Duo Security

Duo Security is a provider of multi-factor authentication and secure access solutions, now operating as a division of Cisco Systems. Founded in Ann Arbor, Michigan, the company's technology is designed to verify user identities and secure access to applications for organizations of all sizes. Its platform helps enterprises adopt a zero trust security model by ensuring only trusted users and devices can access corporate resources.

History

The company was founded in 2009 by Dug Song and Jon Oberheide, who met while studying at the University of Michigan. Initial development was supported by the university's TechArb student startup accelerator. The founders focused on combating the rising threat of credential theft and phishing attacks, launching one of the first cloud-based multi-factor authentication services. Significant early growth was fueled by adoption within the higher education sector and technology companies. In August 2018, the networking giant Cisco Systems announced its intent to acquire the company for $2.35 billion, a deal completed that October, making it one of the largest acquisitions in Cisco's history.

Products and services

Its core offering is the Duo Beyond platform, which provides unified access control for both on-premises and cloud applications. Key products include Duo Access, a gateway for securing legacy systems and VPNs, and Duo Device Health, which checks endpoints for security posture before granting access. The service integrates with thousands of applications, including Microsoft 365, Google Workspace, and Salesforce, and supports a wide range of authentication methods. Administrators use the Duo Admin Panel for centralized policy management and detailed reporting on user access events.

Technology and security features

The platform's security is built around adaptive multi-factor authentication, which can require additional verification based on contextual risk signals like user location, device health, and network. It supports biometric verification via iOS Touch ID and Face ID, as well as universal 2nd factor security keys like YubiKey. A key innovation is its zero trust architecture, which assumes no implicit trust for any user or device, continuously verifying each access attempt. The technology also includes Duo Push, which sends a login approval request to a user's registered smartphone, and detailed telemetry collection for behavioral analytics and threat detection.

Company and acquisitions

Prior to its acquisition, the company was headquartered in Ann Arbor, Michigan, with additional offices in San Mateo, California, and London. As a standalone entity, it raised over $100 million in venture capital from investors including Benchmark Capital, Google Ventures, and Redpoint Ventures. Following the acquisition by Cisco Systems, it was integrated into Cisco's Security Business Group but continues to operate under its own brand. The acquisition was a strategic move by Cisco to bolster its zero trust and cloud security portfolio, competing more directly with rivals like Okta and Ping Identity.

Impact and industry recognition

The company significantly popularized user-friendly multi-factor authentication, moving it beyond hardware tokens to widespread adoption via smartphones. Its technology has been deployed by major organizations including the University of Michigan, Facebook, Yelp, and the National Health Service. The platform has received numerous industry awards, such as recognition from Gartner in its Magic Quadrant for Access Management and awards from SC Magazine. Its research arm, Duo Labs, has published influential reports on two-factor authentication adoption and security trends, contributing to the broader cybersecurity community.

Category:Computer security companies Category:Companies based in Ann Arbor, Michigan Category:Cisco Systems