Your Cybersecurity Solution Should Adapt to Your Business. Not the Other Way Around.
Every company works differently.You have your own users, groups, administrators, contractors, applications, networks, VPNs, offices, remote workers, authentication methods, and security requirements. So why should you have to reorganize the way your company works around the limitations of your cybersecurity solution? You shouldn’t. Your security …
Multi-Factor Authentication versus Passwordless Authentication: What’s the Difference (and Why You Probably Need Both)
81% of hacking-related breaches involve stolen or weak passwords, according to the Verizon Data Breach Investigations Report (DBIR). Meanwhile, Microsoft blocks thousands of password attacks every second, from password spraying and credential stuffing to phishing campaigns targeting Microsoft 365 accounts. Passwords have served us well …
RCDevs Security on UGAP: European Cybersecurity Built for Control, Sovereignty & Choice
European governments and public institutions are reconsidering the technologies on which their essential services depend. Cybersecurity is no longer just about stopping attacks. Governments must also consider where their data is stored, who operates the underlying infrastructure, which jurisdictions may apply, and whether critical services …
Air-gapped MFA under §30 BSIG: how a German public body authenticates without the cloud
Some environments are built to have no way out. No outbound path to the internet, no cloud callback, no dependency a network operator cannot see and control. For the teams who run them, that isolation is the security control, and anything added inside has to …
WebADM Monitoring Console: Stop Searching & Start Monitoring
Authentication infrastructure has a talent for being invisible, right up until a connector goes down, a backend slows to a crawl, or failed logins begin appearing from somewhere unexpected. At that point, nobody wants a scavenger hunt through status pages, log files and browser tabs. …
Before and after: how a French local authority brought MFA and SSO to every access path, without leaving its on-premise Active Directory
A French local authority runs its identity infrastructure the way a great many public bodies do: an on-premise Active Directory at the centre, and a workforce of more than a thousand staff authenticating against it. What sat on top of that directory, however, had grown …
Why RCDevs Is Europe’s Answer to Sovereignty Washing
Europe is accelerating its push for digital sovereignty. Governments, public institutions, banks, healthcare providers, critical infrastructure operators, and private companies all want to reduce their dependence on non-European technology platforms. But as demand for sovereign technology grows, so does a new problem: sovereignty washing. Sovereignty …
Combining Smartcard and FIDO2 at Windows logon, even offline
A regional public-sector organisation in Europe came to us with a Windows estate that was already secured by smartcard logon. Its users carry smartcards, and some of them log in where there is no network: laptops that leave the building and spend hours with no …
VPN, bastions, servers: how a European data center applies MFA for every client
A provider that hosts other companies’ infrastructure does not have one set of users to protect. It has dozens, each belonging to a different organization, and each expecting that its identities, its policies and its administrators stay strictly separate from everyone else’s. Adding multi-factor authentication …
Badging Is Not About Time Tracking Anymore. It’s About Cybersecurity.
For years, badging has been seen as an HR tool. A way to record when employees start working, when they stop, and whether their working hours match expectations. Useful? Yes. Cybersecurity-grade? Not usually. But OpenOTP Mobile Badging changes that. This is not a badge that …
