Authsignal

Authsignal is an authentication company with teams in New Zealand, Australia and the United States that provides a drop-in authentication and orchestration layer for consumer-facing businesses. It sits alongside an existing identity provider rather than replacing it, helping banks, airlines, retailers and fintechs move away from SMS OTP toward passkeys and biometrics while stopping account takeover.

The platform exposes authentication methods such as passkeys, biometrics, palm biometrics, app push, WhatsApp, email and SMS OTP, magic links and authenticator apps through APIs, drop-in SDKs, pre-built UI and headless components. A no-code rules engine applies risk-based and step-up authentication, with session management, user observability, Number Verify and digital credential verification. It integrates with Amazon Cognito, Auth0, Azure AD B2C, Keycloak, Salesforce and ServiceNow and secures more than 12 million authentication events per month.

• Passkeys and biometrics: Enables FIDO-certified passwordless login and palm biometrics.
• Multiple OTP channels: Supports WhatsApp, email and SMS OTP, app push, magic links and TOTP.
• No-code rules engine: Applies risk-based and step-up authentication without code changes.
• Drop-in SDKs and UI: Offers pre-built UI, headless components and APIs for web and mobile.
• Number Verify: Confirms phone possession through carriers without sending an SMS code.
• Contact center authentication: Adds passkey and push verification to Salesforce and ServiceNow service workflows.

A Vietnamese e-wallet or consumer finance company can replace SMS OTP with passkeys and push to cut costs and phishing. An airline or travel platform can add step-up authentication for loyalty point redemption. A bank contact center can verify callers through app push instead of security questions.

Businesses add passkeys and step-up authentication without replacing their identity provider, with an average production integration time of about three weeks according to the vendor. Shifting users from SMS OTP to passkeys and push typically reduces SMS spend by 60% or more. Risk-based rules challenge only suspicious logins and payments, cutting account takeover while keeping friction low. Usage-based pricing starts from USD 0.05 per monthly active user.

Regulators across Asia are phasing out SMS OTP: the Philippine central bank requires banks to replace SMS OTP by June 2026 and India, the UAE and Hong Kong have similar moves. Vietnamese banks and e-wallets are also shifting to biometric authentication for online transactions, increasing demand for passkey layers that can be added to existing systems quickly.

Contact points in New Zealand, Australia and the United States. Recognized as a KuppingerCole Rising Star in CIAM and passwordless authentication. Member of IATA's Strategic Partnership Program and FinTech Australia; partners include DT Asia Group, ServiceNow, Yubico and AWS. SOC 2 Type 2, ISO 27001 and FIDO Certified (Universal Server). Data regions include the UK and Canada.