HiTRUST
HiTRUST is a Taipei-based payment security and authentication platform providing EMVCo-certified 3-D Secure, AI-powered fraud detection, FIDO2 passwordless authentication, and payment gateway services to banks, payment processors, and merchants across Asia-Pacific.
- Company typePrivate
- Founded1999
- HeadquartersTaipei, Taiwan
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What HiTRUST does
HiTRUST is a Taipei-headquartered payment security and authentication platform serving financial institutions, payment processors, e-commerce merchants, and digital wallet providers primarily across the Asia-Pacific region. Founded in 1999, the company built its early franchise on 3-D Secure (3DS) authentication technology for card-not-present (CNP) transactions, and has operated continuously for 25+ years as an EMVCo-certified vendor supporting all six major card schemes (Visa, Mastercard, Amex, UnionPay, JCB, Discover). Its product portfolio spans the full 3DS value chain — HiTRUSTacs (issuer-side Access Control Server), HiTRUST3DSsvr (merchant/acquirer-side 3DS Server), and HiTRUST3DSSDK (mobile integration) — complemented by Veri-id, an AI-powered fraud detection and risk-based authentication system with patented device fingerprinting across 100+ attributes, and Veri FIDO, a FIDO2-certified passwordless authentication service. Additional offerings include HiTRUSTpay (e-commerce payment gateway with Shopify integration), a digital loyalty platform, and DigiCert SSL certificates via Gold Partner resale.
The company operates both cloud (AWS, GCP) and on-premise deployment models, with seven regional offices across Taipei, Beijing, Hong Kong, Shanghai, Guangzhou, Singapore, and Hanoi. Its technology stack is anchored in EMV 3DS standards, public key cryptography for FIDO authentication, and AI/ML for risk scoring, with compliance certifications including PCI-DSS Level 1, PCI-3DS, FIDO2/UAF, and EMVCo Letters of Approval for its ACS and 3DS Server V3.0 products.
HiTRUST monetizes through a hybrid revenue model: recurring cloud subscriptions plus per-transaction fees for SaaS deployments (with disclosed pricing such as $0.6 per active user per year for Veri FIDO, minimum 1M users), one-time project licensing plus optional maintenance for on-premise deployments (its primary model with major Chinese state-owned banks including ICBC, CCB, ABC, BOC, and Postal Savings Bank of China), transaction-based fees for the HiTRUSTpay payment gateway, and reseller margins on DigiCert SSL certificates. Go-to-market combines enterprise field sales for large bank deployments, API-first self-serve for mid-market cloud adoption, and channel partnerships (Shopify, card schemes) for SMB and global merchant reach. The company claims 20,000+ customers globally and 300+ technical experts, with over 80% of headcount described as skilled industry technicians.
HiTRUST firmographics
Firmographics- Name
- HiTRUST
- Legal name
- HiTRUST
- Website
- https://hitrust.com
- Company type
- Private
- Founded year
- 1999
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- HiTRUST is a Taipei-based payment security and authentication platform providing EMVCo-certified 3-D Secure, AI-powered fraud detection, FIDO2 passwordless authentication, and payment gateway services to banks, payment processors, and merchants across Asia-Pacific.
- Ownership category
- akta.pro rank
HiTRUST industry classification
Industry- Product category
- Payment Security Software
- NAICS
- Financial Transactions Processing, Reserve, and Clearinghouse Activities (522320), Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- 3D Secure, Authentication & Access Control (FSAMALAD)
- akta.pro secondary industry
- Authentication (MFA/Passwordless/Biometrics) Platforms (BPAMAEAE)
Keywords
Where HiTRUST is headquartered
LocationHeadquarters
- HQ city
- Taipei
- HQ country
- Taiwan
- HQ region
- Asia
Offices7 records
Markets served
HiTRUST business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations
Revenue model
- Cloud Service Subscriptions: Annual/monthly subscription fees plus transaction fees for cloud-based 3-D Secure, ACS, Fraud Detection, and FIDO services deployed on AWS and GCP.
