Phishing-resistant MFA · NIS2 · DORA

Phishing-resistant authentication for Nordic organisations.

Attackers no longer break in. They log in. Ciptor replaces passwords and app codes with certified hardware security keys. These cannot be phished, forwarded, or reused. They also provide the evidence NIS2 and DORA auditors require.

Book a walkthrough (30 min)

Phishing attempt in progress

https://login.micros0ft-secure.co/

https://login.micros0ft-secure.co/

Password + authenticator app code

Forwarded. The attacker is inside.

The fraudulent page relays your code to the authentic site in real time.

Ciptor security key

Denied. The address does not match.

The security key only responds to the genuine domain. There is nothing to steal.

What is Ciptor?

Ciptor is a Nordic cyber security company. We implement phishing-resistant, hardware-bound authentication (FIDO2 security keys and passkeys) for organisations that must comply with NIS2 and DORA. Ciptor covers the entire identity lifecycle, from onboarding and daily sign-in to account recovery and privileged access. We validate this protection through attack testing.

The challenge

Your MFA is already broken.

Authenticator apps, SMS, and push notifications were a major improvement over passwords. Phishing kits have caught up. Today, they bypass them at scale, without using malware.

01

Codes are forwarded

Adversary-in-the-middle kits sit between the user and the genuine login page. They relay each code in real time.

02

Push is approved

Repeated requests at two in the morning wear people down. One tired tap grants the attacker a valid session.

03

Recovery is the back door

A convincing call to the helpdesk resets everything. Strong authentication is useless if recovery is weak.

04

SMS follows the SIM card.

Attackers convince a mobile operator to port your number to their SIM card. Every SMS code is then routed directly to them.

How Ciptor works

Test. Replace. Prove.

Step 1 · Red Team exercise

We attack. Your SOC defends.

A penetration test reveals precisely how your current authentication and endpoint protection fail, before an attacker does.

Step 2 · Ciptor Shield

Hardware-bound authentication everywhere

Certified FIDO2 security keys and passkeys for staff, administrators, contractors, and shared computers or OT workstations. Includes secure onboarding and recovery.

Step 3 · Evidence

Ready for NIS2 and DORA audits

Every requirement links to a control and evidence your board and regulator can review.

Only trusted components

If it is not independently certified, it is not in the solution.

Ciptor uses FIDO-certified hardware from established European and global manufacturers, including NEOWAVE and FEITIAN. It integrates with your existing identity and security tools.

Microsoft Entra ID

CrowdStrike

Microsoft Defender

Zscaler

SentinelOne

40,000–170,000

users in a single deployment

Up to 900

locations in a single rollout

Zero Assumptions

The CISO series challenging common assumptions.

Each volume highlights one assumption, reveals the reality behind it, and provides a plan to close the gap.

Vol. 1 of 25

Endpoint illusion

Your EDR dashboard looks normal. The penetration test passed. The SOC team playbooks are in place. The unspoken assumption is that the EDR solution detects an attacker's lateral movement and that the team reacts in time. That assumption is rarely tested.

Vol. 1 of 25

Endpoint illusion

Your EDR dashboard looks normal. The penetration test passed. The SOC team playbooks are in place. The unspoken assumption is that the EDR solution detects an attacker's lateral movement and that the team reacts in time. That assumption is rarely tested.

Vol. 2 of 25

Network-delivered codes offer false security

SMS and push codes are perceived as a meaningful second layer of defence. Today, attackers have access to industrialised interception tools. The channel was never the defence. The shared secret is the weakness.

Vol. 2 of 25

Network-delivered codes offer false security

SMS and push codes are perceived as a meaningful second layer of defence. Today, attackers have access to industrialised interception tools. The channel was never the defence. The shared secret is the weakness.

Vol. 3 of 25

The open helpdesk door

The helpdesk is the only place where a human must be able to override the authentication system. Audio and video deepfake tools are now consumer products. This makes the helpdesk the point in your environment where attackers most frequently attempt to bypass controls.

Vol. 3 of 25

The open helpdesk door

The helpdesk is the only place where a human must be able to override the authentication system. Audio and video deepfake tools are now consumer products. This makes the helpdesk the point in your environment where attackers most frequently attempt to bypass controls.

All 15 volumes →

Questions

Direct answers

What is phishing-resistant MFA?

Multi-factor authentication where credentials are bound to the legitimate website address and stored in hardware. A fraudulent site cannot intercept or reuse them. FIDO2 security keys and device-bound passkeys meet this standard. SMS, app codes and push approvals do not.

Does NIS2 require multi-factor authentication?

Yes. Article 21(2)(j) of the NIS2 directive lists multi-factor authentication or continuous authentication among the risk management measures that essential and important entities must implement. Ciptor maps every measure to a control and an evidence artefact.

Which countries does Ciptor operate in?

Ciptor works with organisations in Sweden, Finland, Norway, Denmark, and Iceland, operating in Swedish, Finnish, and English.

How much does Ciptor cost?

Ciptor Shield Cloud is software-only and costs 75 SEK per user per month. Ciptor Shield Complete includes software and a FEITIAN security key for 89 SEK per user per month. Prices exclude VAT. Book a walkthrough of 30 minutes to receive a tailored quote.

See how your login withstands a real attack.

30 minutes with a Ciptor specialist. No slides you have already seen.

Book a walkthrough (30 min)