ToothPic
ToothPic is a Politecnico di Torino spin-off that provides hardware-based smartphone authentication by leveraging unique camera sensor fingerprints (PRNU-based PUF). It sells a Key Protection SDK and passwordless solutions to banks, fintechs, insurers, and enterprises primarily in Europe.
- Company typePrivate
- Founded2018
- HeadquartersTorino, Italy
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What ToothPic does
ToothPic is a deep tech cybersecurity company founded in 2016 as a spin-off from Politecnico di Torino and headquartered at the I3P incubator in Turin, Italy. The company has developed a patented authentication technology that exploits Photo-Response Non-Uniformity (PRNU) — the unique microscopic imperfections inherent in every smartphone camera sensor — as a Physical Unclonable Function (PUF) for hardware-anchored cryptographic key generation. This approach transforms a user's existing smartphone into a secure authentication device without additional hardware, biometrics, or stored secrets, making the resulting identity impossible to extract, simulate, or replicate by AI or malware.
The commercial product surface is anchored by the Key Protection SDK (iOS and Android), which integrates with FIDO2/U2F and WebAuthn standards, and is complemented by a Passkey Provider for passwordless authentication, a FIDO2/U2F Authenticator, and a set of sector-specific solutions spanning corporate authentication, crypto wallet security, digital signatures, anti-phishing, device binding, and encrypted documents. The technology is protected by four granted international patents (including a newly granted patent in South Korea) and is hardened through integration with Intertrust's whiteCryption application shielding.
ToothPic operates a B2B enterprise go-to-market, licensing its SDK primarily to banks, fintechs, insurance firms, and corporates through direct enterprise sales supplemented by system-integrator partnerships. Named customers include Viva Wallet (a cloud-based neobank active in 23 European countries), Young Platform (Italian crypto exchange), and Corvallis (insurance software). The company has raised approximately €1.6M in total funding across two seed rounds (2018 and January 2021) from Vertis Venture 3 Tech Transfer and Club degli Investitori, and has been recognized with the IEEE Computer Society Best Paper Award, a Hello Tomorrow Deep Tech Pioneer designation, and two European Commission Seals of Excellence.
ToothPic firmographics
Firmographics- Name
- ToothPic
- Legal name
- ToothPic Srl
- Website
- https://toothpic.eu
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- ToothPic is a Politecnico di Torino spin-off that provides hardware-based smartphone authentication by leveraging unique camera sensor fingerprints (PRNU-based PUF). It sells a Key Protection SDK and passwordless solutions to banks, fintechs, insurers, and enterprises primarily in Europe.
- Ownership category
- akta.pro rank
ToothPic industry classification
Industry- Product category
- Mobile Authentication & Identity Security Software
- NAICS
- Security Systems Services (except Locksmiths) (561621)
- akta.pro primary industry
- Authentication (MFA/Passwordless/Biometrics) Platforms (BPAMAEAE)
- akta.pro secondary industries
- Multi-Factor Authentication (MFA) & Passwordless Authentication (HDAEAJAC), Device Identity & Certificate-Based Authentication (PKI) (BPAMAEAL)
Keywords
Where ToothPic is headquartered
LocationHeadquarters
- HQ city
- Torino
- HQ country
- Italy
- HQ region
- Europe
Offices1 record
Markets served
ToothPic business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- SDK Licensing / Technology Licensing: ToothPic offers their Key Protection SDK for integration into third-party mobile applications. The SDK is available for Android and iOS platforms, targeting enterprise customers in banking, fintech, insurance, and other sectors requiring secure authentication.
- Professional Services / Integration Support: ToothPic provides support to third parties for integration of the library in smartphone apps within pilot projects for market entry. This includes implementation support and customization services.
- Enterprise Software/Subscription: Enterprise customers license the technology for secure mobile authentication, digital signatures, and crypto wallet applications. Revenue model likely subscription-based for SDK access and support.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise licensing - quote-based |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels7 records
ToothPic product offering
Product offeringCore offering
ToothPic provides a patented hardware-based authentication platform that exploits the unique manufacturing imperfections (PRNU) of smartphone camera sensors to derive and protect cryptographic keys, without requiring any additional hardware. Its core product is the Key Protection SDK (Android and iOS), complemented by the Passkey Provider for FIDO2/WebAuthn passwordless authentication and sector-specific solutions for banking, corporate access, crypto wallets, digital signatures, and anti-phishing.
Product overview
ToothPic offers a hardware-based authentication platform centered on its patented Key Protection SDK, which transforms smartphones into secure authentication keys by leveraging unique camera sensor fingerprints. The product portfolio includes the core Key Protection SDK (available for Android and iOS), the Passkey Provider for passwordless FIDO2/WebAuthn authentication, and sector-specific use case solutions including Corporate Authentication, Crypto Wallet, Digital Signature, Anti-Phishing, Device Binding, and Encrypted Documents. The technology is protected by 4 international patents and uses Photo-Response Non-Uniformity (PRNU) analysis to create unclonable device identity without requiring additional hardware.
Differentiator
Problem solved
Functional benefit
Products and services
- Key Protection SDK SDK for Android and iOS that protects cryptographic keys by binding them to the unique Photo-Response Non-Uniformity (PRNU) fingerprint of the smartphone's camera sensor. Supports the most commonly used asymmetric public/private key types and integrates with FIDO2/U2F authenticators. Designed for enterprise developers integrating hardware-based authentication into mobile banking, fintech, crypto, insurance, and corporate apps.
