Loading story…
Ping Identity has acquired Keyless, a London-based biometrics startup, to bolster authentication solutions for frontline workers and shared terminal environments. The acquisition aims to address the limitations of traditional device-based authentication, particularly for employees who do not have access to dedicated devices. Keyless's technology leverages zero-knowledge biometrics, enabling server-side biometric authentication while maintaining user privacy and regulatory compliance.
Ping Identity's CEO, Andre Durand, emphasized the importance of privacy-preserving authentication methods and highlighted that Keyless's approach aligns with the company's commitment to user experience and security. Keyless, founded in 2019 and led by Andrea Carmignani, has raised $18 million in funding and employs 71 people. The integration of Keyless's biometric technology is expected to improve privacy, account recovery, and the overall user experience for organizations relying on Ping Identity's solutions.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
Ping Identity said it is acquiring Keyless to strengthen passwordless and identity verification capabilities for frontline staff access. The references indicate the deal was publicly announced on the publication date.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Organizations are increasingly moving towards passwordless authentication methods, with technologies such as passkeys and device identity gaining traction as more secure alternatives to traditional passwords and multi-factor authentication (MFA). Passkey authenticators, often integrated into password managers or as standalone components, play a critical role in enabling seamless and secure login experiences by leveraging new standards and cryptographic techniques. Device identity further enhances security by binding credentials to hardware, making authentication resistant to phishing and social engineering attacks, while also improving user experience by reducing prompt fatigue and streamlining access to applications and networks. The identity security market is also witnessing strategic acquisitions, such as Ping Identity's purchase of Keyless, which aims to integrate privacy-preserving biometric authentication for frontline workers and address emerging threats like deepfakes. These moves reflect a broader industry trend towards comprehensive identity lifecycle management, resilience against AI-driven threats, and scalable support for both human and machine identities. As economic constraints limit large-scale mergers, the focus is shifting to targeted acquisitions that expand platform capabilities and reinforce the shift to passwordless, device-centric authentication models.
Jun 29, 2026
Passwordless authentication methods are increasingly being adopted to address the security weaknesses of traditional passwords, which are often reused, forgotten, or stolen. Modern approaches such as passkeys and biometric authentication, including facial recognition and fingerprints, offer enhanced security and user convenience. Passkeys utilize public-key cryptography, where a private key remains securely on the user's device and a public key is shared with the service, making them resistant to phishing attacks. Biometric methods, like facial recognition, authenticate users based on unique physical characteristics, with the verification process occurring locally on the device. Despite misconceptions, passwordless authentication does not compromise security; instead, it often incorporates multi-factor elements by requiring both device possession and a unique user attribute, such as a fingerprint or PIN. These methods ensure that sensitive authentication data, like biometrics or PINs, never leave the device, significantly reducing the risk of credential theft. As organizations and users transition away from passwords, understanding the distinctions and strengths of passkeys and biometric authentication is essential for implementing secure and user-friendly access controls.
Jul 12, 2026
Microsoft has begun rolling out support for syncing passkeys across Windows devices and its Edge browser, addressing a key barrier to widespread adoption of passwordless authentication. This phased rollout starts with Edge on Windows 10 and 11, with plans to expand to iOS, Android, and MacOS, aiming to make passkey management seamless for users and organizations. The move is expected to accelerate the shift away from traditional passwords, leveraging the FIDO Alliance's non-phishable passkey standard to enhance security and usability across platforms. Industry experts highlight that passwordless authentication is not just a technological upgrade but a critical component in modern fraud prevention strategies. As organizations transition to passkeys and device-based authentication, they face challenges such as cross-device access and user education. Integrating behavioral analytics with passwordless systems is seen as essential for detecting sophisticated fraud attempts, including those involving AI-driven identity spoofing and deepfakes, ensuring both external and internal threats are mitigated effectively.
Jul 12, 2026