RCDevs
RCDevs Security SA is a Luxembourg-based cybersecurity company providing enterprise identity and access management solutions, including multi-factor authentication, single sign-on, SSH key management, and network access control, serving over 900 organizations across more than 60 countries.
- Company typePrivate
- Founded2005
- HeadquartersEsch-sur-alzette, Luxembourg
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What RCDevs does
RCDevs Security SA is a Luxembourg-incorporated, privately-held cybersecurity vendor founded in 2005 and headquartered in Esch-sur-Alzette, with a secondary office in San Francisco. The company builds an enterprise identity and access management (IAM) platform anchored by three core products: OpenOTP Security Suite (a multi-factor authentication server supporting FIDO2/passkeys, push, OTP, hardware tokens, and PKI), WebADM (a centralized IAM console for AD/LDAP user management with policy enforcement and AI-powered activity reporting), and SpanKey (an SSH key lifecycle and privileged access management server for Unix/Linux environments). The stack is built on LDAP/RADIUS foundations with native integrations to Microsoft Entra ID, Okta, Google, Ping Identity, One Identity, Salesforce, DUO, and the major enterprise VPN platforms (Cisco, Palo Alto, F5, Juniper, Checkpoint, OpenVPN), and is deployable on-premise or as a cloud/SaaS subscription.
The company monetizes through a hybrid model combining perpetual and subscription software licensing for OpenOTP and SpanKey (including a bundled on-premise offering), Cloud/SaaS subscriptions, hardware token sales (RC200 and RC400 lines priced at €142.50–€4,312.50 per pack), accessories such as YumiSign card readers and CardContact HSMs, annual support and maintenance contracts, and professional services. Go-to-market mixes direct enterprise field sales (with PoC-led cycles), a self-serve online shop, a multi-tenant MSSP partner program, and product-led freeware/free-trial acquisition. RCDevs reports 900+ clients across 60+ countries and 1M+ end users, with named reference customers including Engie, BNP Paribas, Orange, Verizon, Oracle, and Salesforce.
The vendor's strategic posture is that of a focused, infrastructure-grade IAM specialist competing against hyperscaler identity stacks (notably Microsoft Entra ID) by emphasizing on-premise deployment, regulatory alignment (NIS2, PSD2, GDPR), hybrid AD/cloud synchronization, and depth of legacy system coverage.
RCDevs firmographics
Firmographics- Name
- RCDevs
- Legal name
- RCDevs Security SA
- Website
- https://rcdevs.com
- Company type
- Private
- Founded year
- 2005
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- RCDevs Security SA is a Luxembourg-based cybersecurity company providing enterprise identity and access management solutions, including multi-factor authentication, single sign-on, SSH key management, and network access control, serving over 900 organizations across more than 60 countries.
- Ownership category
- akta.pro rank
RCDevs industry classification
Industry- Product category
- Identity and Access Management (IAM) Software
- NAICS
- Custom Computer Programming Services (541511), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Programming Services (7371)
- akta.pro primary industry
- Directory Services & Identity Data Platforms (BPAMAEAG)
- akta.pro secondary industries
- Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers) (HDAEAJAB), Directory Services & Identity Stores (LDAP/AD, Cloud Directory) (HDAEAJAA)
Keywords
Where RCDevs is headquartered
LocationHeadquarters
- HQ city
- Esch-sur-alzette
- HQ country
- Luxembourg
- HQ region
- Europe
Offices2 records
Markets served
RCDevs business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure, Supply Chain
Revenue model
- Software Licenses: OpenOTP Security Suite and SpanKey sold as enterprise software with both subscription (Annual) and perpetual license options. Enterprise editions include various license tiers based on user count and features.
- Cloud/SaaS Subscriptions: OpenOTP Cloud and SaaS editions offered as subscription-based services with per-user or tiered pricing.
- Hardware Tokens: RC200 and RC400 hardware token sales in various pack sizes. RC200 supports multiple protocol standards, RC400 features e-Paper display in credit-card form factor.
- Accessories and Add-ons: YumiSign Card Readers for iOS/Android, CardContact HSM modules for hardware cryptography, and related security accessories.
- Support and Maintenance: Annual support and maintenance agreements for enterprise customers including software updates, technical support, and SLA guarantees.
- Professional Services: Consultancy services for implementation, deployment, and integration of RCDevs security solutions.
