Ironchip
Spanish identity and access management vendor using location-based signals for passwordless authentication and fraud detection across VPN, AD, and RDP access.
Visit Website ↗ + Add to CompareOverview
Ironchip builds a location-based identity platform that authenticates users based on secure location and device signals in addition to, or instead of, traditional passwords, protecting access to VPNs, Active Directory, RDP connections, and backup systems by certifying that a login is originating from a trusted, previously established location. The approach generates a corporate “perimeter of trust” defined by physical or network location patterns, with anomalies from that trusted pattern flagged or blocked in real time, positioned as a lower-friction, passwordless alternative to traditional MFA for certain access scenarios.
Founded in 2017 and headquartered in Spain (with roots in the Basque Country), Ironchip has raised a modest total of roughly $5.6 million across several small rounds, including a EUR 2.1 million venture round in 2022 from investors including Inveready, EASO Ventures, and ABANCA. That is a small funding base relative to most identity and access management competitors, consistent with a still-early-stage European vendor.
Location-based authentication is a real and differentiated technical approach relative to mainstream password- and push-notification-based MFA, but Ironchip’s limited funding, small scale, and lack of independently reported named enterprise customers or third-party evaluations mean its real-world efficacy at scale remains largely unproven outside its own product documentation.
Innovation Matrix Assessment
Has extended its location-based authentication approach across additional access scenarios (VPN, Active Directory, RDP, backups) since founding, but funding rounds and disclosed milestones have been small and infrequent.
Covers location- and device-based authentication across several common enterprise access points, with both intrusion detection and fraud-detection framing, a reasonably complete feature set for a focused platform.
Total funding of roughly $5.6M across several small rounds, most recently a EUR 2.1M round in 2022, is modest scale relative to most identity and access management competitors.
Location-based authentication is a meaningfully different technical approach from mainstream password- and push-notification-based MFA, offering a genuinely lower-friction passwordless alternative for certain use cases.
No independently named enterprise customer, case study, or third-party evaluation was found; evidence of real-world effectiveness rests on the company's own product documentation.
Passwordless, context-aware authentication remains a relevant CISO priority, though Ironchip's small scale and limited funding constrain its real-world adoption relative to larger identity platform vendors.
Why CISOs Should Care
Offers a lower-friction, passwordless authentication option using location and device context rather than passwords or push-based MFA for specific access scenarios like VPN and RDP.
What Makes It Different
Builds its authentication decision around a "corporate perimeter of trust" defined by physical/network location patterns, rather than credential- or push-based verification.
The Matrix Verdict
43/100 — EMERGING / UNRANKED
A differentiated, technically sound approach to passwordless authentication from a small, modestly funded European vendor; real innovation in its core mechanism, but unproven at scale and lacking independent validation.
Editorial Note: Claims vs. Verified Findings
Funding totals and investor names are drawn from third-party startup databases (Seedtable, Crunchbase) rather than independent press coverage; platform capability descriptions come from the company's own documentation with no independent customer case studies found.
Sources
Alternatives to Ironchip
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Silverfort
Agentless unified identity protection platform that extends MFA, ITDR, and access policy to legacy and unmanaged systems traditional…