Beyond Identity
Passwordless, phishing-resistant authentication platform using X.509 certificate-based device binding instead of passwords or push notifications.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Beyond Identity was founded in 2019 by Jim Clark (a co-founder of Netscape and Silicon Graphics), Nelson Melo, and Jasson Casey, with a mission to eliminate passwords entirely rather than layer MFA on top of them. Its architecture uses X.509 certificate-based cryptography bound to a specific device, so authentication is tied to a private key that never leaves the device rather than a shared secret that can be phished, replayed, or fatigued via push-notification bombing.
The company raised a $100 million Series C in February 2022, bringing total funding to $205 million at a $1.1 billion valuation, with backing from New Enterprise Associates and co-founder Jim Clark personally. No larger public funding round has been reported since, which is a relevant data point on recent momentum relative to newer passwordless and NHI entrants.
Beyond Identity’s core technical differentiation — device-bound asymmetric cryptography rather than a shared secret or an out-of-band push approval — directly addresses the MFA-fatigue and SIM-swap attack classes that have undermined push- and SMS-based MFA at companies like Uber and Twilio in widely reported incidents.
Innovation Matrix Assessment
Core passwordless architecture has been stable since launch; recent public product news has been less frequent than in its 2020-2022 growth period.
Removing passwords and push-approval prompts entirely eliminates both password-reset help-desk load and the MFA-fatigue social-engineering vector in one step.
Reached a $1.1B valuation in 2022 but no larger funding round has been publicly reported since, suggesting momentum has plateaued relative to more recently funded category peers. Also featured in Cyber Defense Magazine's Innovator Spotlight series, a sister editorial publication, adding real external visibility.
Device-bound certificate authentication is a genuinely different mechanism than password-plus-second-factor, though FIDO2/passkeys have since brought similar phishing-resistant properties into mainstream platforms. However, Beyond Identity raised a $100M Series C at a $1.1B valuation (per channelfutures.com), which is the scale of an established incumbent rather than an emerging category disruptor, so this dimension is scored more conservatively.
Certificate-based authentication is cryptographically well-understood, but independent, large-scale third-party efficacy evidence beyond vendor case studies is limited in public sources.
Phishing-resistant authentication remains a priority as push-fatigue and SIM-swap attacks continue to defeat weaker MFA, though the rise of passkeys as an open standard is a competitive pressure on proprietary approaches.
Why CISOs Should Care
Beyond Identity eliminates both the password and the push-notification approval step that attackers repeatedly abuse via MFA fatigue and SIM-swapping, closing two of the most commonly exploited authentication weaknesses at once.
What Makes It Different
It binds authentication to a device-held private key via X.509 certificates rather than a shared secret or an approvable push notification, removing the phishable and fatiguable elements of conventional MFA entirely.
The Matrix Verdict
60/100 — INCREMENTAL INNOVATOR
A technically sound, genuinely phishing-resistant approach that predated mainstream passkey adoption, but funding and public momentum appear to have slowed since its 2022 raise. An Incremental-to-Meaningful Innovator.
Editorial Note: Claims vs. Verified Findings
Funding and valuation figures are corroborated by the company's own press release and Crunchbase; no independent funding news has been found more recent than the 2022 Series C, which is itself a relevant momentum signal rather than an oversight.
Sources
Alternatives to Beyond Identity
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Astrix Security
Non-human and AI agent identity security platform that discovers and remediates over-privileged API keys, service accounts and secrets.