GrayPass provides password‑less authentication by capturing a user’s typing rhythm, cursor movements, and reaction timings to create a salted biometric vector that never leaves the browser.
Funding
Funding not disclosed
Founders
Product
Problem
Web applications rely on passwords, OTPs, or stored biometric data, which can be stolen, phished, or replayed, leading to credential theft and unauthorized access. Additionally, bots and automated scripts can bypass traditional authentication mechanisms, increasing fraud risk.
Solution
GrayPass replaces secret‑based credentials with a behavioral biometric that captures a user’s typing rhythm, cursor movements, and reaction timings during a short, in‑browser challenge. The raw interaction data is processed locally, collapsed into a salted vector, and only an encrypted print is stored, ensuring that no raw biometrics ever leave the client. Verification of this print occurs in under 200 ms, allowing real‑time accept/deny decisions without exposing any reusable secret. Because the authentication relies on human timing patterns, automated scripts and bots cannot reproduce the required rhythm, providing strong protection against automated attacks.
Target Audience
Primary customers are SaaS platforms, fintech applications, and enterprise web services that require strong, password‑less authentication for end‑users while protecting against credential theft and bot abuse.
Features
- In‑browser capture of typing cadence, mouse dynamics, and reaction timing with no server‑side storage of raw data
- Local processing that generates a salted, encrypted biometric vector, ensuring zero exposure of raw behavior
- Sub‑200 ms verification latency for instant authentication decisions
- Server‑driven, jittered challenges that prevent macro or script replay attacks
- Optional webcam‑based gaze tracking to augment the behavioral profile
- Simple pay‑per‑session pricing model with self‑serve provisioning and instant activation