What WinMagic does

WinMagic is a privately held Canadian cybersecurity company founded in 1997 and headquartered in Mississauga, Ontario, that builds endpoint-anchored data security products for government, defense, and large enterprise customers. The company's portfolio is centered on two core platforms: SecureDoc, a FIPS 140-3 validated full-disk encryption suite that centrally manages BitLocker, FileVault, and Opal self-encrypting drives across Windows, macOS, and Linux endpoints; and MagicEndpoint, a continuous authentication platform that binds user identity to the endpoint's hardware TPM and maintains a persistent trusted channel for the duration of each session, eliminating passwords and post-login MFA prompts. WinMagic's most recent architectural release — Live Key and Live Identity in Transaction (LIT) — extends TPM-bound identity verification from login to every transaction, with explicit support for air-gapped and intermittent-connectivity environments relevant to OT and critical infrastructure.

WinMagic sells through direct enterprise field sales and a partner ecosystem that includes OEM hardware pre-validation with HP, Lenovo, Dell, and Panasonic; integration with all major identity providers (Microsoft Entra ID, Okta, Ping, Google Workspace, AWS, Salesforce); and a separate FIDO Eazy sub-brand for broader FIDO2 adoption. Revenue is generated primarily through enterprise software licenses and subscriptions — sold as cloud-hosted SaaS, on-premise, or air-gapped deployments — supplemented by professional services for deployment and customization. Pricing is quote-based with annual or multi-year contracts and no public rate card. The customer base spans U.S. federal and defense agencies (Department of Defense, Department of Energy, Department of Homeland Security, U.S. Army, U.S. Air Force), commercial enterprises (AAA, UAW, large banking and semiconductor firms), and education and healthcare customers, with 5M+ licenses deployed across 80+ countries. The company has no disclosed institutional investors, no parent company, and no acquisition history; it operates as an independent, founder-led entity under CEO Thi Nguyen-Huu.

Name

WinMagic

Legal name

WinMagic Inc.

Website

https://winmagic.com

Company type

Private

Founded year

1997

Operating status

Operating

Headcount range

51–100 employees

Short description

WinMagic provides FIPS 140-3 validated endpoint encryption (SecureDoc) and TPM-bound continuous authentication (MagicEndpoint) to government, defense, and large enterprise customers across 80+ countries via direct enterprise sales and OEM partnerships.

Ownership category

akta.pro rank

Product category

Endpoint Security Software

NAICS

Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Confidential Computing & Hardware-backed Protection (TEE/HSM) (HDADAFAJ)

akta.pro secondary industries

Authentication (MFA/Passwordless/Biometrics) Platforms (BPAMAEAE), Key Management, Encryption & Secrets Management (KMS/HSM/Vault) (HDABAHAG)

Keywords

• Endpoint encryption software
• Passwordless authentication
• Full disk encryption
• TPM-based authentication
• Enterprise data security

Headquarters

HQ city

Mississauga

HQ country

Canada

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Software Licenses and Subscriptions: SecureDoc and MagicEndpoint sold as software licenses and subscriptions. Available as cloud-hosted SaaS or self-hosted on-premise, including air-gapped environments. Professional services for deployment and training offered alongside. Annual and multi-year subscription billing implied by support contract and release cadence.
2. Professional Services: Consulting and training services including implementation assistance, custom installation profiles, deployment support, and ongoing management. Tailored consulting designed for unique needs of each client. Software feature acceleration/customization available as separate consulting engagement.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

WinMagic develops and sells two flagship software products: MagicEndpoint, a continuous passwordless authentication platform that anchors user identity in the endpoint's hardware TPM and verifies 'user on device, in real-time' throughout every session; and SecureDoc, a FIPS 140-3 validated full-disk and endpoint encryption suite managing BitLocker, FileVault, and TCG Opal self-encrypting drives across Windows, macOS, and Linux from a centralized console. Both products are sold as enterprise licenses and subscriptions, deployable as cloud-hosted SaaS, on-premise, or in air-gapped environments.

