What Specops Software does

Specops Software is a privately held cybersecurity company specializing in Active Directory password security and broader identity and access management, operating as a subsidiary of Swedish cybersecurity firm Outpost24. The platform is built natively around Microsoft Active Directory and extends into Entra ID and hybrid on-premises/cloud identity environments, with a portfolio of core products including Specops Password Policy (continuous blocking of more than 6 billion compromised credentials with compliance mapping to NIST, CJIS, NCSC, ANSSI, CNIL, HITRUST, and PCI), Specops uReset (self-service password reset integrating with 20+ identity providers), Specops Secure Access (MFA for Windows logon, RDP, VPN, and SaaS via OpenID Connect/SAML), Specops Secure Service Desk (caller identity verification against social engineering), Specops Device Trust (zero-trust continuous device posture verification, built on the 2024 Infinipoint acquisition), and Specops Verified ID (AI-powered government-ID scanning with biometric liveness detection covering 16,000+ documents across 254 countries). Add-on modules extend into BitLocker/Symantec key recovery, password expiration notifications, password synchronization, SSO, secure new-hire onboarding (First Day Password, Secure Onboarding), and AD utilities (Deploy, Inventory, GPUpdate, Janitor). External Attack Surface Management is offered through parent Outpost24's CREST-accredited offensive security team.

Underlying technology consists of a proprietary breached-password database refreshed daily, AI/ML-driven document and biometric analysis pipelines, a Specops Authentication framework that brokers dozens of MFA factors and identity services (Duo, Okta, PingID, Symantec VIP, Yubico, Microsoft/Google Authenticator, Passkeys, RSA SecurID, Freja, Specops:ID, fingerprint, secret questions, trusted-network, mobile codes, Windows Identity), and an Event API for SIEM/SOC telemetry plus ITSM integrations with ServiceNow and Jira. The product surface is sold via direct enterprise field sales with quote-based annual subscriptions, a global channel partner program with tight integrations to Symantec/Broadcom, Duo/Cisco, and Yubico, and product-led growth through a free Specops Password Auditor tool. Healthcare (NHS trusts, hospitals) and local government (UK councils, Danish municipalities) are the primary verticals, with additional pursuit of banking, insurance, manufacturing, and critical infrastructure; the company cites thousands of customers globally and healthcare-vertical ROI of 209–364% based on helpdesk-cost avoidance. Operations run under ISO 27001, SOC 2 Type II, and UK Cyber Essentials certifications, and the company is actively shipping new product lines (Secure Onboarding, 2026) into AI-impersonation and identity-assurance use cases.

Name

Specops Software

Legal name

Specops Software

Website

https://specopssoft.com

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

11–50 employees

Short description

Specops Software is a privately held identity and access management vendor delivering Active Directory-integrated password security, multi-factor authentication, service desk verification, biometric ID checks, and zero-trust device authentication to thousands of enterprise and public-sector customers worldwide, with healthcare and government as primary verticals.

Ownership category

akta.pro rank

Product category

Identity and Access Management Software

NAICS

Software Publishers (5132), Computer Systems Design and Related Services (5415)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming Services (7371)

akta.pro primary industry

Cloud Identity & Access Management Infrastructure (IAM/IdP/MFA) (HDABAHAF)

akta.pro secondary industries

User Lifecycle Provisioning & SCIM Automation (HDAEAJAK), Directory Services & Identity Stores (LDAP/AD, Cloud Directory) (HDAEAJAA), Hybrid Cloud Security, Identity & Policy Enforcement (HDABAMAC)

Keywords

• Active Directory security
• Password policy enforcement
• Multi-factor authentication
• Identity verification
• Breached password protection

Headquarters

HQ city

Stockholm

HQ country

Sweden

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Subscription Licensing: Annual or multi-year subscription licensing model for enterprise customers requiring Active Directory password policy enforcement, MFA, and identity verification solutions. Pricing is quote-based and tailored to organization needs.
2. Freemium Password Auditor: Free password auditing tool distributed to generate leads for paid enterprise products. Free tool scans AD for password vulnerabilities; paid products block breached passwords and enforce policies.

