Trustaige · Platform · Sign-in risk
Password-based platforms drown their detection in credential stuffing and reset abuse. With every sign-in proved by a passkey, what’s left is signal: a device never seen before, a session that travels faster than any flight, an admin action that needs fresh proof. Trustaige acts on it at once and tells every app that listens.
What Trustaige watches
01
Two sign-ins further apart than any flight could carry someone in the time between them. Trustaige measures the distance, divides by the time, and lets your policy decide.
How it triggersEach sign-in's location compared with the person's previous one, within two hours.
02
With no password to replay, a sign-in can only come from where the person's passkey is. A browser and system they've never used is the moment to ask again.
How it triggersA browser and operating system this person has never signed in from.
03
Deleting an application or a policy, connecting a directory, granting a partner access: a session token alone isn't enough. A quick passkey check is.
How it triggersA passkey verified in the last 15 minutes, checked on the server for every request. Erasing a Mac, iPhone or iPad also takes a second superadmin.
04
Impossible travel raises the person's risk to high, a new device to medium, and every app subscribed over the OpenID Shared Signals Framework hears it, along with revoked sessions, changed credentials and devices out of policy.
How it's deliveredSecurity event tokens pushed or polled (RFC 8935, RFC 8936). On every plan, Starter included.
When a signal fires
Detection is half the work. Each policy names the response that fits the signal, the person and the application.
Where the signal goes
Every detection (the verdict, the trigger, the person, the device, the location and the policy that matched) streams to the monitoring stack your team already runs, on every paid plan, in the formats your tools already read.
The same record lands in a hash-chained audit log verified every day, so the evidence behind an incident review can't be quietly rewritten.
See the full integration pictureStart a conversation
We'll walk through a working deployment, map it to your stack, and tell you honestly where Trustaige fits — and where it doesn't.