- On-Premise Licensing: One-time project fees for on-premise deployment of 3DS solutions with optional ongoing maintenance and upgrade support.
- Payment Gateway Services: Payment processing services for e-commerce merchants including Shopify integration, supporting multiple payment methods and currencies.
- SSL Certificate Resale (DigiCert): Resale of DigiCert SSL certificates as a Gold Partner, including DV, OV, EV, and Wildcard certificates.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Veri FIDO per Active User |
| Usage-based | Pay-as-you-go | Veri FIDO per Transaction |
| Other | Multi-year contract | Veri FIDO Project-based |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels7 records
HiTRUST product offering
Product offeringCore offering
HiTRUST provides EMVCo-certified 3-D Secure authentication, AI-powered fraud detection, FIDO2 passwordless authentication, and e-commerce payment gateway solutions for banks, card issuers, acquirers, merchants, e-wallets, and payment service providers. Core components include the HiTRUSTacs (Access Control Server) for issuers and HiTRUST3DSsvr (3DS Server) for merchants/acquirers, supplemented by the patented Veri-id fraud detection system and Veri FIDO passwordless authentication. Solutions are available via Cloud Service (SaaS on AWS/GCP) or On-Premise deployment.
Product overview
HiTRUST is a digital trust and payment security platform offering a comprehensive portfolio spanning 3-D Secure authentication, AI-powered fraud detection, passwordless authentication, and e-commerce payment solutions. The core product architecture centers on 3-D Secure (3DS) technology with two main components: HiTRUSTacs (Access Control Server for issuers) and HiTRUST3DSsvr (3DS Server for merchants/acquirers). These are complemented by Veri-id (AI fraud detection/risk-based authentication), Veri FIDO (FIDO2 passwordless authentication), and HiTRUSTpay (payment gateway). Solutions are available via Cloud Service (SaaS on AWS/GCP) or On-Premise deployment. The Vietnamese market is served under the HiFIDO brand for FIDO authentication. Additional offerings include loyalty services and DigiCert SSL certificates through partnership.
Differentiator
Problem solved
Functional benefit
Products and services
- 3-D Secure EMVCo-certified 3-D Secure authentication solution providing an additional security layer for card-not-present online transactions. Supports 3DS 1.0, 2.1, 2.2, and 2.3+ versions with frictionless and challenge authentication flows for card issuers, acquirers, and merchants.
- Veri-id Fraud Detection AI-powered fraud detection and risk management system combining real-time risk monitoring, machine learning analysis, and device fingerprinting (up to 100 device attributes) to detect and prevent fraudulent activities. Features patented self-learning AI models that generate customized risk-based authentication (RBA) models for issuers, acquirers, and merchants.
- Veri FIDO Passwordless Authentication Passwordless authentication solution based on FIDO2 and UAF Alliance standards, leveraging public key cryptography to secure logins and transactions. Supports biometric authentication, cross-platform compatibility, and phishing-resistant login and payment verification using device-bound credentials.
- HiTRUSTpay Payment Gateway Comprehensive e-commerce payment solution for online merchants supporting multiple payment methods including credit cards, debit cards, and mobile wallets (Apple Pay, Samsung Pay, Google Pay). PCI-DSS Level 1 certified with integrated 3-D Secure support and Shopify platform integration.
- ACS Cloud Cloud-native SaaS Access Control Server solution enabling issuers (banks and financial institutions) to securely authenticate cardholder transactions. Supports 3DS 2.1, 2.2, and 2.3+ with multiple authentication methods including OTP (SMS/Email) and in-app out-of-band authentication.
- 3DS Server Cloud Cloud-based 3D Secure Server solution for merchants, acquirers, and payment gateways enabling liability shift protection and fraud prevention. Supports 3D Secure 2.0+ with both redirect and non-redirect authentication flows.
- Fraud Detection Cloud Cloud-based fraud detection service combining real-time risk monitoring, AI-powered analysis, and device intelligence. Fully compatible with HiTRUST ACS to enhance 3DS authentication with fraud detection capabilities, capturing over 100 device attributes for fingerprinting and behavioral analysis.