Pricing tiers

Go-to-market motion3 records

Distribution channels2 records

Marketing channels8 records

Core offering

Specops Software develops and sells an integrated Identity and Access Management (IAM) suite built around Microsoft Active Directory, including breached password policy enforcement (Specops Password Policy), self-service password reset (Specops uReset), multi-factor authentication (Specops Secure Access), service desk caller verification (Specops Secure Service Desk), zero-trust device authentication (Specops Device Trust), and AI-powered identity verification (Specops Verified ID). The portfolio is sold to enterprise customers via subscription licensing and supported by a freemium password auditing tool.

Product overview

Specops Software offers an integrated Identity and Access Management (IAM) suite built for the AI era, with products centered on Active Directory password security and multi-factor authentication. The core portfolio includes Specops Password Policy for breached password blocking and compliance enforcement, Specops Password Auditor (free tool) for AD vulnerability scanning, Specops uReset for self-service password reset, Specops Secure Access for MFA at Windows logon/VPN/RDP, Specops Secure Service Desk for service desk caller verification, Specops Device Trust for zero-trust device authentication, and Specops Verified ID for government ID/biometric verification. Add-on modules include First Day Password for secure new hire onboarding, Key Recovery for BitLocker/Symantec encryption recovery, Password Notification for expiration alerts, Password Sync for cross-system credential synchronization, and Single Sign-On for SaaS application access. Desktop management utilities (Deploy, Inventory, Command, GPUpdate) extend into endpoint software deployment and AD maintenance. External Attack Surface Management, delivered through parent company Outpost24, provides attack surface discovery and monitoring. All authentication products share a common Specops Authentication framework with support for over 20 identity provider integrations.

Differentiator

Problem solved

Functional benefit

Brands

• Specops Password Policy: Active Directory password policy enforcement that blocks compromised passwords and enforces compliance requirements.
• Specops Password Auditor
• Specops uReset
• Specops Secure Access
• Specops Secure Service Desk
• Specops Device Trust
• Specops Verified ID
• First Day Password
• Specops Secure Onboarding
• Specops AD Security Assessment
• External Attack Surface Management (EASM)

Products and services

• Specops Password Policy Active Directory password policy enforcement solution that continuously blocks over 6 billion compromised passwords and helps users create stronger passwords with dynamic client feedback. Simplifies compliance with NIST, CJIS, NCSC, ANSSI, CNIL, HITRUST, and PCI.
• Specops Password Auditor Free read-only password auditing tool that scans Active Directory for password-related vulnerabilities. Checks user accounts and passwords against billions of vulnerable passwords and generates interactive compliance and risk reports.
• Specops uReset Self-service password reset (SSPR) solution enabling users to securely reset Active Directory or Entra ID passwords from any location, device, or browser—whether on or off VPN. Updates local cached credentials and integrates with over 20 identity providers.
• Specops Secure Access Multi-factor authentication (MFA) solution adding security layers to Windows logon, RDP, VPN, and RADIUS connections. Includes SSO support for SaaS applications via OpenID Connect and SAML, with offline authentication via OTP or YubiKey.
• Specops Secure Service Desk Help desk identity verification solution enforcing caller identity verification to prevent social engineering attacks. Integrates with ServiceNow, Jira, and other ITSM platforms via API. Supports over 15 MFA factors without requiring end-user enrollment.
• Specops Device Trust Zero-trust workforce access solution authenticating and verifying users and devices at every access point, continuously throughout every session. Binds user identities to trusted devices and performs continuous posture checks for active threats, disabled security controls, or outdated software.
• Specops Verified ID Identity verification add-on using AI-powered government-issued ID scanning and biometric liveness detection to secure employee onboarding, service desk calls, and password resets against AI-generated deepfakes and impersonation attacks. Supports 16,000+ identity documents across 254 countries.
• First Day Password Add-on for Specops uReset that enables new hires to verify their identity and securely set their own first AD password, eliminating shared temporary credentials. Supports government ID verification and biometric liveness detection when combined with Specops Verified ID.
• AD Security Assessment Fixed-price expert-led security assessment identifying password policy weaknesses and Active Directory misconfigurations. Includes password policy check, manual penetration testing from standard user account posture, and deliverable report with risk-rated findings and remediation guidance. Delivered by Outpost24's Certified Offensive Security Team.
• External Attack Surface Management (EASM) Cloud-based platform providing real-time discovery, analysis, and monitoring of external attack surface. Uses AI-driven analysis to identify vulnerabilities and attack paths across all internet-facing assets. Offered through parent company Outpost24.
• Specops Secure Onboarding Employee onboarding solution that verifies new hire identity before access begins, blocking AI impersonation. Replaces assumed identity with verified identity across first-password setup, access, and service-desk support.