- Bundled Offerings: OpenOTP/SpanKey On-Premise bundles offering combined licensing for both products at discounted pricing.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | OpenOTP Cloud/SaaS Edition |
| One time/ perpetual license | Multi-year contract | OpenOTP On-Premise Enterprise Edition |
| One time/ perpetual license | Multi-year contract | SpanKey On-Premise Edition |
| Hybrid | Multi-year contract | OpenOTP/SpanKey Bundle |
| Unit Pricing | Pay-as-you-go | RC200 Hardware Tokens |
| Unit Pricing | Pay-as-you-go | RC400 Hardware Tokens |
| Unit Pricing | Pay-as-you-go | YumiSign Card Reader |
| Unit Pricing | Pay-as-you-go | CardContact HSM |
Go-to-market motion4 records
Distribution channels6 records
Marketing channels9 records
RCDevs product offering
Product offeringCore offering
RCDevs develops and sells the OpenOTP Security Suite, an enterprise multi-factor authentication and identity & access management (IAM) platform that centralizes user authentication, policy enforcement, and access governance across on-premise and hybrid Active Directory/LDAP environments. The platform is complemented by WebADM (central IAM console), SpanKey (SSH key and privileged access management), the OpenOTP Token mobile app, and physical hardware tokens (RC200, RC400), and is sold to large enterprises and managed security service providers via subscriptions, perpetual licenses, hardware sales, and professional services.
Product overview
RCDevs Security offers a unified IAM platform centered on the OpenOTP Security Suite, which provides multi-factor authentication, policy enforcement, and access control as a comprehensive on-premise or cloud solution. The core platform is complemented by SpanKey for SSH key management on Unix/Linux servers, WebADM as the central IAM console for AD/LDAP user management, and the RCDevs Mobile Push Token app for mobile authentication. Hardware offerings include RC200 and RC400 OTP tokens, while specialized modules extend capabilities into RADIUS Bridge integration, LDAP proxy for legacy systems, Federation Services (SAML/OpenID SSO), Web Plugins for third-party application integration, OpenVPN-MFA appliance, WAProxy reverse proxy, Electronic Signature for PSD2 transactions, and Network Access Control. The portfolio supports deployment in hybrid environments with native integrations to Entra ID, Okta, Google, Ping Identity, DUO, One Identity, and Salesforce identity providers.
Differentiator
Problem solved
Functional benefit
Brands
- OpenOTP Security Suite: Comprehensive MFA server and security suite product line including authentication, SSO, and identity management capabilities.
- SpanKey
- WebADM
- OpenOTP Token
Products and services
- OpenOTP Security Suite Comprehensive multi-factor authentication and identity & access management suite providing MFA, policy enforcement, and access control across on-premise and hybrid environments. Supports FIDO2/passkeys, push notifications, OTP, hardware tokens, and PKI for VPNs, cloud applications, legacy systems, and Windows/RDS environments.
- OpenOTP MFA Server Central MFA server that handles authentication requests across multiple platforms and integration methods. Supports OTP, FIDO2/Passkeys, push notifications, YubiKeys, PKI certificates, and Magic Links for Windows logins, VPN, cloud apps, and legacy systems.
- WebADM Core Identity and Access Management console providing centralized management of AD/LDAP users with granular IAM controls, defining access by application, domain, group, or user. Includes AI-powered activity reports (v2.4) and supports conditional, presence-based, and agreement-based access.
- OpenOTP Cloud / SaaS Edition Cloud-hosted version of the OpenOTP Security Suite for organizations preferring SaaS deployment with subscription-based licensing.
- OpenOTP On-Premise Enterprise Edition On-premise deployed version of the OpenOTP Security Suite with enterprise perpetual or annual subscription licensing and annual support/maintenance.
- SpanKey SSH Access Server Central SSH key management solution for Unix/Linux servers that stores and maintains SSH keys securely in Active Directory, eliminating distributed keys on individual servers and enabling privileged access management for Linux/SSH.
- SpanKey On-Premise Enterprise Edition On-premise deployed version of SpanKey SSH access server with enterprise perpetual or subscription licensing and support/maintenance.
- OpenOTP / SpanKey On-Premise Bundle Combined bundled offering of OpenOTP Security Suite and SpanKey for organizations implementing both MFA and SSH key management under one license.
- RCDevs Mobile Push Token (OpenOTP Token App) Mobile application for iOS and Android that provides Push Login, regular OTPs, anti-phishing, mobile badging, geo-mapping, and e-signature capabilities for use with OpenOTP.
- RC200 Hardware Tokens Physical OATH hardware tokens for use with the OpenOTP Security Suite. Available in packs of 10 to 250 tokens, supporting multiple protocol standards and bundled with an OpenOTP Inventory file for registration.
