⭐ VaultysClaw is Open Source! Support the security of agentic AI by leaving us a star on GitHub ⭐
Vaultys
Retour aux actualités

A big step for sovereignty: Vaultys open sources its self-sovereign authentication technology.

Vaultys put to the test by Amossys expertise

Security Audit: Vaultys put to the test by Amossys expertise

Did you know that 81% of data breaches are due to compromised passwords? Faced with this alarming reality and the vulnerabilities of traditional authentication systems, Vaultys was created with a clear mission: to offer a decentralized, sovereign, and highly secure authentication solution. But in a sector where trust is essential, how can the robustness of such technology be proven? The answer: an independent audit conducted by Amossys, a renowned French cybersecurity expert.

The genesis of Vaultys

Founded in 2022 by Jean Williamson and François-Xavier Thoorens, Vaultys was born from a clear ambition: to rethink digital identity by offering an alternative to centralized solutions dependent on GAFAM. In response to the growing vulnerabilities of traditional authentication systems and the challenges of digital sovereignty, Vaultys developed VaultysID, an innovative solution enabling businesses and users to secure their digital identity while retaining full control.

VaultysID is based on three fundamental pillars:

  • Decentralization: Reduces vulnerability points through a distributed architecture.
  • Passwordless authentication: Eliminates risks related to credential theft.
  • Compliance with European regulations and authentication standards: GDPR, NIS2, ISO27001 compliance and compatibility with Passkey, FIDO2.

In a commitment to transparency and enhanced security, Vaultys is releasing VaultysID as Open Source. This initiative will enable the cybersecurity community to analyze, improve, and integrate this technology for new uses, ensuring a safer and more accessible digital ecosystem for everyone.

Technical audit by a third party approved by ANSSI: a key validation

Amossys is a leading player in cybersecurity, recognized for its assessments within the framework of ANSSI certifications (Common Criteria, CSPN, EUCC). This reputable organization is part of the Almond group.

How did the audit take place?

The audit of the VaultysID authentication protocol followed several key steps:

  1. Theoretical analysis: in-depth study of the specifications and technical documentation.
  2. Security testing : attack simulations to assess the robustness of the protocol.
  3. Modeling and validation: formal verification of the protocol using VerifPal.
  4. Recommendations: minor adjustments proposed to optimize security.

Audit findings

The report highlighted several strengths of VaultysID:

  • A secure and resilient architecture against modern attacks (phishing, AiTM, session theft).
  • An innovative decentralized approach reducing single points of vulnerability.
  • A seamless user experience while ensuring maximum protection.

The hidden dangers of non-sovereign IAM solutions

IT service companies offering non-sovereign IAM solutions face several issues:

  • Dependence on foreign infrastructures: Risk of interference or service disruption in the event of geopolitical tensions.
  • Non-compliance with European standards: Some centralized solutions do not guarantee compliance with GDPR and NIS2 requirements.
  • Less transparency and control: Clients do not always have full visibility over identity processing and security.

4 winning strategies to integrate digital sovereignty into your IAM offerings

Choose sovereign IAM solutions: a major competitive advantage

IT service companies must turn to European solutions, developed and hosted in compliance with local regulations. Solutions from specialized vendors offer independence from GAFAM and ensure strict regulatory compliance.

Among these alternatives, VaultysID stands out with its open source and sovereign approach, ensuring total control over digital identity management.

Open source: the key to trusted cybersecurity

One of the main arguments for digital sovereignty is transparency. Open source solutions allow companies to verify security levels themselves and audit the code. Several European initiatives are part of this movement, strengthening the independence of digital infrastructures.

Ensure seamless interoperability with your client ecosystems

Sovereign IAM solutions must be compatible with market standards (FIDO2, SAML, OpenID Connect). Several European solutions guarantee this interoperability, enabling IT service companies to offer flexible options to their clients. VaultysID, for example, integrates easily into existing environments, providing a credible alternative to American solutions.

Turn your cybersecurity expertise into a competitive advantage

IT service companies play a key role in guiding their clients toward suitable cybersecurity solutions. By offering tools that comply with European regulations and align with business needs, they can secure their offerings and increase their differentiation in an increasingly competitive market.

Digital sovereignty: A strategic imperative for IT service companies

IT service companies must anticipate the rise of digital sovereignty today. By integrating sovereign IAM solutions and promoting alternatives like VaultysID, they position themselves as trusted partners for their clients, while meeting new regulatory and security requirements.