a zero-trust model up and running.

It's been a very exciting summer for the team here at 1Kosmos. Analysts are taking notice! We are honored to be recognized as an overall leader in the KuppingerCole Leadership Compass Providers of Verified Identity 2022.

1Kosmos had the pleasure of attending the Gartner IAM Summit 2022 in Las Vegas. It was our first time exhibiting and sponsoring the event. I have to say it was great to see long time friends, former colleagues, customers, partners and prospects.

As the world continues to move to an online-first environment and begins to adopt zero-trust constructs at scale, we find we have architected a solution to suit the security needs of government and organizations today and well into the future.

Gartner Hype Cycle methodology gives you a view of how a technology or application will evolve over time, providing a sound source of insight to manage its deployment within the context of your specific business goals.

Synthetic identities can easily be mistaken for real identities and can wreak havoc on companies that fall victim. So how can you differentiate between the two?

CEO fraud attacks can destroy a company's financial and reputational future but are there any ways to protect against these attacks?

Access control is a security measure that can prevent unauthorized access to sensitive information. But how can mandatory access control help with security?

Strong Customer Authentication works to protect European users when accessing sensitive financial information but it can also help keep your company compliant.

CIP and KYC are vital procedures and guidelines to help keep customer data secure while also verifying a customer's identity.

Remote onboarding is becoming the new normal and if your company doesn't adapt to the new work environment, your company will be left behind.

What is private vs public blockchain? Do you need a permissioned blockchain or is permissionless the way to go? We've covered everything you need to know.

Decentralized web (Web 3.0) distributes control across networks instead of central servers, giving users ownership of data and enhanced security and privacy.

Understanding the Semantic Web can be confusing, so we break it down to help guide you through its technologies and history, and the future of the web.

With the web in a constant state of flux, it's important to differentiate between web 2.0 vs web 3.0 and prepare for the next installation of web.

Two of the top identity technologies go head to head in our post: Okta vs Auth0. Which one is better for your business? Keep reading to find out.

Hackers attack passwords systematically and it's only a matter of time before they crack your login. What best practices can help secure your account?

NIST compliance provides security standards for businesses handling federal information but how do you meet compliance regulations?

In most cases, this refers to permissionless blockchains that are open to anyone, where users can remain anonymous and no one entity controls the blockchain.

Top 10 password alternatives include MFA, biometrics, SSO, and passwordless authentication. Discover secure options to protect your accounts today.

The future of biometrics will add facial, voice, or other types of biometric authentication to security for accessing sensitive data.

Clone phishing replicates a legitimate-looking email to entice the reader to click a link or attachment to allow the hacker to gain access to their account.

Password attacks are malicious ways hackers attempt to gain access to your account, such as brute-force attacks, credential stuffing, and password spraying.

The FBI warns that scammers may be trying to score jobs at companies to access customer or financial data, corporate IT databases, and proprietary information.

SIM binding is a type of device binding where an individual uses their mobile phone and binds that phone to their SIM card for greater security.

If your organization secures remote access systems like Zscaler with passwords, you’re vulnerable to breaches, even with 2FA, as passwords can be stolen.

SOC 2 should be kept top of mind for all technology services, SaaS organizations and service providers managing or storing customer data in the cloud.

During the pandemic, work changed rapidly. At 1Kosmos we held regular video conferences and virtual happy hours to stay connected, but the model had challenges.

Mike Engle joins Michael Cichon to discuss FIDO’s May 5th announcement and what it means for the future of passwordless authentication.

Verizon's DBIR shows 82% of breaches involve the human element. Learn how replacing credentials with identity verification reduces your attack surface.

The road to zero trust can be bumpy for nearly any organization. While CISOs need to make data and services accessible to their users, they also need to protect the same data and services in order to prevent breaches. This means that security leaders need to balance the risk between easy access and advanced controls when moving toward a zero trust architecture.

Business email compromise (BEC) is one of the many types of phishing attacks targeting both large and small corporations for financial gain.

Both of these previous fundamentals lead me to user experience and identity decisioning bias. These final two elements will move a facial recognition implementation from an add-on to and nice to have, to a trusted secure access environment providing high identity assurance that users want to use. Let’s investigate further.

Done right for authentication and as an integrated component of a zero trust architecture, they produce an excellent user experience, preserve privacy, facilitate secure access, and resist spoofing and hacks. But, facial recognition implemented as an add-on to an antiquated technology stack arguably causes more harm than good.

Identity providers are a seamless way to authenticate your users and also maintain security on your enterprise network. So what is an IdP?

For 1Kosmos and AuthenticID our leadership teams assembled in Malibu a few weeks ago when we first attended the All for Humanity Alliance gala.

Passwordless authentication is becoming a hot topic in the identity verification field as capabilities are becoming more and more sophisticated. To eliminate passwords the market has shifted to authenticate their identities using geolocation, social network accounts, and other types of MFA methods.

In this video blog, our CTO, Rohan Pinto, joins our CMO, Michael Cichon, to discuss why architecture matters for security and privacy in citizen ID.