Protectimus

Once I logged in my wallet at one of the payment systems and saw the message that sounded somehow like this "User@@@ have transferred 500 dollars to your account by mistake. Please, return this money to him. Your account will be frozen until you return the money." I noticed that the sum of money I had on my account was really 500$ higher than necessary, that is why I decided to do what they asked me for – to resend 500$ to indicated user. Thanks God, this payment system has implemented two factor authentication service by Protectimus recently, and I had to use an Android app Protectimus Smart in order to receive a onetime password, when I entered this password, immediately appeared a warning about hacker's attack and 500$ remained on their place. As I have read later, there is a kind of modern hacker's techniques, when the information the user sees on his screen doesn't coincide with the real information, this is the method I could get caught.

For me, Two-Factor Authentication brings a lot of benefits. One of them and the most pleasant is that I can sleep soundly knowing my money is secure. Not possessed a special background in PC tech I could easily installed this app on my smartphone. My thumb is up!

We were impressed with Protectimus and its Dynamic Strong Password Authentication (DSPA) technology. This unique solution allowed us to swiftly implement 2FA across all our systems with ease, thanks to its seamless integration with Active Directory.

Over the past year, we have been using the Protectimus two-factor authentication platform and have been extremely satisfied with both the product itself and the level of support we received.

I created the platform for exchanging/trading items from different computer games.

For certain period everything worked fine, but after about half-year, when the inventory of my clients and bots already consisted a large value, a series of accounts haking began. Emails with codes for entering, that my system sent to the users, were constantly intercepted by scammers. They forged the domain of the site, creating phishing websites, and users logged in to the harmful platforms leaving their login credentials to fraudsters. That's why I decided to improve the security of the platform and add better protection from unauthorized access.

I found Protectimus completely suitable for my project. And as time showed it was a right solution. Protectimus team helped me to install the on-premises platform into my server room and connect their software and my service. Exactly, I chose the on-premises platform, not a cloud service, because sometimes I had to close the system from the outside world for auctions and trades without the influence of external factors.

Now every user has an application Protectimus on those phones and can log into accounts by generating one-time passwords that can not be intercepted.

Protectimus team deserved a big THANKS from me and my users for high-level security.

What I like the best is that their support was pretty helpful. They were ready to discuss all my concerns and leaded me during all intergration period.
It also was the only company, that was actually intersted in me as a client. At least this is the way i felt. I used to work with Vasco for about a year, before our company decided to switch 2FA provider. And I felt like they did not want to assist me at all, when I called. I always heard only 'You can check it on our site yourself' and bla-bla. So this company(Protectimus) was very fresh and enjoiable expereince for me.
They also have this pretty useful feature: you may have two(or even more) security levels for different groups of users. For example, for administrators and average employee.
I never thought about it, but it actually is pretty convenient. You don`t have to block account if any employee just entered OTP incorrectly several times. But if someone would try to get access to account of the top-management representatives, it surely is useful to block account immediately.
Maybe I have some concerns since the company is not such a huge player on the market. Till now it have not affected my work with them, but still it`s not a Vasco or RSA, you know.
If you are looking for solution easy-to-use and easy-to-integrate 2 factor authentication solution then go ahead.
So as a summary:
Good support, reasonable priсes, easy integration.

Google Authenticator's so secure that I couldn't recover my two-factor authentication settings after hard resetting of the phone. And it was really hard to recover access to some accounts and some even remained locked forever. Now I'm not convinced of the real benefits of this app. Also, I've read that authentication apps can be vulnerable to viruses. I decided that I dont want to use my phone for two-factor authentication anymore. And its not secure to receive PINs via SMS or emails. Actually, I've been almost through with finding some new ways.

Then I have read about physical devices (tokens). I was interested in it and I've found out that not a lot of companies make their own tokens and not all of these tokens fit services I need to protect. For example, you can buy tokens in companies like Vasco, Gemalto, SafeNet, RSA, but these tokens won't help you to protect your Google or Coinbase account, etc.

But there are also such tokens like Protectimus Slim Tokens - hardware devices which fit many different services and are advertised as a hardware Google Authenticator substitute. So recently I've ordered one. Just to test it with my Google account. It's small, independently generates one-time passwords without the Internet, and I like that I'll find out immediately if somebody will steal it. It's sad that you can use one token with only one account. And to set it up you need only Android smartphone with NFC. I had to ask my friend for help, as I use iPhone. But it's safe and the price is reasonable if compared to other products.

I use this token only 2 weeks that's why I haven't seen any negative points yet. I'll be very pleased if somebody who uses tokens longer will write their own opinion about Slim Token.

I have decided to make a review about my first experience of implementing 2FA in my company infrastructure. My company works with databases of several large insurance companies, so the security of personal data is a priority for us. After a certain unpleasant experience, appeared the question about the insufficient protection of the system from unauthorized access. I decided to approach this issue in a comprehensive manner.

From first sight the task was simple enough: to organize additional safety with the minimum corrections in working process as quickly as possible, and at the same time to facilitate the employees' access to corporate resources.

After the market monitoring, I faced certain problems: giants of this business were not able to help me in the shortest possible time (in most cases, even to get the commercial offer, you need to sign an NDA), other companies didn't answer for several days, sometimes even weeks, some companies didn't provide hardware tokens, etc.

When I found Protectimus guys, they responded quickly, suggested several solutions and a wide variety of OTP delivery options. SaaS solution seemed the best option for us as there was no time to deploy authentication servers, configure firewalls, etc. An integration took a while (special thanks from my developer for the ready-to-use SDK for Java), but their development team answered all our questions and was very supportive.

To reduce the costs, we decided to go with software in-app tokens and OTP delivery via chat-bots in messaging apps. But we also ordered 20 hardware tokens (Protectimus Two) for the employees who don't want to use their smartphones for authentication.

As a result, I have a modern protection against unauthorized access and monitoring/management of the employee's activity/access in a suitable web-interface. I hope that my feedback was useful and in case of additional questions you can contact me on Facebook.