# Ironchip

> Ironchip is a Spanish cybersecurity company (founded in 2017, headquartered in Barakaldo, in the Bilbao area, with an office in Madrid) that turns the place where a user or a transaction comes from into proof of identity. Its platform combines passwordless authentication, location-based safe zones, identity threat detection (ITDR), privileged access management (PAM), banking fraud detection and in-browser phishing protection. It is listed with HIGH level in the CCN CPSTIC catalog and certified for the Spanish National Security Framework (ENS) in the High category.

Key facts:
- Location intelligence: an anonymous signature of the radio environment (mobile and wifi networks) of a place, bound to the device key. No GPS coordinates or movement history are stored. GPS is one more signal, checked against the signature and detected when spoofed.
- Works with the identity stack customers already have: Active Directory, Microsoft Entra ID, Google Cloud Identity, LDAP; OIDC, SAML, RADIUS, SCIM and an HTTP API.
- Authentication methods for every workstation, including those without a corporate phone: mobile app, desktop app, passkeys and FIDO2, facial recognition, USB token, NFC/RFID card, magic link and agentless.
- Certifications: CCN CPSTIC (HIGH level), LINCE, ENS High category, ISO 27001, ISO 27701.
- Organizations shown on the website as protecting their access with Ironchip: Banco Santander, the Basque Government, Ibercaja, Abanca, Arquia Banca and ULMA.
- Customer stories: Abanca (banking), the Alcobendas City Council (public sector) and GHI Smart Furnaces (industry).
- Backed by Google for Startups, ENISA, INCIBE (Spanish National Cybersecurity Institute) and CaixaBank Emprendedor XXI.
- Contact: sales@ironchip.com · +34 944 075 954 · https://www.ironchip.com/solicitar-demo

## Problems Ironchip solves

- MFA for workers without a corporate phone (shared workstations, plants, hospitals): NFC/RFID cards, USB tokens or desktop app, plus the safe zone. See [Identity and access](https://www.ironchip.com/en/identity-platform.md).
- Stolen passwords, OTP codes or passkeys used from elsewhere: a valid credential used outside its safe zone or without the registered device is blocked. See [Identity and access](https://www.ironchip.com/en/identity-platform.md).
- Account takeover, vishing, authorized push payment fraud, money mules, SIM swapping and synthetic identities in banking and fintech apps: scored per fraud family by an SDK and API. See [Fraud detection](https://www.ironchip.com/en/fraud-platform.md).
- Giving administrators and external vendors access to servers, databases and Kubernetes without VPN, shared passwords or open inbound ports, with just-in-time approval and session recording. See [Privileged access (PAM)](https://www.ironchip.com/en/privileged-access.md).
- Phishing that bypasses MFA (adversary-in-the-middle kits), cloned login pages, QR phishing and ClickFix attacks, stopped in the browser. See [Phishing Shield](https://www.ironchip.com/en/phishing-shield.md).
- Evidence for ENS, NIS2, DORA and ISO 27001 audits: who accessed what, from where and with which device. See [Use cases](https://www.ironchip.com/en/use-cases.md).

## Products

- [Identity and access platform](https://www.ironchip.com/en/identity-platform.md): Passwordless authentication and location-based MFA for the whole company: safe zones, ITDR, dynamic rules and a method for each workstation, also phone-free.
- [Fraud detection](https://www.ironchip.com/en/fraud-platform.md): Fraud detection platform for banking and fintech: account takeover, money mules, SIM swapping, authorized push payment fraud and in-session malware. Mobile and web SDK and HTTP API.
- [Account takeover prevention](https://www.ironchip.com/en/account-takeover-prevention.md): How to detect and stop account takeover in banking and fintech: phishing, vishing, SIM swapping and malware, through location, device and behavior.
- [Privileged access (PAM)](https://www.ironchip.com/en/privileged-access.md): Just-in-Time privileged sessions with verified identity, device, and location, approval on connection, and full recording.
- [Phishing Shield](https://www.ironchip.com/en/phishing-shield.md): Browser protection with 12 detection engines: cloning, AiTM, ClickFix, QR, session hijacking and MFA bypass.
- [Technology: location intelligence](https://www.ironchip.com/en/location-intelligence.md): Location-based authentication: how Ironchip turns the radio environment of a place into an anonymous safe zone, with no GPS and no personal data.
- [Use cases by role and sector](https://www.ironchip.com/en/use-cases.md): Employees with a phone, with a computer, shared workstations, third-party vendors, banking, healthcare, public sector, B2B travel, and NIS2 suppliers.

