Home / Platform / Ciptor Shield
Ciptor Shield
Hardware-bound authentication at every identity event.
Ciptor Shield protects the five moments attackers target: onboarding, sign-in, account recovery, privilege elevation, and access to shared workstations. Each is bound to certified hardware, not to credentials a user can be tricked into entering.
Ciptor Shield in brief
Ciptor Shield is a phishing-resistant identity assurance service. It issues hardware FIDO2 security keys and device-bound passkeys to employees, administrators, and contractors. It verifies identity during onboarding, secures account recovery using liveness checks, and applies risk signals from your existing security tools to step up authentication when anomalies occur. The service helps you meet the NIS2 Directive, the Swedish Cybersecurity Act (2025:1506), and DORA, addressing requirements for supply chain security, proactive risk management, and phishing-resistant MFA across digital and physical environments.
Five identity moments
Strong authentication is only as secure as its weakest moment.
01 · Introduction
Identity verification
New employees and contractors verify their identity before a security key is ever issued.
02 · Daily sign-in
FIDO2 security keys and passkeys
Hardware-bound credentials that respond only to the authentic domain. Nothing to phish, relay, or reuse.
03 · Recovery
Recovery with liveness detection
Lost security keys are replaced without a call to the helpdesk that an attacker could spoof.
04 · Privileged access
Admin security keys
Separate security keys for administrators and emergency accounts.
05 · OT and shared workstations
Shared computers
Fast, one-touch login for factory floors, clinics, and control rooms where phones are not permitted.
Risk engine
Tighter controls when required
Signals from CrowdStrike, Microsoft Defender, Zscaler and SentinelOne automatically trigger extra checks.
In brief
Specifications
Facts in one place, ensuring buyers and AI assistants describe Shield accurately.
What it is
Operating model
Cloud service (SaaS), dedicated cloud, or on-premises deployment
Who it is for
Nordic organisations subject to NIS2, the Cybersecurity Act, or DORA. From one user up to 170,000.
Standards
Hardware
Works with
Regulatory framework
Supports Article 21 of NIS2, the Cybersecurity Act (2025:1506), and the ICT risk management requirements in DORA.
Language
Pricing
Red team exercise
We attack. Your SOC defends.
Before rollout, an attack test demonstrates where existing logons and endpoint protection fail. Following rollout, the same test confirms they hold. You receive a before-and-after report for the board.
Order your assessment
Other services from Ciptor
Infrastructure · Ciptor Harden
Immutable storage and hardened infrastructure for organisations that require it.
Questions about Ciptor Shield
Do users require a phone?
No. Shield works with a security key alone. It is therefore suitable for shared workstations, OT environments, and staff who cannot use personal phones at work.
What happens if someone loses their security key?
The user restores access via an identity check with liveness detection and receives a new security key. The old key is revoked. No call to the helpdesk can bypass this.
Does it work with Microsoft Entra ID?
Yes. Shield supports FIDO2 sign-in and hardware OATH tokens in Microsoft Entra ID, as well as Windows sign-in.
How long does deployment take?
In the cloud service, basic setup is complete within minutes. Integration with Active Directory or Entra ID using SSO takes 1–2 hours. With a dedicated cloud or on-premises deployment, basic setup takes 1–2 days. Integration and rollout require 1–2 weeks, depending on infrastructure, policy adjustments, and testing.
Is there a minimum size?
No. The cloud service operates from a single user, including MFA, SSO, and Windows login. Dedicated cloud or on-premises deployments use volume-based pricing. The licence is tailored to your user count.