MFA & Passkeys Platform

ekShield

A single MFA platform delivering passkeys, soft tokens, biometrics, and step-up authentication across every banking channel. Built for FIDO certification. Live at UAE’s 3rd largest bank, white-labelled as the bank’s own product.

What ekShield Delivers

Real-Time Malware Session Suspension
CBUAE mandates that banking sessions be suspended when malware or screen-sharing is detected. ekShield integrates natively with RASP SDK to enforce this — automatically, in real time, without requiring manual intervention.
Soft Tokens & Biometrics
App-based TOTP and biometric authentication — fingerprint and face — tightly bound to the customer’s enrolled device. Eliminates OTP interception at source. Supports step-down gracefully for devices that don’t support biometrics.
Omnichannel Coverage
Most MFA platforms cover mobile and web only. ekShield also covers call centre (IVR/USSD), ATM, and 3DS card payments — from the same platform, with the same underlying credential. A single platform that closes all channel gaps.
Contextual Step-Up Authentication
Risk-triggered challenges for high-value transactions, new device registration, account limit changes, and beneficiary additions. Challenge the customer only when the risk warrants it — not on every login.
Passkeys (FIDO2)

Phishing-resistant, device-bound credentials that cannot be intercepted, shared, or stolen via SIM swap. The mandated successor to SMS OTP across CBUAE, RBI, SAMA, and BSP frameworks. ekShield is FIDO-certified.

White-Label Ready
Fully brandable. The authentication experience carries the bank’s name and identity — not Ektar’s. UAE’s 3rd largest bank deployed ekShield and branded it as their own product end-to-end.
ekShield happens over REST API.

Integration

ekShield integrates via REST API. Supports iOS and Android mobile SDK. IVR/USSD integration for call centre. 3DS integration for card payment authentication. Typical deployment timeline: 6–10 weeks to first go-live. No change required to the bank’s core banking system.

Proven in Production

Live Deployments

UAE's 3rd largest bank

Deployed ekShield and white-labelled it as their own branded authentication product, independently extending it to corporate banking cards and transactions. A bank putting their name on a vendor’s product is the strongest possible signal of institutional confidence. RASP SDK is also live at the same institution.

3rd largest bank in the Sultanate of Oman

Contracted for ekShield MFA. Ektar’s first major Oman deployment and a regional reference for GCC expansion.

Get Started Today

Authentication Solution Overview

This page explains the problem, what the regulation requires, and how Ektar solves it.