BI.ZONE Adds Passwordless Access to PAM Platform
Russian cybersecurity company BI.ZONE has released an update to its BI.ZONE PAM platform, adding passwordless access to target systems through the Device Flow authentication mechanism.
With version 2.6, users can connect to resources without entering a password. Instead, they can verify their identity using a hardware token such as Rutoken, biometrics, or Face ID on a smartphone. An employee receives a link, opens it in a browser, and completes authentication.
According to BI.ZONE, passwords currently protect 73 percent of accounts, while certificates are used for just 27 percent. Passwords can be vulnerable to brute-force attacks and phishing, particularly when employees reuse the same credentials across multiple resources.
The new authentication mechanism complies with the requirements of Order No. 117 issued by FSTEC of Russia and eliminates the risk of password interception because no password is transmitted over the network. The PAM platform now also automatically blocks inactive accounts and provides enhanced auditing of privileged SSH sessions.
