Products — FIDO, JavaCard and IoT hardware that carries identity, not credentials
Every AmbiSecure product is rooted in a tamper-resistant Secure Element. The credential never leaves silicon — it can be used, but not stolen, replayed, or quietly cloned.
Authenticators
Phishing-resistant, hardware-bound credentials in card, USB, and tappable form factors. FIDO2 / U2F / PIV / OpenPGP. The OnePass card, bio card and USB key are part of the OnePass Platform, which adds the validation server and lifecycle management.
AmbiSecure OnePass Card
FIDO2 smart card. Resident credentials, NFC + USB, brandable, deployable as employee ID + auth in one form factor.
AmbiSecure OnePass Bio Card
Biometric FIDO2 smart card. On-card fingerprint match. No reader, no PIN entry, no shared secret.
AmbiSecure OnePass USB Key
FIDO2 hardware security key. USB-A or USB-C, no battery, durable form factor.
AmbiSecure BioKey
Biometric USB security key. Fingerprint-on-device for the highest-assurance enterprise tier.
BioKey On-Device TOTP
Hardware-sealed OATH-TOTP for BioKey. Seeds stay in the secure element; every code is fingerprint-gated. A legacy MFA extension alongside FIDO2.
AmbiSecure Tappable
NFC-only authenticator for mobile-first authentication and contactless access scenarios.
Digital Signature Token
PKI token for legally-binding digital signatures. Hardware-protected key, audit-friendly issuance.
PKCS Signature Suite
Hardware token + PKCS#11 / PKCS#15 middleware. Cross-platform integration with Acrobat, Office, Mozilla, OpenSC.
Secure Mail Suite
White-label S/MIME email signing and PDF/PKCS#7 document signing. Hardware-backed via card, PIV applet, or token.
secure-element applets
FIDO2 and PIV credentials living inside a nano-card or MFF2 secure element — for OEM device authentication, embedded identity, and systems where adding a separate token isn’t an option.
FIDO2 Nano-Card Applet
FIDO2 / CTAP2 applet on a nano-card (4FF) secure element. Hardware-backed credentials, ECC P-256, roaming or embedded operation.
PIV Nano-Card Applet
PIV-compatible applet on a nano-card secure element. Four certificate slots, RSA + ECC, FIPS 201 functional surface. Workforce and government identity.
PIV Smart Card
PIV applet on an ISO/IEC 7810 ID-1 contact + contactless smart card. Four certificate slots, RSA + ECC, Windows / macOS smart-card logon, PKCS#11 + minidriver.
PIV Bio Card
PIV applet on a biometric smart card with on-card fingerprint match. Three-factor authentication on a single ID-1 surface — have, know, are.
PIV USB Key
PIV applet in a USB-A / USB-C key form factor. CCID + WebAuthn dual interface, drop-in for SSH / VPN / smart-card login, optional PIN gate.
IoT & Applet platforms
Building blocks for OEMs — hardware roots of trust for connected devices, JavaCard applet platforms for issuers.
AmbiSEC Module — IoT Security Co-Processor
Dual-domain co-processor for connected devices. The host MCU domain runs the application; an isolated cryptographic security domain holds keys, signs, verifies, anti-replays, and authenticates every OTA image. Keys never reach application firmware.
AmbiSecure IoT Solution
End-to-end IoT security platform — chipset, key manager service, FIDO MFA for operators, attestation pipeline. The full system view.
JavaCard Applet Platform
FIDO, PIV, OpenPGP, NDEF, OpenID Connect and 7 more applets — with the GlobalPlatform loading and personalisation tooling that makes them deployable.
IoT Security Applets
Purpose-built JavaCard applets for IoT device identity — provisioning, attestation, mTLS credentials, signed firmware verification.
AmbiSecure eSIM Solution
SGP.22 / SGP.32 eUICC platform with optional OpenID Connect applet for end-user identity verification. Consumer, M2M, automotive.
Do you need a service or platform instead?
Beyond product hardware, we offer engineering services and a backend platform. Not sure which product fits your deployment? Browse solutions by use case.
JavaCard Development
Custom applet design, SCP03 loading, personalisation tooling. We have done both the standards-driven applets and the bespoke ones.
FIDO Validation Server
Production-grade WebAuthn / CTAP2 backend. Multi-factor, passwordless, deployment-ready.
Tool-Chain Development
Bio enrollment, key managers, multi-card applet loaders, NDEF personalisation tools.
Need a quote, datasheet, or sample?
Tell us your form factor, target volume, and certification needs. We will get back with a real proposal, not a brochure.