Disclaimer:

These links are provided as a free service to those seeking commercial information security products or shareware tools. The fact that a product is listed here is not an indication that Timberline Technologies LLC has evaluated it nor that we recommend it. The descriptive text is generally taken from the vendor's own product literature. The buyer has the ultimate responsibility to ensure that the information security product is suitable for its intended use. Please follow the links to the vendor pages to obtain more detailed information on a particular product. Additional guidance on product selection can be found in the On-Site Security Workshops.

Vendors Please Note: If your product does not appear in this index or if you feel that it has been incorrectly categorized please contact webmaster@timberlinetechnologies.com and the error will be corrected.

Important Note to Surfers: Timberline Technologies takes strict precautions to provide "safe" links. We will not knowingly provide a link to a site with dangerous active content or questionable privacy policies. Nevertheless, we can not guarantee the safety of all links provided. Those who are concerned about browsing securely are advised to use the facilities of BeHidden, safeWeb, Anonymizer or similar service.

Product Name	Description
ARP (Ascertia)	Many popular applications (e.g. Microsoft Outlook, Internet Explorer or Word) use digital certificates and credentials to identify people for signing and encryption operations. However these credentials can become compromised or revoked over time, e.g. as a result of a role change. It's essential to validate credentials in real-time before accepting any signed transactions. But the problem is that these and other popular applications do not check if the credentials are still trustworthy at the time of, for example, opening a signed email, visiting a secure web site or verifying a signed Word document. ARP plugs this vital security gap automatically and thereby reducing your risk to fraud and liability. Furthermore ARP is seamless it requires no change to your higher level applications.
Chalace (CERIAS)	Intercept proof password authentification system that can be used over normal communications channels.
CRYPTOAdmin (CryptoCard)	Strong user authentication system.
Defender (PassGo Technologies)	Defender provides a unified, vendor neutral, authentication infrastructure capable of growing and adapting with the ever changing requirements of your business. Using standards-based challenge/response technology to create a one-time password that is far more secure than static passwords, the easy-to-use, robust tokens compute this one-time password when challenged by the Defender Security Server. Then, without the authorized user’s unique token and PIN to activate the token, potential intruders cannot compute the one-time password. Defender 5 introduces seamless integration with Microsoft® Active Directory® Leverages existing investment in Active Directory Uses existing Active Directory admin tools Centralized administration for all Defender users Migration path from other legacy security products Automated replication and backup of Defender data Multiple authentication points for load balancing and redundancy
eToken (Aladdin)	Aladdin eToken provides strong authentication and password management solutions, offering: Enhanced security and ensures safe information access; Cost-effective password management; A means to safely carry your personal digital credentials with you, wherever you go.
GUARDIAN NT Agent (DataLynx)	Automates the process of keeping account and password profiles consistent across both unix and Windows ™ environments. GUARDIAN NT Agent is a Windows NT ™ module which accepts requests from the Unix version of GUARDIAN to create, edit, delete, activate and inactivate Windows NT ™ accounts AND keep the passwords of equivalent accounts synchronized.
Kerberos (CERIAS)	Free MIT Project Athena Kerberos V4 distribution.
PassGo InSync (PassGo Technologies)	Provides enterprise password synchronization securely and quickly. PassGo InSync can be easily deployed producing immediate benefit of increased productivity through unified one-time password synchronization that can span multiple systems, servers, networks and applications.
PDF Sign&Seal (Ascertia)	PDF Sign&Seal brings enhanced digital signature and time-stamping capability to PDF documents and e-forms, with the unique benefit of not requiring full Adobe Acrobat® or Adobe Reader plus the Adobe Document Server for Reader Extension®. The standard signatures produced by PDF Sign&Seal are interoperable with the Adobe signature format, and can be verified using the freely available Adobe Reader 6.0+, therefore ensuring embedded signatures have the widest possible reach and can be verified by any recipient.
PDF Signer (Ascertia)	PDF Signer plug-in is an advanced signing solution for Adobe Acrobat and Reader, offering secure time stamping, online identity validation and inbuilt workflow capability.
PowerPassword (SyMark)	Securely deploy and manage user accounts, passwords and login policies across heterogeneous UNIX/Linux environments, while keeping a centralized audit trail of all related activities. Symark PowerPassword, User Management Edition provides much simpler and more secure user management, compared to NIS/NIS+ or LDAP environments.
PPGEN (CERIAS)	Free passphrase generation software. Generates passphrases using strings of words, long enough to have an arbitrary level of entropy. It can use any dictionary and the best available source of randomness, including PGP's cryptographic RNG if you have version 2.6.2. It is written in portable C, and it is fairly fast.
SecurID (RSA)	Two-factor authentication solution. Uses a user PIN and an authenticator code generated by the token device.
File Sign&Seal (Ascertia)	File Sign&Seal is a universal application for encrypting and signing any type of file or folder. In fact it can do much more including - file compression, digital time stamping, online identity validation and inbuilt workflow capability.
SKEY (CERIAS)	Free one-time-password software.
SRA (CERIAS)	Free RPC authentication tool developed at Texas A&M. This package provides drop in replacements for telnet and ftp client and server programs, which use Secure RPC code to provide encrypted authentication across the network, so that plaintext passwords are not used. The clients and servers negotiate the availability of SRA so that they work with unmodified versions.
WatchWord Token (Xaxus)	A hand-held personal authentication token which addresses user authentication and message or payment authentication. Two-factor access control. Token can be set to stop working if a number of incorrect PINs are entered. Users enter data in response to a series of user-definable alphanumeric prompts, allowing the token to be used in customised and multilingual applications. Each token is fully configurable and can support up to 8 users, accessing up to 16 separate applications and can store up to 78 issuer-definable prompts.
WiKID Strong Authentication System (WiKID Systems)	The WiKID Strong Authentication System is a two-factor authentication system that combines public key encryption and Internet-enabled devices to securely deliver one-time passcodes. The WiKID solution is much less expensive than a hardware-based token solution, easier to implement and maintain, and far more extensible. The WiKID Strong Authentication System is capable of allowing 100% self-service registration by the end-users, automating an onerous task. WiKID is particularly well-suited for cross-enterprise strong authentication. You can use your WiKID client for multiple log-ins across multiple companies – perfect for e-commerce, online banking or extended supply chains. The WiKID Strong Authentication server is a web-managed appliance. The WiKID client will run on Linux, Mac, Windows, Blackberry, Palm, PocketPC and J2ME.

© 2005 by Timberline Technologies LLC