PasskeyBridge
Identity Threat Response as a Service (ITRaaS)
Subscription2,472 impressions#12 of its week
PasskeyBridge provides an API to ingest identity threat signals and execute real-time response playbooks.
- for
- Security engineers and developers building high-security authentication flows.
- pricing
- freemium · free trial
Key features
- Signal ingest — Accepts carrier and breach signals (SIM swap, port-out, SS7 intercept, credential leak) via API or webhook.
- Policy-driven playbooks — Score each signal against configurable policies and trigger deterministic JSON actions.
- In-request actions — Revoke sessions, freeze credentials, suspend agents, or step-up authentication instantly.
- Zero-PII storage — Only keyed hashes and AES-256-GCM ciphertext are stored, no plaintext personal data.
- Hybrid post-quantum signatures — Each credential carries both a classical (ES256/ES384) and a NIST FIPS 204 ML-DSA-65/87 signature.
- Verifiable credentials — Supports W3C Verifiable Credentials with SD-JWT selective disclosure and DID resolution.
- Observability console — Live dashboard shows every signal, risk score, and action taken in real time.
- Agentic identity delegation — Scoped, revocable tokens enable A2A trust and delegation for service agents.
Use cases
- Detect and automatically revoke sessions after a SIM-swap event.
- Freeze credentials when a breach leaks user passwords.
- Step-up authentication for high-risk login attempts flagged by carrier signals.
- Provide audit-ready proof of threat response for compliance audits.
PasskeyBridge pricing
- StarterFree100 signals per month · 1 playbook · 1 webhook source · 7-day event retention
- Pro$99/mo/month10,000 signals per month · All three security pillars · Native VC engine + DID resolution · WebAuthn passkey management
- Enterprise$499/mo/month1,000,000 signals included, then $0.04 per signal · Agentic identity delegation + A2A trust · AI threat intelligence · 2-year retention
PasskeyBridge FAQ
How does PasskeyBridge receive threat signals?+
Signals can be sent via the API or a webhook from carriers, breach providers, or your own sources.
What actions can be taken automatically?+
The platform can revoke sessions, freeze credentials, suspend agents, or trigger step-up authentication in-request.
Is any personally identifiable information stored?+
No. Only low-entropy identifiers as keyed hashes and encrypted data (AES-256-GCM) are stored; there is no plaintext PII.
What cryptographic guarantees are provided?+
Each credential includes both a classical signature (ES256/ES384) and a post-quantum ML-DSA-65/87 signature, both required for verification.
Can I try the paid plans before committing?+
Yes, both Pro and Enterprise plans include a 7-day free trial.
Do you offer on-premise or isolated deployments?+
A Dedicated Instance add-on provides single-tenant deployment with custom SLA and data residency controls.
Summarized by DevHunt from passkeybridge.io · Sep 27, 2026. Details may change; check the official site.