## Customer stories

- [Abanca (banking)](https://www.ironchip.com/en/customers/abanca.md): Abanca: location joins mobile banking fraud prevention. Location-based fraud prevention, in production at a Galician bank.
- [Alcobendas City Council (public sector)](https://www.ironchip.com/en/customers/alcobendas.md): Alcobendas City Council: a second factor for an entire municipal workforce, at the level the ENS requires. The local administration that moved to MFA without complaints from staff.
- [GHI Smart Furnaces (industry)](https://www.ironchip.com/en/customers/ghi.md): GHI Smart Furnaces: a phone-free industrial plant, protected with a USB token. Plant-floor MFA with a physical token and a split key.

## En español

- [Inicio](https://www.ironchip.com/index.md): Autenticación sin contraseñas, acceso privilegiado y detección de fraude que usan el lugar como prueba de identidad. Para banca, administración pública e industria.
- [Identidad y accesos](https://www.ironchip.com/identidad.md): Autenticación sin contraseña y MFA por ubicación para toda la empresa: zonas seguras, ITDR, reglas dinámicas y un método para cada puesto, también sin móvil.
- [Detección de fraude](https://www.ironchip.com/fraude.md): Plataforma antifraude para banca y fintech: account takeover, money mule, SIM swapping, fraude autorizado y malware en sesión. SDK móvil y web y API HTTP.
- [Prevención de account takeover](https://www.ironchip.com/account-takeover.md): Cómo detectar y frenar el account takeover en banca y fintech: phishing, vishing, SIM swapping y malware, por ubicación, terminal y comportamiento.
- [Acceso privilegiado](https://www.ironchip.com/pam.md): Sesiones privilegiadas Just-in-Time con identidad, dispositivo y ubicación verificados, aprobación en la conexión y grabación completa.
- [Phishing Shield](https://www.ironchip.com/phishing-shield.md): Protección del navegador con 12 motores de detección: clonado, AiTM, ClickFix, QR, secuestro de sesión y bypass de MFA.
- [Tecnología](https://www.ironchip.com/tecnologia.md): Autenticación basada en ubicación: cómo Ironchip convierte el entorno radioeléctrico de un lugar en una zona segura anónima, sin GPS ni datos personales.
- [Casos de uso](https://www.ironchip.com/casos-de-uso.md): Empleados con móvil, con ordenador, puestos compartidos, proveedores, banca, sanidad, administración pública, turismo B2B y proveedores NIS2.
- [Caso Abanca (banca)](https://www.ironchip.com/casos/abanca.md): Abanca: la ubicación entra en el antifraude de la banca móvil. El antifraude por ubicación, en producción en una entidad gallega.
- [Caso Ayuntamiento de Alcobendas (sector público)](https://www.ironchip.com/casos/alcobendas.md): Ayuntamiento de Alcobendas: segundo factor para toda una plantilla municipal, con el nivel que pide el ENS. La administración local que pasó a MFA sin quejas de la plantilla.
- [Caso GHI Smart Furnaces (industria)](https://www.ironchip.com/casos/ghi.md): GHI Smart Furnaces: una planta industrial sin móviles, protegida con token USB. MFA en planta con token físico y clave partida.

## Company

- [Home (English)](https://www.ironchip.com/en/index.md)
- [Partner program](https://www.ironchip.com/en/partner-program.md)
- [Request a demo](https://www.ironchip.com/en/talk-sales)
- Documentation: https://docs.ironchip.com

## Optional

- [Legal notice](https://www.ironchip.com/en/legal-warning.md)
- [Privacy](https://www.ironchip.com/en/privacy-policy.md)
- [Cookie policy](https://www.ironchip.com/en/cookies-policy.md)