HYPR
Identity assurance company combining phishing-resistant passwordless authentication with identity verification, used to secure over 20 million users.
Visit Website ↗Overview
HYPR, founded in 2014 and headquartered in New York, began as a passwordless MFA vendor and has repositioned itself as “The Identity Assurance Company,” bundling phishing-resistant authentication (HYPR Authenticate), adaptive risk mitigation (HYPR Adapt), and automated identity verification (HYPR Affirm) into a single platform. The pivot reflects a broader industry recognition that authentication alone is insufficient without verifying the human behind an enrollment or recovery event, particularly given a wave of help-desk social-engineering attacks (e.g., MGM Resorts, Caesars) that bypassed strong MFA by tricking support staff during account recovery.
The company has raised over $127 million in funding, including an $18.3 million Series B and later rounds involving Silver Lake Waterman, Comcast Ventures, and Samsung Next, and reports supporting more than 20 million global users across enterprise deployments.
HYPR’s identity-verification addition is a direct response to a specific attack pattern — MFA bypass via help-desk impersonation — that has affected several large, publicly reported breaches, making its bundled verification-plus-authentication approach a meaningful, evidence-driven product evolution rather than a purely opportunistic feature addition.
Innovation Matrix Assessment
The 2023 pivot to bundle identity verification alongside authentication was a substantive strategic and product shift, not just incremental feature additions.
Combining passwordless MFA with identity verification directly closes the help-desk social-engineering gap that pure authentication products leave open during account recovery.
$127M+ raised and 20 million reported users indicate solid scale, though the company has been operating for over a decade without reaching the largest funding tiers of newer entrants.
Bundling identity verification with authentication addresses a gap the broader MFA/passwordless category had largely ignored, though each individual component (passwordless auth, ID verification) exists elsewhere as a standalone category.
The reported 20 million-user figure and over a decade of production deployment support real-world efficacy, though this is a vendor-reported figure rather than independently audited.
Help-desk and account-recovery social engineering remains an active, high-profile attack vector, keeping identity-verification-plus-authentication bundling relevant.
Why CISOs Should Care
HYPR directly addresses the help-desk impersonation attack pattern that has bypassed strong MFA at high-profile breach victims, by requiring verified identity proof during enrollment and account-recovery events, not just at login.
What Makes It Different
Rather than treating authentication and identity verification as separate tools, HYPR bundles them into one platform aimed specifically at closing the account-recovery gap that pure passwordless MFA products leave exposed.
The Matrix Verdict
65/100 — INCREMENTAL INNOVATOR
A mature passwordless vendor whose pivot to bundled identity verification is a genuine, evidence-driven response to a real attack pattern, though the company operates in a crowded field without category-leading funding scale. An Incremental-to-Meaningful Innovator.
Editorial Note: Claims vs. Verified Findings
Funding figures and the 20-million-user figure are vendor-reported (HYPR's own site); the help-desk social-engineering attack pattern that motivated its pivot is independently documented in coverage of unrelated breaches (MGM, Caesars) but not directly tied to HYPR by name in those reports.
Sources
- About Us: The Identity Assurance Company — https://www.hypr.com/company
- Hypr pivots to identity assurance — Biometric Update — https://www.biometricupdate.com/202310/hypr-pivots-to-identity-assurance-launches-new-product
- HYPR Secures $18.3 Million Series B — https://www.hypr.com/press-releases/hypr-secures-18-million-series-b
Alternatives to HYPR
Silverfort
Agentless unified identity protection platform that extends MFA, ITDR, and access policy to legacy and unmanaged systems traditional…
Veza
Identity security platform built around an authorization graph that maps who and what can actually access data and…
Oasis Security
Non-human identity management platform discovering, classifying, and governing service accounts, API keys, and machine credentials, now extending to…
Semperis
Identity resilience platform specializing in Active Directory security posture, attack-path discovery, threat detection, and disaster recovery.
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Microsoft Entra ID
Microsoft's cloud identity and access platform (formerly Azure AD) providing SSO, conditional access, MFA, and identity governance across…