- Cloud Veri FIDO Cloud-based passwordless authentication service delivering FIDO2-compliant phishing-resistant login and transaction verification. Supports biometric and hardware key authentication across platforms with no hardware requirements, priced per active user or per transaction.
- Loyalty Service Digital loyalty and rewards platform for online banking, credit card centers, merchants, and digital businesses. Enables customized loyalty programs with points tracking, intelligent analytics, and flexible redemption options to retain valuable customers.
- DigiCert SSL Certificates SSL digital certificate offerings resold through HiTRUST's DigiCert Gold Partnership, including DV SSL, OV SSL, EV SSL, and Wildcard SSL certificates for e-commerce businesses to enhance user trust and improve information security with near 100% browser compatibility.
Quantifiable outcome
- 54% more successful 3-D Secure transactions
- +3 more outcomes
Companies that use HiTRUST
Customer profileNamed customers14 records
Segments5 records
Ideal customer profiles4 records
HiTRUST technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability2 records
Feature5 records
HiTRUST partnerships and signals
Strategic signalPartnerships
Twelve partnerships are on record, tiered core.
- ShopifycoreHiTRUSTpay is integrated with Shopify as a trusted payment technology platform, providing comprehensive e-commerce solutions for online merchants. This partnership enables HiTRUST to promote its payment solutions globally to Shopify merchants.
- DigiCertcoreLong-term DigiCert Gold Partner providing SSL certificate services (DV, OV, EV, Wildcard) to HiTRUST customers. HiTRUST offers top-level support in obtaining certifications with near 100% browser compatibility.
- Amazon Web Services (AWS)coreCloud infrastructure provider for HiTRUST cloud services in US and Singapore regions, enabling global deployment of 3DS, ACS, Fraud Detection, and FIDO solutions.
- Google Cloud Platform (GCP)coreCloud infrastructure provider for HiTRUST cloud services in Taiwan region, enabling secure and scalable deployment of authentication and fraud detection services.
- VisacoreCard scheme certification for 3-D Secure implementation, enabling HiTRUST to provide authentication services for Visa card transactions globally.
- MastercardcoreCard scheme certification for 3-D Secure implementation, enabling HiTRUST to provide authentication services for Mastercard transactions globally.
- American ExpresscoreCard scheme certification for 3-D Secure implementation supporting Amex card authentication.
- China UnionPaycoreCard scheme certification for 3-D Secure implementation supporting China UnionPay card transactions.
- JCBcoreCard scheme certification for 3-D Secure implementation supporting JCB card authentication.
- DiscovercoreCard scheme certification for 3-D Secure implementation supporting Discover card transactions.
- EMVCocoreStandards body governing 3-D Secure specifications. HiTRUST is an EMVCo certified vendor supporting 3DS Server, ACS, RBA, and SDK solutions.
- FIDO AlliancecoreIndustry consortium establishing FIDO authentication standards. HiTRUST is FIDO2 and UAF certified since 2021 for passwordless authentication solutions.
Scale indicators8 records
Recent moves7 records
Expansion highlights5 records
HiTRUST competitors and assessment
Company assessmentBroad incumbents
- Adyen: Global payments platform that bundles 3-D Secure with merchant acquiring. HiTRUST's acquirer/merchant segment overlaps with Adyen's 3DS routing and authentication product line.
- RSA Security: Established authentication, fraud detection, and risk-based authentication platform with deep bank relationships. Overlaps HiTRUST in adaptive authentication, fraud risk scoring, and MFA but operates as a broad enterprise security portfolio rather than a payments-3DS specialist.
- Mastercard (Mastercard Identity Check): Card network offering Identity Check / 3DS as part of its core scheme. Overlaps with HiTRUST's 3DS product and exerts pricing pressure on independent 3DS vendors like Entersekt and HiTRUST.
- Visa (Visa Secure / 3DS): Card network that ships Visa Secure (EMV 3DS) to issuer and acquirer endpoints. Comparable to HiTRUST's 3DS Server and ACS offering but delivered as a network-embedded capability rather than a third-party service.