- RC400 Hardware Tokens E-Paper display OTP token card thinner than 1mm and credit-card sized. ISO-7810-ID01 compliant with over 5-year lifecycle depending on usage.
- RADIUS Bridge RADIUS RFC-2864 API implementation for the OpenOTP Server enabling integration with Microsoft reverse-proxies, VPNs, Citrix, VMware, and other RADIUS-based products.
- LDProxy (MFA over Legacy LDAP) Enables MFA integration with third-party products and systems that only support LDAP as the authentication backend, allowing legacy LDAP-only systems to adopt multi-factor authentication.
- OpenOTP Electronic Signature Mobile e-signatures, seals, and approvals of documents via simple APIs, enabling PSD2-compliant secure banking transactions and general document signing.
- Federation Services (SSO, SAML, OpenID Connect) Standalone identity provider capability of OpenOTP supporting SAML 2.0 and OpenID Connect to implement MFA-secured single sign-on for cloud and SaaS applications.
- OpenVPN-MFA Appliance Pre-configured appliance for implementing multi-factor authentication on all OpenVPN variants to secure VPN access.
- YumiSign Card Reader for iOS & Android Smartcard reader hardware for electronic signing on iOS and Android mobile devices. Supports Apple Lightning and USB Type-C connections; works with eIDAS signature devices including European identity cards and LuxTrust dongles.
- CardContact HSM Hardware Security Module providing AES encryption for token seeds and True Random Number Generation for SMS/Email OTPs, OCRA challenges, and OTP lists. Sold in 1 HSM or 2 HSM packages.
Quantifiable outcome
- Successfully installed and integrated by hundreds of companies without requiring additional assistance
- +1 more outcomes
Companies that use RCDevs
Customer profileNamed customers6 records
Segments4 records
Ideal customer profiles2 records
RCDevs technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration25 records
AI capability1 record
Feature11 records
RCDevs partnerships and signals
Strategic signalPartnerships
21 partnerships are on record, tiered core and secondary.
- MicrosoftcoreDeep integration with Microsoft ecosystem including Active Directory, Entra ID (Azure AD), ADFS, Microsoft Exchange, SharePoint, and Microsoft reverse-proxies. OpenOTP MFA server integrates natively with Microsoft identity platforms.
- OktacoreNative integration with Okta identity provider for seamless SSO and MFA in hybrid cloud environments.
- GooglecoreNative integration with Google identity services for authentication and SSO capabilities.
- Ping IdentitycoreNative integration with Ping Identity for enterprise identity management and federation.
- One IdentitycoreNative integration with One Identity (Quest Software) identity management solutions.
- SalesforcecoreNative integration with Salesforce for securing CRM access with MFA and SSO.
- DUO SecuritycoreIntegration with DUO Security for complementary MFA capabilities in enterprise environments.
- YubiKeycoreFull support for YubiKey hardware tokens with multi-protocol support (Standard and Nano) for strong authentication.
- OpenVPNcoreOpenVPN-MFA appliance for securing VPN access. Integration supports all OpenVPN variants.
- CheckPointsecondaryMFA integration for CheckPoint VPN solutions.
- CiscosecondaryMFA integration for Cisco VPN and network security solutions.
- Juniper NetworkssecondaryMFA integration for Juniper VPN and network solutions.
- F5 NetworkssecondaryMFA integration for F5 BIG-IP VPN and access solutions.
- Palo Alto NetworkssecondaryMFA integration for Palo Alto Networks VPN and security platforms.
- CitrixcoreMFA solution for Citrix environments securing remote access to corporate applications and sensitive resources.
- VMwarecoreMFA integration for VMware environments including virtualized infrastructure access.
- DockersecondaryOfficial Docker container images available through Docker Hub for containerized deployment of RCDevs products.
- VMware (Virtual Appliances)secondaryPre-configured virtual appliances for VMware environments enabling rapid deployment.
- CardContactsecondaryHardware Security Module (HSM) partner providing AES encryption and True Random Number Generation for token seeds and OTP generation.
- NextcloudsecondaryMFA web plugins available for Nextcloud and similar open-source platforms including SimpleSAML.
- SugarCRMsecondaryMFA integration for SugarCRM cloud applications and platforms.
Scale indicators4 records
Recent moves6 records
Expansion highlights7 records
RCDevs competitors and assessment
Company assessmentBroad incumbents
- Microsoft Entra ID: Microsoft Entra ID (formerly Azure AD) provides SSO, MFA, and identity governance natively across the Microsoft ecosystem. RCDevs explicitly positions against Entra ID tiers and complements it via Entra ID MFA gap-filling, but Entra ID is the default for many enterprises.
