Secret Double Octopus

Overview

Secret Double Octopus offers workforce passwordless MFA that reaches across desktops, VPNs, and legacy applications, integrating with existing directories and identity providers rather than replacing them. Founded in 2015 in Tel Aviv, its pitch is breadth of coverage: passwordless that works not just for modern web apps but for the Windows and Mac desktop login, RADIUS, and the legacy systems most workforces still run.

What it is good at

Broad endpoint and legacy coverage is the differentiator. Many passwordless products stop at modern OIDC apps; Secret Double Octopus extends phishing-resistant sign-in to desktop login, VPN, and older on-premises systems, and it does so on top of your current directory and IdP. That makes it useful for enterprises that want to remove passwords everywhere, not just from the easy targets.

Where it falls short

It is a workforce authentication specialist, not a consumer-facing CIAM authenticator and not a developer-first API platform. You still need an identity provider for SSO, provisioning, and governance. The strength in legacy coverage comes with integration work, and pricing is quote-based.

Pricing

Enterprise subscription, quote-based. Model seat counts and integration scope with the TCO calculator.

Best for, and who should look elsewhere

Choose it for enterprises extending passwordless across desktops, VPN, and legacy apps without ripping out the IdP. Teams wanting consumer login should look elsewhere in CIAM; those wanting standards-pure FIDO at scale should compare Nok Nok Labs or HYPR. See the full MFA directory.

Bottom line

A capable workforce passwordless layer with unusually broad endpoint and legacy coverage on top of your existing IdP.