SecureAuth

SecureAuth, founded in 2005 (originally as MultiFactor Corporation) and headquartered in Irvine, California, was an early pioneer of risk-based adaptive authentication — adjusting login friction in real time based on device, location, and behavioral risk signals rather than applying uniform MFA to every login. The company merged with Core Security in 2017 after K1 Investment Management invested over $200 million to combine the two under a unified identity-security platform, and has continued acquiring capability since: Acceptto for passwordless continuous authentication in 2021, Cloudentity for fine-grained authorization and CIAM in 2021, and SessionGuard for biometric continuous identity assurance, announced in December 2024.

Most recently, SecureAuth has repositioned around securing non-human and AI-agent identities. Its current flagship is a ‘Continuous Identity Authority’ platform aimed at discovering, registering, governing, and detecting risk for autonomous AI agents running inside the enterprise — issuing each agent instance a unique cryptographic identity, enforcing per-action policy at a gateway layer, and applying behavioral risk analytics, addressing a genuinely new identity-security problem created by the rapid, often ungoverned rollout of AI agents inside large organizations.

SecureAuth’s twenty-year history of pivots — from MultiFactor to SecureAuth, from adaptive authentication to CIAM and authorization via Cloudentity, and now to AI-agent identity — reflects both a real pattern-recognition instinct for where identity security is heading and a private-equity-owned company continuously repositioning to stay relevant against much larger, better-capitalized IAM incumbents. Its current AI-agent identity pivot is new enough that independent, non-vendor evidence of effectiveness is not yet available.