- Okta: Okta is a leading cloud-native identity platform offering SSO, MFA, lifecycle management, and adaptive authentication. RCDevs integrates with Okta and competes for enterprise MFA/SSO budgets, though Okta operates at vastly greater scale.
- RSA Security: RSA is a long-established MFA and identity vendor, historically dominant with SecurID hardware tokens. RCDevs overlaps with RSA in enterprise MFA, hardware tokens (RC200/RC400 vs. SecurID), and regulated-industry deployments.
- Ping Identity: Ping Identity provides enterprise SSO, MFA, and identity federation. RCDevs has a native integration with Ping Identity and overlaps in federation/SAML/OIDC capabilities for large regulated enterprises.
- CyberArk: CyberArk is the leader in privileged access management (PAM). RCDevs's SpanKey competes at the SSH key management / Linux PAM layer, and together they address the broader privileged-access stack.
- Fortinet (FortiAuthenticator): Fortinet offers FortiAuthenticator for MFA, SSO, and identity management as part of its broader security fabric. RCDevs competes for MFA on Fortinet-protected environments and integrates at the network access layer.
Emerging players
- Keycloak: Keycloak is an open-source IAM and SSO platform widely used by enterprises and developers. RCDevs differentiates with commercial support, on-prem appliances, and integrated MFA, but Keycloak represents a free alternative in cost-sensitive segments.
Direct peers
- DUO Security (Cisco): Duo Security is a focused MFA and secure-access vendor, now part of Cisco. RCDevs integrates with Duo for complementary MFA and competes head-to-head for enterprise MFA spend, particularly in the on-prem/hybrid deployment segment.
- One Identity (Quest Software): One Identity offers IAM, AD management, and privileged access management. RCDevs has a core integration with One Identity and competes directly in AD-centric identity governance, MFA, and privileged access for hybrid enterprise environments.
Others
- Yubico: Yubico manufactures YubiKey hardware authentication tokens. RCDevs partners with Yubico (full YubiKey support) rather than competing directly, but both sell into the strong-authentication market and overlap on FIDO2 use cases.
Market position
Strengths1 record
Weaknesses1 record
Competitive moat5 records
Key risks1 record
Key highlights7 records
Customer concentration
RCDevs social profiles
Digital presenceRCDevs financial estimates
Financial estimateRevenue estimate
Valuation estimate
RCDevs leadership team
Management profileNumber of profiles
RCDevs funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
RCDevs M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about RCDevs
What does RCDevs do?
RCDevs develops and sells the OpenOTP Security Suite, an enterprise multi-factor authentication and identity & access management (IAM) platform that centralizes user authentication, policy enforcement, and access governance across on-premise and hybrid Active Directory/LDAP environments. The platform is complemented by WebADM (central IAM console), SpanKey (SSH key and privileged access management), the OpenOTP Token mobile app, and physical hardware tokens (RC200, RC400), and is sold to large enterprises and managed security service providers via subscriptions, perpetual licenses, hardware sales, and professional services.
Is RCDevs a public or private company?
RCDevs is a private company. It is classified as unknown and is currently operating.
When was RCDevs founded?
RCDevs was founded in 2005. It employs 11 to 50 people.
Where is RCDevs based?
RCDevs is headquartered in Esch-sur-alzette, Luxembourg, in the Europe region.
How does RCDevs make money?
Seven revenue lines are on record. Software Licenses are the primary driver. The others are cloud/SaaS Subscriptions, hardware Tokens, accessories and Add-ons, support and Maintenance, professional Services and bundled Offerings.
Who are RCDevs's main competitors?
Broad incumbents on record are Microsoft Entra ID, Okta, RSA Security, Ping Identity, CyberArk and Fortinet (FortiAuthenticator). Keycloak is listed as an emerging player. Direct peers are DUO Security (Cisco) and One Identity (Quest Software). Yubico is listed as an others.
Does RCDevs have an API?
Yes. RCDevs provides APIs and SDKs designed to let programmers easily implement OTP and FIDO2 authentication. SDKs are available for C, C++, Java, and Web languages. APIs are used for integrating MFA capabilities into applications and for enabling electronic signatures via simple APIs. Developer documentation is at docs.rcdevs.com.
What industry is RCDevs in?
RCDevs's product category is Identity and Access Management (IAM) Software. Its primary akta.pro industry code is BPAMAEAG, Directory Services & Identity Data Platforms, with a secondary code of HDAEAJAB, Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers). Its NAICS code is 541511 and its SIC code is 7372.