01 / TrustFlare Access
Only trusted devices sign in.
Correct password, unknown device: the sign-in stops.
Unknown device stopped. Trusted device continues.
Two devices, same work password. The unknown device is stopped. The trusted device continues the sign-in.
Unknown device: sign-in stops. Trusted device: sign-in continues.
02 / Fast or strict
Choose fast setup or strict control.
Each company sets its own balance between speed and security.
Fast setup
The first device is approved at once. No waiting. No support tickets.
Strict control
An administrator approves every device. You can require disk encryption and screen lock.
Lost or reset device
A new or reset device needs an extra check before it signs in.
03 / Your SSO
Your SSO checks the person.
TrustFlare checks the device.
Keep the SSO you have. Nothing changes for your apps.
Your SSO
Checks the person
TrustFlare
Checks the device
Work apps and VPN
Open as before
Works with Keycloak, Okta, Microsoft and Google.
04 / Passwordless
Fast and secure passwordless login.
No password. No MFA codes to type. Sign in with a trusted device and your fingerprint or face.
You choose the people and the apps.
05 / BYOD ready
Separate modes for personal devices and for company devices.
Some users need more privacy. Some devices need stricter checks. Each group gets its own mode.
Personal devices (BYOD)
- Only device facts: serial number, system version, account name, time zone, language
- Disk encryption and screen lock are checked
- Guaranteed: no reading of files, no remote commands, no administrator access
Company devices
- System updates are checked
- MDM-like functions (roadmap)
For personal devices this is not a setting. Reading files and remote commands are impossible.
06 / Hardware security
The device key is protected by hardware security.
TrustFlare uses Secure Enclave and TPM where they are available. The key cannot be taken out of the chip. This stops many attacks.
07 / The console
See every device in one place.
Approve new devices. Remove lost ones. See every sign-in.
Devices
- Alice · MacBookApproved
- Jordan · ThinkPadApproved
- Sam · new laptopWaiting
Lost device
- Alice · iPhoneRemoved
Her other devices keep working.
Sign-ins
- Alice · MacBookAllowed
- Jordan · ThinkPadAllowed
- Unknown laptopStopped
08 / Price
$2 per user per month.
Every device included. Free for up to 100 users.
| Provider | Basic SSO | Vendor security plan | Basic SSO + TrustFlare |
|---|---|---|---|
| Okta | $6 | $23 | $8 |
| Microsoft | $7 | $18 | $9 |
| $7 | $15 | $9 | |
| Keycloak (on-prem) | $0 | N/A | $2 |
1,000 users with Okta: $96,000 a year, not $276,000.
Example prices.
Our cloud on Free and Business. Your own servers on Ultimate.
Questions
A few things to know
No. TrustFlare decides if a device can sign in. It protects the main thing: the data on your servers. Many teams then do not need a full MDM. We are also building our own device protection.
No. It works in any browser.
Keycloak, Okta, Microsoft Entra ID and Google Workspace.
Computers: macOS, Windows, Linux. Phones: iOS, Android.
Remove it from the list. It cannot sign in again. Open sessions end by the rules of each app.
Yes. They add the device themselves and see what the agent reads. No MDM needed.
Yes. Then work sign-ins stop. The computer works as usual.
Yes, if your VPN supports sign-in through SSO.
Yes. First you only see who would be stopped. You block later.
Yes. Strict for important apps. Light for the rest.
Try TrustFlare Access
Your SSO. A few devices. A clear result.
Pick one app and a few devices. Sign in. Remove one device. Try again. We agree on the plan with you first.