SecurEnvoy is a UK company that verifies who is logging in, decides what they can reach and finds the sensitive data they handle. It serves organisations that need multi-factor authentication and single sign-on in front of VPNs, Windows logons and cloud apps, including those running on-premises or in air-gapped networks.
Its focus is the workforce: employees and contractors who need strong but simple logons, and the IT teams who have to secure a mix of old and new systems from one place.
At A Glance
| Vendor | SecurEnvoy Ltd, part of Shearwater Group plc |
|---|---|
| Category | Workforce IAM |
| Identities covered | Employees and other users, their devices and the data they hold |
| Deployment | Public SaaS, managed service provider, on-premises, private cloud, hybrid |
| Customers | Thousands of reported customers |
| Founded | 2003 |
| Market classification | Workforce IAM |
What SecurEnvoy Does
Most organisations protect logons, applications and data with separate tools and separate policies. SecurEnvoy links the three steps under one vendor: authentication proves a user is who they claim to be, policy then limits which applications that user can open, and data scanning shows where sensitive files sit so they can be secured. Customers can start with stronger logons on the systems they already run and add central access control or data discovery later, without replacing what is in place.
Products
Access Management
Access Management gives IT teams one place to authenticate users and control access to cloud, web and local applications.
- MFA with “Fido2, Passwordless, biometric and OTP logins”
- Conditional access by user role, device, application, time and location
- Impossible travel detection, automatic lockout and failover between authentication methods
- Risk-based authentication, credential reset, threat monitoring and brute-force protection
- SSO over SAML 2.0, OAuth 2.0 and OpenID Connect, and WS-Federation
- A Universal Directory for central user management
- Self-service password reset through SecurPassword, so users recover their own accounts without a helpdesk call
Multi-Factor Authentication
The MFA product adds a second factor to VPN, remote desktop, web portal, public cloud app and server or workstation logons. Users pick the device for each method: push notifications with optional biometric approval, mobile apps, hardware tokens, real-time SMS, biometrics or smart cards. It scales from 10 to more than 500,000 users.
Windows Login Agent
Organisations that need MFA on laptops, desktops, servers and VDI use the Windows Login Agent. It covers online, offline and out-of-band logons and keeps working fully offline after one initial online connection.
Data Discovery
Data Discovery helps privacy and compliance teams find personal and regulated data before it becomes a breach. It scans with preset and custom search patterns, has rules for GDPR, PCI and HIPAA, and reads text inside scanned documents and images with OCR. Findings can be reviewed, classified, quarantined, deleted or secured, and data owners receive real-time email alerts alongside dashboards and executive reports.
How It Works
Access Management can be used as public SaaS run by SecurEnvoy, through a managed service provider, on-premises in the customer’s data centre or in a private cloud, and hybrid environments are supported. The MFA product runs on-premises, which suits air-gapped sites, in a private cloud, hosted on AWS or Azure, or as a fully managed cloud service.
Systems connect to the authentication service through a small set of components: the Windows Login Agent on endpoints and servers, an IIS Server Agent for IIS web applications, RADIUS for legacy applications and traditional VPNs, and a REST API for custom integrations.
Data Discovery runs on-premises, in the cloud or hybrid, with scans scheduled from near-real-time monitoring to daily, weekly or on demand.
Identities And Systems Covered
| Human users | Employees, contractors and other users signing in with MFA, passwordless or FIDO2 methods. |
|---|---|
| Devices | Laptops, desktops, servers and VDI. |
| Directories | Microsoft Active Directory, other LDAP directories and the SecurEnvoy Universal Directory. |
| Applications | Cloud, web and local enterprise applications, Microsoft 365, VPNs, RDP and Citrix. |
| Data | Structured and unstructured data in more than 100 file formats, including SharePoint Online, Google Workspace, Atlassian Confluence, Jira, Bitbucket and Alfresco. |
Company Background
| Registered office | London, United Kingdom |
|---|---|
| Ownership | Acquired in 2017 by Shearwater Group plc, which is listed on the London Stock Exchange. |
| Leadership | Steve Watts, CEO; Phil Underwood, CIO; Adam Bruce, Chief Revenue Officer. |
| Recognition | Queen’s Award for Innovation (2011) and Queen’s Award for International Trade (2014). |
Note: This overview is compiled from SecurEnvoy’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.