Product overview

WinMagic offers a dual-product portfolio consisting of MagicEndpoint for passwordless authentication and SecureDoc for full-disk encryption. MagicEndpoint serves as the authentication platform, anchoring identity in the endpoint's TPM and maintaining continuous verification through a persistent trusted channel. SecureDoc provides FIPS 140-3 validated encryption across Windows, macOS, and Linux platforms. The two products work together to establish a trusted endpoint foundation: SecureDoc protects the device while MagicEndpoint uses that trusted endpoint to authenticate users to all online applications without passwords or prompts. Both products are available as cloud-hosted SaaS, on-premise, or air-gapped deployments, and can be deployed individually or together through the SecureDoc Enterprise Server management console.

Differentiator

Problem solved

Functional benefit

Brands

• MagicEndpoint: Passwordless authentication platform that verifies the user on the device in real time and secures the whole session, not just the login.
• SecureDoc
• MagicEndpoint FIDO Eazy

Products and services

• MagicEndpoint Continuous authentication platform that verifies the user and device cryptographically without requiring repeated user interaction. Anchors identity in the endpoint's TPM, maintains a persistent trusted channel for always-on session verification, and supports FIDO2 / SAML / OIDC / WS-Fed federation to Okta, Microsoft Entra ID, Ping, Google Workspace, AWS, Salesforce, and other identity providers.
• SecureDoc FIPS 140-3 validated full-disk encryption suite for Windows, macOS, and Linux that manages BitLocker, FileVault 2, and TCG Opal self-encrypting drives from a single centralized console with pre-boot authentication, multi-factor authentication, and key recovery.
• MagicEndpoint FIDO Eazy FIDO2-based passwordless authentication solution marketed separately through fidoeazy.com, enabling phishing-resistant authentication for online applications.
• SecureDoc Enterprise Server (SES) Central management console for configuring, deploying, and managing SecureDoc encryption across an organization, providing key management, policy enforcement, and compliance reporting.
• SecureDoc Cloud Encryption solution for virtual and cloud servers covering AWS, Azure, VMware, and Hyper-V environments, providing data-at-rest protection across cloud infrastructure.
• SecureDoc File Encryption File, folder, and container encryption solution providing transparent encryption for sensitive data on endpoints and removable media.
• SecureDoc Server Encryption Encryption solution for physical and virtual servers, protecting data at rest across enterprise server infrastructure.
• PBConnex Network access control feature integrated with SecureDoc that prevents data exposure until user credentials are validated via the network, ensuring no unauthorized data access on lost or stolen devices.
• Professional Services Consulting and deployment services for WinMagic products, including implementation assistance, custom installation profiles, deployment support, ongoing management, and tailored consulting engagements.

Quantifiable outcome

• Eliminates all MFA prompts and password authentication for end users after initial device login
• +4 more outcomes

Named customers16 records

Segments8 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration30 records

Feature7 records

Partnerships

Eleven partnerships are on record, tiered core and minor.