- Passkey Provider
- FIDO2/U2F Authenticator
Quantifiable outcome
- 99% reduction in Account Takeover (ATO) risks caused by deepfakes, voice cloning, and malware
- +3 more outcomes
Companies that use ToothPic
Customer profileNamed customers3 records
Segments5 records
Ideal customer profiles5 records
ToothPic technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability3 records
Feature5 records
ToothPic partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered strategic and core.
- Coalition for Content Provenance and Authentication (C2PA)strategicToothPic joined C2PA to fight digital manipulation and ensure content authenticity. C2PA develops standards for content provenance and authentication to address digital content manipulation challenges.
- Viva WalletstrategicCloud-based neobank offering payment services in 23 European countries. Viva Wallet uses ToothPic technology for mobile payment ecosystem security, integrating ToothPic's Key Protection SDK alongside whiteCryption solutions for enhanced protection against reverse engineering and malicious attacks.
- I3P (Italian Incubator for Innovative Companies)coreUniversity incubator of Politecnico di Torino, recognized by UBI Global as the best public incubator worldwide in 2019. ToothPic is an official university spin-off of Politecnico di Torino incubated at I3P. I3P provides ongoing support including deal flow and investment facilitation.
- Young PlatformstrategicCollaboration with Young Platform to make cryptocurrency wallets and exchanges more secure. Young Platform is an Italian crypto exchange using ToothPic technology for enhanced security of their platform.
- Intertrust / whiteCryptionstrategicToothPic uses Intertrust's whiteCryption Secure Key Box whitebox cryptography solution to enhance security of Key Protection SDK. whiteCryption is a leading provider of application shielding and software code protection used by major companies in fintech and payment industries.
Scale indicators3 records
Recent moves8 records
Expansion highlights6 records
ToothPic competitors and assessment
Company assessmentDirect peers
- HYPR: HYPR is a passwordless authentication platform offering FIDO2-compliant MFA. It is one of the closest direct competitors to ToothPic in the passwordless/MFA space, particularly for enterprise and financial services customers.
- Transmit Security: Transmit Security provides passwordless authentication, identity, and CIAM solutions to large banks and enterprises. Like ToothPic, it targets fraud reduction and PSD2/FIDO2 compliance in financial services.
- Beyond Identity: Beyond Identity offers device-bound, passwordless authentication using device-level cryptographic identity. It shares ToothPic's thesis that authentication should be hardware-anchored and resistant to phishing and AI-driven fraud.
- Nok Nok Labs: Nok Nok is a founder of the FIDO Alliance and provides FIDO-based authentication SDKs for mobile and web. It is directly comparable to ToothPic's FIDO2/U2F authenticator offering and serves banks and telecom carriers.
- Trusona: Trusona provides passwordless and anti-remote-desktop fraud authentication for enterprises, particularly in financial services. It is comparable as a passwordless authentication vendor competing for similar banking/enterprise deals.
- Keyless: Keyless offers privacy-preserving biometric authentication for banks and enterprises, with an SDK-based delivery model. Like ToothPic, it focuses on frictionless passwordless login and strong customer authentication.
Emerging players
- iProov: iProov provides biometric face authentication including liveness detection for banks, governments, and enterprises. It is an emerging player in the same authentication market, though it relies on facial biometrics rather than camera-sensor PUF.
- Secret Double Octopus: Secret Double Octopus offers passwordless MFA for enterprise workforce authentication, sharing ToothPic's enterprise/BYOD use cases. It is an emerging player with overlapping go-to-market in enterprise security.
- 1Kosmos (BlockID): 1Kosmos provides decentralized identity and passwordless authentication with strong focus on workforce and customer use cases in banking and government. It is comparable to ToothPic in the passwordless/decentralized identity category.
Broad incumbents
- Okta: Okta is a broad identity and access management incumbent with passwordless and adaptive MFA capabilities. It is the dominant platform competitor in the enterprise authentication market where ToothPic sells.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
ToothPic social profiles
Digital presenceToothPic financial estimates
Financial estimateRevenue estimate
Valuation estimate
ToothPic leadership team
Management profileNumber of profiles
Profiles8 records
ToothPic funding detail
Funding detailFunding overview
Funding rounds2 records
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ToothPic M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ToothPic
What does ToothPic do?
ToothPic provides a patented hardware-based authentication platform that exploits the unique manufacturing imperfections (PRNU) of smartphone camera sensors to derive and protect cryptographic keys, without requiring any additional hardware. Its core product is the Key Protection SDK (Android and iOS), complemented by the Passkey Provider for FIDO2/WebAuthn passwordless authentication and sector-specific solutions for banking, corporate access, crypto wallets, digital signatures, and anti-phishing.
Is ToothPic a public or private company?
ToothPic is a private company. It is classified as venture growth investor backed and is currently operating.
When was ToothPic founded?
ToothPic was founded in 2018. It employs 1 to 10 people.
Where is ToothPic based?
ToothPic is headquartered in Torino, Italy, in the Europe region.
How does ToothPic make money?
Three revenue lines are on record. SDK Licensing / Technology Licensing is the primary driver. The others are professional Services / Integration Support and enterprise Software/Subscription.
Who are ToothPic's main competitors?
Direct peers on record are HYPR, Transmit Security, Beyond Identity, Nok Nok Labs, Trusona and Keyless. Emerging players are iProov, Secret Double Octopus and 1Kosmos (BlockID). Okta is listed as a broad incumbent.
Does ToothPic have an API?
No public API is recorded for ToothPic.
What industry is ToothPic in?
ToothPic's product category is Mobile Authentication & Identity Security Software. Its primary akta.pro industry code is BPAMAEAE, Authentication (MFA/Passwordless/Biometrics) Platforms, with a secondary code of HDAEAJAC, Multi-Factor Authentication (MFA) & Passwordless Authentication. Its NAICS code is 561621.