SecurEnvoy
Long-running UK multi-factor authentication vendor, owned by publicly listed Shearwater Group, that turns existing devices into MFA tokens across Microsoft 365, VPN, and Citrix environments.
Visit Website ↗ + Add to CompareOverview
SecurEnvoy makes multi-factor authentication (MFA) software that lets organizations turn employees’ own phones and existing hardware into second-factor authenticators — push notifications, OTP apps, biometrics, and hardware tokens — rather than requiring a proprietary device rollout, and integrates with Microsoft 365, VPNs, RDP, Citrix, and other cloud and on-premises access points.
Founded in 2003 in the UK, SecurEnvoy was one of the earlier independent MFA vendors and has been a wholly owned subsidiary of Shearwater Group plc, a London Stock Exchange (AIM: SWG)-listed digital resilience group, since 2017. Being part of a public group gives it more disclosed financial transparency than a typical private point-product vendor, even though SecurEnvoy itself doesn’t report standalone revenue.
The company has more recently pushed into MFA-as-a-Service and added data discovery capabilities, extending beyond pure authentication into adjacent identity governance territory. Its evidence base is mostly the typical MFA vendor’s: two decades of operating history and continued integration breadth, rather than named large-enterprise case studies or third-party lab evaluations.
Innovation Matrix Assessment
Recent MFA-as-a-Service and data discovery launches show continued feature investment, but the pace looks like steady maintenance of a mature product line rather than fast iteration.
Broad, established integrations across Microsoft 365, VPNs, RDP, and Citrix, plus support for push, OTP, biometric, and hardware-token methods, indicate a functionally complete MFA platform suitable for real enterprise directory environments.
Ownership by publicly listed Shearwater Group provides some financial stability signal, but there is no disclosed customer growth, revenue, or new-logo data specific to SecurEnvoy to point to independently.
MFA via existing devices is now table stakes across the identity market; SecurEnvoy is a capable incumbent in a category where the underlying approach was disruptive over a decade ago, not today.
Over two decades of operating history and integration into major enterprise stacks is a reasonable indirect efficacy signal, but no independent penetration test, MITRE evaluation, or named large-customer case study was found to confirm real-world performance.
MFA remains a baseline security control every organization needs, and device-agnostic, broad-integration MFA is directly relevant to CISOs standardizing access controls across mixed on-prem/cloud environments.
Why CISOs Should Care
Offers a mature, broadly compatible MFA layer for CISOs who need to add or replace multi-factor authentication across a mixed Microsoft 365 / VPN / on-prem environment without a hardware rollout.
What Makes It Different
Long independent operating history (since 2003) and backing by a public parent (Shearwater Group) rather than VC ownership, plus a move into adjacent data discovery capability.
The Matrix Verdict
45/100 — EMERGING / UNRANKED
A stable, unglamorous MFA incumbent with real integration depth; useful for CISOs who value maturity over category leadership, but not differentiated enough versus modern IAM platforms to score as disruptive.
Editorial Note: Claims vs. Verified Findings
SecurEnvoy's 'trusted by thousands of customers' and '20+ years of MFA innovation' language is vendor marketing copy and unverified. The Shearwater Group ownership, its 2017 acquisition date, and its AIM public listing (ticker SWG) are independently verifiable corporate-record facts.
Sources
Alternatives to SecurEnvoy
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
AppViewX
Machine identity management platform automating certificate lifecycle management (CLM) and PKI operations at enterprise scale, including post-quantum cryptography…