Relock develops metamorphic encryption technology that secures access and data exchange for API networks, enterprise systems, and IoT medical devices against sophisticated cyberattacks and insider threats. By implementing in-browser multi-factor authentication and real-time network visibility, Relock enables immediate detection and prevention of illegitimate access without requiring user interaction or additional hardware.
Funding
$978.7K raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Product
Problem
API networks, enterprise systems, and IoT medical devices are vulnerable to sophisticated cyberattacks and insider threats that can compromise sensitive data and disrupt operations. Traditional security measures like multi-factor authentication (MFA) and OAuth are often bypassed through phishing, session hijacking, and credential theft. Existing security solutions lack real-time visibility and control over API access, leading to delayed detection and response to impersonation attempts.
Solution
Relock provides a metamorphic encryption technology, called Active API Armour, that secures access and data exchange for APIs by implementing in-browser MFA and real-time network visibility. The solution enables immediate detection and prevention of illegitimate access without requiring user interaction or additional hardware. It goes beyond OAuth and mTLS with advanced and autonomous protection of APIs dealing with sensitive data. Relock precisely identifies API consumers down to the machine level and provides granular, real-time control of their permissions.
Target Audience
Relock targets organizations in healthcare, fintech, e-commerce, SaaS, and other industries that require secure access and data exchange for their API networks, enterprise systems, and IoT devices.
Features
- In-browser multi-factor authentication without user interaction or additional hardware
- Real-time network visibility and granular control over API access
- Active protection against impersonation attempts, detecting and disconnecting compromised traffic within minutes
- End-to-end encryption with multiple, ephemeral, unique keys for each call, ensuring perfect forward secrecy
- Automated secrets management, including generation, distribution, rotation, and revocation at each call
- Binary software or isolated container deployment alongside existing API authentication and authorization suites
- Compatibility with various API architectures without requiring changes