• HP (Hewlett-Packard)coreTechnology or IntegrationStrategic OEM partnership where WinMagic validates SecureDoc against HP business-grade models, including systems not yet available for purchase. HP is listed among WinMagic's trusted customers and partners. Device compatibility testing and pre-certification ensures SecureDoc works seamlessly on HP hardware.
• LenovocoreTechnology or IntegrationStrategic OEM partnership where WinMagic validates SecureDoc against Lenovo business-grade models. Additionally, WinMagic integrates with Lenovo's Hardware Password Manager for BIOS credential management. Long-standing validation partnership for device compatibility.
• DellcoreTechnology or IntegrationWinMagic works with Dell as an OEM partner to ensure SecureDoc compatibility with Dell business-grade models. Dell is listed among WinMagic's supported hardware partnerships.
• MicrosoftcoreTechnology or IntegrationWinMagic is a Microsoft Gold Partner and member of the Windows Application Readiness Program (WARP), receiving pre-release Windows builds for compatibility testing. Integrates with and manages Microsoft BitLocker, Microsoft Entra ID, and Microsoft 365. Supports Windows 11, Windows Server, and Microsoft authentication backends including CBA and FIDO2.
• OktacoreTechnology or IntegrationMagicEndpoint integrates with Okta as a phishing-resistant federation primitive. Supports Okta as the IdP for SAML, OIDC, and WS-Fed authentication flows. Technical brief available for PBA and Windows Login with Okta.
• Microsoft Entra IDcoreTechnology or IntegrationMagicEndpoint integrates with Microsoft Entra ID (Azure AD) as the identity provider, enabling passwordless authentication for all Entra-connected applications.
• IntelcoreTechnology or IntegrationWinMagic works with Intel on Trusted Platform Module (TPM) support and Intel Anti-Theft Technology for theft deterrence. Intel is listed as a strategic technology partner. AES-NI support for cryptographic acceleration on Intel CPUs.
• Intel (TPM)coreTechnology or IntegrationWinMagic works with Intel Trusted Platform Module (TPM) as a foundational security component. Intel TPM is a core component of MagicEndpoint's hardware-bound credential architecture. Intel is listed among strategic partners.
• W3C (World Wide Web Consortium)minorStrategic or Co-development PartnerWinMagic is engaged in active standards work with W3C to shape the next decade of identity architecture, contributing to web authentication standards and specifications.
• IETF (Internet Engineering Task Force)minorStrategic or Co-development PartnerWinMagic participates in IETF standards work to influence identity and authentication protocol standards for internet-scale deployment.
• Decentralized Identity Foundation (DIF)minorStrategic or Co-development PartnerWinMagic is engaged in active standards work with the Decentralized Identity Foundation to shape decentralized identity architecture and specifications.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Microsoft: Microsoft bundles BitLocker management via Entra ID and offers native passkey/FIDO2 support, competing with both SecureDoc and MagicEndpoint as the default endpoint security stack for Windows enterprises. WinMagic's value proposition explicitly positions as complementary ('IAM: Better Together'), but Microsoft's continuous access evaluation and passkey roadmap is the primary competitive threat.
• Apple: Apple FileVault 2 is the native macOS full-disk encryption that SecureDoc centrally manages. As macOS adoption grows in enterprise, Apple continues to deepen built-in encryption capabilities, reducing the incremental value of third-party management in some deployments.
• Cisco (Duo Security): Cisco Duo is a leading MFA and passwordless authentication platform serving the same enterprise and federal segments as MagicEndpoint. Cisco's security portfolio breadth and channel reach make it a primary competitor for enterprise authentication budget.
• Thales: Thales (via SafeNet, Gemalto) is a leader in HSMs, PKI smart cards, and data encryption — overlapping substantially with both SecureDoc (key management) and MagicEndpoint (smart card authentication). Thales is also a WinMagic integration partner, indicating both cooperative and competitive dynamics.
• Trellix (formerly McAfee): Trellix offers Drive Encryption and endpoint security suites that compete with SecureDoc across enterprise and federal segments. A broad incumbent with significantly larger market presence and channel than WinMagic.

Direct peers

• Okta: Okta is the dominant cloud IAM and authentication platform with which MagicEndpoint federates but also competes against for passwordless and phishing-resistant MFA. Okta's scale, brand, and product breadth make it the principal head-to-head competitor for enterprise authentication deals.
• Yubico: Yubico is the leading FIDO hardware authentication vendor (YubiKey) and a Works-with-YubiKey catalog partner of WinMagic. Both companies serve the phishing-resistant MFA and passkey markets; Yubico leads in hardware tokens while WinMagic differentiates via TPM-bound software credentials.
• Entrust: Entrust provides PKI, smart card, and identity solutions competing with both WinMagic's authentication and encryption offerings, particularly in government and financial services. Listed as a WinMagic integration partner, suggesting overlapping but differentiated go-to-market positions.
• Absolute Software: Absolute Software provides endpoint security and persistence (Computrace) and is a WinMagic integration partner. Both target endpoint visibility, resilience, and compliance in regulated and federal markets with complementary rather than identical offerings.

Emerging players

• HYPR: HYPR is a passwordless authentication vendor focused on FIDO/passkey deployments, directly competing with MagicEndpoint in phishing-resistant MFA. An emerging pure-play in the same architectural category as MagicEndpoint, with venture funding that WinMagic lacks.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/watch?v=ERtRmqkh5-o
• LinkedInlinkedin.com/company/winmagic
• Xx.com/WinMagic
• Facebookfacebook.com/WinMagicInc

Compliance14 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about WinMagic