Quantifiable outcome

• 209-364% ROI for healthcare customers
• +3 more outcomes

Named customers8 records

Segments6 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration20 records

AI capability6 records

Feature7 records

Partnerships

Four partnerships are on record, tiered core.

• Symantec (Broadcom)coreTechnology or IntegrationSymantec VIP is tightly integrated with Specops uReset to secure password resets and account unlocks through self-service or at the IT service desk. Users authenticate with Symantec VIP to prove identity before password reset. After reset, uReset automatically updates expired credentials on endpoints so disconnected remote users can immediately log in with their new password.
• Duo Security (Cisco)coreTechnology or IntegrationSpecops Authentication's integration with Duo Security extends Duo's modern access two-factor authentication to reduce end-user adoption barriers that can limit self-service solution success, while extending authentication investment to secure the IT service desk channel.
• YubicocoreTechnology or IntegrationSpecops Authentication enables organizations using YubiKey to extend this multi-factor method to secure password resets, changes, and account unlocks. Users are automatically enrolled into Specops Authentication while extending ROI of existing YubiKey credentials.
• Outpost24coreOthersSpecops Software is a subsidiary of Outpost24, a CREST-accredited offensive security provider operating globally. The AD Security Assessment is delivered by Outpost24's Certified Offensive Security Team. Outpost24 also provides the External Attack Surface Management (EASM) solution through the Specops platform.

Scale indicators6 records

Recent moves5 records

Expansion highlights6 records

Emerging players

• HYPR: HYPR is a passwordless MFA specialist focused on phishing-resistant authentication. It is an emerging alternative to Specops' MFA stack, particularly for enterprises pursuing true passwordless, FIDO2/passkey-first strategies beyond AD-bound credentials.

Direct peers

• Duo Security (Cisco): Duo is a leading MFA and zero-trust access vendor, owned by Cisco. It competes head-on with Specops Secure Access for Windows logon, VPN, and RDP MFA, and is simultaneously a deep integration partner via Specops uReset, making it a direct peer on product and a partner in market positioning.
• ManageEngine (Zoho): ManageEngine's ADManager Plus and Password Manager Pro directly compete with Specops Password Policy, uReset, and AD Auditor capabilities at the mid-market level. Comparable on target customers (AD-dependent enterprises) and price-sensitive verticals.

Broad incumbents

• BeyondTrust: BeyondTrust is a private identity security vendor covering privileged access, MFA, and AD auditing. Comparable to Specops for AD-integrated credential security and password management workflows, but with a wider PAM focus and broader enterprise footprint.
• Microsoft (Entra ID / Azure AD): Microsoft Entra ID is the native IAM platform for Microsoft 365 and Azure ecosystems. Specops' AD-centric products either complement or compete with Entra ID's built-in MFA, SSPR, identity protection, and passwordless capabilities, making Microsoft both the primary ecosystem anchor and the principal competitive threat.
• Okta: Okta is the leading cloud-native identity platform covering SSO, MFA, and identity governance. It is a direct competitor in MFA (e.g., Okta Verify) and an integration partner for Specops; many Specops customers run Okta alongside Specops for AD-integrated password security.
• CyberArk: CyberArk is a publicly traded leader in identity security and privileged access management. It overlaps with Specops on AD-integrated credential protection, MFA, and identity verification, but operates as a broad incumbent portfolio spanning PAM, secrets management, and workforce/consumer IAM.
• Delinea (formerly Thycotic + Centrify): Delinea combines Centrify's AD-integrated privileged access with Thycotic's vaulting capabilities. It directly overlaps with Specops on AD password policy enforcement, MFA, and privileged credential security, especially in legacy enterprise accounts.
• One Identity (Quest): One Identity offers identity governance, AD administration, and privileged access management. Comparable to Specops around AD-centric password policy, user lifecycle, and AD administration utilities (e.g., AD Janitor equivalent).

Others

• Yubico: Yubico is a hardware authentication key vendor and a Specops integration partner for YubiKey-based password reset and MFA. Comparable as an adjacent identity-security provider in the broader MFA stack, with significant overlap in enterprise phishing-resistant use cases.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/@specopssoft
• LinkedInlinkedin.com/company/specops-software
• Xx.com/specopssoftware
• Facebookfacebook.com/specopssoftware

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Specops Software