Duo Security

Duo Security is a leading provider of zero trust security solutions, specializing in multi-factor authentication (MFA), device trust, and secure remote access. Founded in 2010 in Ann Arbor, Michigan, and acquired by Cisco in 2018, Duo Security protects thousands of organizations worldwide, from small businesses to Fortune 500 enterprises, helping them verify the identity of users and the security posture of devices before granting access to applications and systems.

Duo's core MFA solution provides a frictionless second-factor authentication experience through the Duo Mobile application, which supports push notifications, passcodes, and biometric verification on iOS and Android devices. Duo integrates with thousands of applications through standard protocols including RADIUS, LDAP, SAML, and API connectors, enabling organizations to add MFA to virtually any application without extensive custom development.

Duo Beyond implements zero trust principles by enforcing continuous verification of both user identity and device health before granting access to applications. Duo's Device Trust capabilities assess the security posture of endpoints including OS version, disk encryption status, screen lock configuration, and presence of security software, automatically blocking access from devices that do not meet defined security policies.

Duo Access Gateway and Duo Network Gateway provide secure access to on-premises applications and internal network resources without VPN, using a clientless browser-based approach that simplifies the remote access experience. Users authenticate with Duo MFA and then access internal applications through an encrypted proxy without requiring VPN software installation.

Duo's Trusted Endpoints feature ensures that only managed, corporate-owned devices can access sensitive applications, supporting certificate-based device attestation for devices enrolled in MDM and endpoint management platforms. Duo's detailed reporting and analytics dashboard provides IT and security teams with full visibility into authentication events, device compliance status, and user access patterns, enabling proactive identification of risky behavior and enforcement of access policies.