HYPR
Identity assurance company combining phishing-resistant passwordless authentication with identity verification, used to secure over 20 million users.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
HYPR, founded in 2014 and headquartered in New York, began as a passwordless MFA vendor and has repositioned itself as “The Identity Assurance Company,” bundling phishing-resistant authentication (HYPR Authenticate), adaptive risk mitigation (HYPR Adapt), and automated identity verification (HYPR Affirm) into a single platform. The pivot reflects a broader industry recognition that authentication alone is insufficient without verifying the human behind an enrollment or recovery event, particularly given a wave of help-desk social-engineering attacks (e.g., MGM Resorts, Caesars) that bypassed strong MFA by tricking support staff during account recovery.
The company has raised over $127 million in funding, including an $18.3 million Series B and later rounds involving Silver Lake Waterman, Comcast Ventures, and Samsung Next, and reports supporting more than 20 million global users across enterprise deployments.
HYPR’s identity-verification addition is a direct response to a specific attack pattern — MFA bypass via help-desk impersonation — that has affected several large, publicly reported breaches, making its bundled verification-plus-authentication approach a meaningful, evidence-driven product evolution rather than a purely opportunistic feature addition.
Innovation Matrix Assessment
The 2023 pivot to bundle identity verification alongside authentication was a substantive strategic and product shift, not just incremental feature additions.
Combining passwordless MFA with identity verification directly closes the help-desk social-engineering gap that pure authentication products leave open during account recovery.
$127M+ raised and 20 million reported users indicate solid scale, though the company has been operating for over a decade without reaching the largest funding tiers of newer entrants.
Bundling identity verification with authentication addresses a gap the broader MFA/passwordless category had largely ignored, though each individual component (passwordless auth, ID verification) exists elsewhere as a standalone category. However, HYPR's post-money valuation was approximately $193M as of its 2024 Series C-1 round (per pitchbook.com), which is the scale of an established incumbent rather than an emerging category disruptor, so this dimension is scored more conservatively.
The reported 20 million-user figure and over a decade of production deployment support real-world efficacy, though this is a vendor-reported figure rather than independently audited.
Help-desk and account-recovery social engineering remains an active, high-profile attack vector, keeping identity-verification-plus-authentication bundling relevant.
Why CISOs Should Care
HYPR directly addresses the help-desk impersonation attack pattern that has bypassed strong MFA at high-profile breach victims, by requiring verified identity proof during enrollment and account-recovery events, not just at login.
What Makes It Different
Rather than treating authentication and identity verification as separate tools, HYPR bundles them into one platform aimed specifically at closing the account-recovery gap that pure passwordless MFA products leave exposed.
The Matrix Verdict
62/100 — INCREMENTAL INNOVATOR
A mature passwordless vendor whose pivot to bundled identity verification is a genuine, evidence-driven response to a real attack pattern, though the company operates in a crowded field without category-leading funding scale. An Incremental-to-Meaningful Innovator.
Editorial Note: Claims vs. Verified Findings
Funding figures and the 20-million-user figure are vendor-reported (HYPR's own site); the help-desk social-engineering attack pattern that motivated its pivot is independently documented in coverage of unrelated breaches (MGM, Caesars) but not directly tied to HYPR by name in those reports.
Sources
Alternatives to HYPR
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Astrix Security
Non-human and AI agent identity security platform that discovers and remediates over-privileged API keys, service accounts and secrets.