- Stripe (Stripe Identity / 3DS): Payments platform offering 3DS and identity verification APIs to merchants. Comparable to HiTRUST's HiTRUSTpay/Shopify channel and ACS offerings but embedded into Stripe Checkout rather than sold standalone.
Direct peers
- Signifyd: AI-driven e-commerce fraud detection and chargeback protection platform. Directly comparable to HiTRUST's Veri-id product line in target customer (online merchants) and approach (real-time risk scoring).
- Netcetera: Switzerland-based vendor of 3-D Secure, digital payments, and mobile authentication, with EMVCo and PCI certifications. Directly comparable to HiTRUST on certified 3DS infrastructure sold to banks and merchants.
- Entersekt: Specialist 3-D Secure and FIDO authentication provider for banks and card issuers. Closest comparable to HiTRUST in product scope (3DS server, ACS, FIDO), target customer (financial institutions), and go-to-market (certification-led, bank-by-bank integration).
- Sift: Digital trust and fraud-prevention suite serving e-commerce merchants and fintechs. Comparable to Veri-id in using machine learning over large transaction datasets to score payment and identity risk in real time.
- Kount (Equifax): AI-based fraud detection and risk scoring for digital payments and account creation. Closely comparable to Veri-id on device fingerprinting and risk-scoring for card-not-present transactions.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
HiTRUST social profiles
Digital presenceHiTRUST compliance and trust
Trust signalCompliance4 records
HiTRUST financial estimates
Financial estimateRevenue estimate
Valuation estimate
HiTRUST leadership team
Management profileNumber of profiles
HiTRUST funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
HiTRUST M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about HiTRUST
What does HiTRUST do?
HiTRUST provides EMVCo-certified 3-D Secure authentication, AI-powered fraud detection, FIDO2 passwordless authentication, and e-commerce payment gateway solutions for banks, card issuers, acquirers, merchants, e-wallets, and payment service providers. Core components include the HiTRUSTacs (Access Control Server) for issuers and HiTRUST3DSsvr (3DS Server) for merchants/acquirers, supplemented by the patented Veri-id fraud detection system and Veri FIDO passwordless authentication. Solutions are available via Cloud Service (SaaS on AWS/GCP) or On-Premise deployment.
Is HiTRUST a public or private company?
HiTRUST is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was HiTRUST founded?
HiTRUST was founded in 1999. It employs 101 to 250 people.
Where is HiTRUST based?
HiTRUST is headquartered in Taipei, Taiwan, in the Asia region.
How does HiTRUST make money?
Four revenue lines are on record. Cloud Service Subscriptions are the primary driver. The others are on-Premise Licensing, payment Gateway Services and SSL Certificate Resale (DigiCert).
Who are HiTRUST's main competitors?
Broad incumbents on record are Adyen, RSA Security, Mastercard (Mastercard Identity Check), Visa (Visa Secure / 3DS) and Stripe (Stripe Identity / 3DS). Direct peers are Signifyd, Netcetera, Entersekt, Sift and Kount (Equifax).
Does HiTRUST have an API?
Yes. HiTRUST offers APIs for its cloud-based services including Cloud 3DS Server API, ACS Cloud API, Fraud Detection Cloud API (Veri-id), and FIDO Passwordless Cloud API (Veri FIDO). APIs are available for integration with merchants, acquirers, issuers, and payment gateways. The services support 3D Secure 2.0+ authentication protocols. Integration typically spans a few weeks with technical support provided. Sandbox/testing environments are available for API testing including SIT (System Integration Testing), UAT (User Acceptance Testing), and PIT (Production Integration Testing). Developer documentation is at www.hitrust.com/apid.html.
What industry is HiTRUST in?
HiTRUST's product category is Payment Security Software. Its primary akta.pro industry code is FSAMALAD, 3D Secure, Authentication & Access Control, with a secondary code of BPAMAEAE, Authentication (MFA/Passwordless/Biometrics) Platforms. Its NAICS code is 522320 and its SIC code is 7372.