Excalibur revolutionizes authentication by abstracting passwords from the users. Instead they are seamlessly transitioned to a passwordless phone-centric multi-factor authentication - across all existing legacy password-protected systems. Users simply interact with their smartphones, using biometrics, geolocation, device proximity, peer verification, and PIN codes, without needing to remember any credentials. This not only reduces the risk of social engineering and phishing but also ensures no credentials can be stolen and misused.
Excalibur's method of pairing each phone with its owner and using this information for PAM authentication ensures accurate monitoring of access and activities across systems, regardless of the user's location or the remote machine used. This is a critical advantage over systems that rely on third-party management of identity access or anonymous factors like passwords or cryptographic keys. This setup not only secures access but also provides a detailed log of who accessed what systems from which location, enhancing security and accountability in environments where precise identity verification is essential.
Excalibur enhances security by ensuring that every action within its system is cryptographically signed and every session is automatically recorded. This by default recording creates a cryptographically signed proof detailing every action performed by users, whether they are managers, admins or ordinary users. It includes the specific policies that permitted these actions, the factors verified during authentication, and the full context of the session—where, why, and how the actions were carried out.
Additionally, Excalibur's transparent audit trail is continuously visible to users via the Excalibur dashboard. Whenever users access resources protected by Excalibur PAM, they can see all their actions and session recordings. This visibility reinforces the accountability of all actions performed, acting as a psychological deterrent by reminding users of the total auditability of their activities. This setup not only secures the system but also cultivates a culture of responsibility and caution among all users.