Duo Security

Duo Security

User identity verification & device vulnerability discovery

4.7/5 (66 reviews)

Duo Security Overview

Duo Security is a cloud-based solution for user identity verification and device vulnerability assessment which offers multiple methods of two-factor authentication, configurable permissions and controls, endpoint visibility and remediation, Single Sign-On (SSO), and more. The Duo Trusted Access platform is designed to address possible security threats by verifying users’ identities and device health before they are allowed to connect to the organization’s applications.

Duo verifies users’ identities in a number of ways, using two-factor authentication methods including SMS passcodes, phone callbacks, hardware tokens, and one-tap authentication through push notifications from the Duo Mobile app. Administrators can configure and enforce custom access policies and controls, including blocking user logins from specific locations, such as countries the company does not do business in. Application-based controls can also be set up, allowing administrators to define different two-factor authentication requirements for access to specific systems, such as requiring two-factor authentication for every VPN login attempt, but only once a week for Outlook access.

Duo allows users to create an inventory of user devices and use this data to identify vulnerabilities posed by outdated operating systems, browsers, and Flash & Java plugins. Users can be automatically notified of outdated devices, with direct links to update to the latest software version, provided a set number of login attempts before application access is blocked, or immediately blocked from accessing applications, with permissions reinstated after the browser or plugin has been updated. For organizations where certain applications have specific browser or Flash dependencies, self-remediation policies can be set up to notify only particular users of issues with specific plugins or browsers.

Duo’s Access Gateway offers a secure web portal to give Single Sign-On (SSO) access to employees who use 10 or more cloud applications. Applications are presented on a single page, giving users visibility into all available applications. Device security health checks are carried out every time a user accesses a cloud application, and user identity is verified without the need for them to re-authenticate each time they access an application.

Pricing

Starting from
$1/month
Pricing options
Free Trial
Free
Subscription
Value for money

Devices

Business size

S
M
L

Markets

Asia, Australia, Brazil, Canada, China and 5 others, Europe, Germany, India, Japan, Latin America

Supported Languages

English, French, German

Duo Security Reviews

Overall rating
4.7/5
97% positive reviews
45
Excellent
19
Very good
2
Average
0
Poor
0
Terrible

Best Two Factor Identification App

Used Daily for 2+ years
Reviewed on 11/27/2018
Review Source: Capterra

Pros

I have used Duo for Two Factor Identification Security at two different employers so far in my career. It is such an easy to use, efficient and effective application. It eliminates the need to keep track of external network keys, passwords, and other redundant programs. I feel safe and secure with Duo Two Factor Identification because it requires both my phone and fingerprint in order to gain access to protected software.

Cons

Earlier this year I had to replace my iPhone and after I restored my new device from backup my Duo Two Vactor Identification was no longer linked. To my surprise, It took several hours to restore and reset my security settings at work the next morning. Although the Duo reset was quite inconvenient for me that day, restoring software is both an infrequent and uncommon occurrence for me.

Rating breakdown

Value for Money
Ease of Use

Likelihood to recommend

10.0/10

2FA For the Enterprise

Used Daily for 2+ years
Reviewed on 9/5/2018
Review Source: Capterra

We wanted a 2FA solution for our VPN and password management solutions. Duo integrates with both. We also needed a 2FA solution that can be used by a wide variety of users. We have many remote users so being able to authenticate via app, text, or phone call makes it easy for all of our users to gain access in a way that is secure and available to them.

Pros

Duo has made it easy for our company to use 2FA across several of our services. It's easy to implement and easy to manage. Duo integrates easily with 3rd party applications and services. Users can use multiple ways to authenticate to Duo.

Cons

Push notifications to Cellphones can be spotty if a user has poor cell reception. Not necessarily a failure on Duo's part but it should be considered if you are going to use the App Push for authentication.

Rating breakdown

Value for Money
Ease of Use
Customer Support

Likelihood to recommend

10.0/10

Best thing I ever did for securing my website

Used Daily for 2+ years
Reviewed on 10/14/2016
Review Source: Capterra

Ever since I've started using DuoSecurity to access my website admin interface, I haven't had any breaches in security and I feel safer knowing that hackers can't access my website easily.

I've been using DuoSecurity for several years now and offer it as part of my Security Packages when I launch a client's website, because it's a quick setup and for ease of mind.

I use an app on my iPhone that sends me a notification when I go to log in to my site, allowing me to "Approve" or "Disapprove" access to the site's admin interface easily. I also use it to access other accounts online that allow for a Code to be entered, giving me that piece of mind that my personal information is secure.

Highly recommended!

Pros

Security Features, Ease of Use, Apps

Cons

Their website is not easy to use because there are so many features available, which might be overwhelming to someone not familiar with it

Rating breakdown

Value for Money
Ease of Use
Customer Support

Likelihood to recommend

10.0/10

1-click for Two-Factor Authentification

Used Daily for 2+ years
Reviewed on 1/15/2019
Review Source: Capterra

Pros

I have been an end user of Duo Security for the last 2 years, and I think that this is the best software for 2-factor authentification. The Duo App has a simply designed platform. When we sign into the website that requires authentification, we can just type a passcode provided by Duo App on the website or click an authentification request given by Duo App. Yes, it is that easy with Duo.

Cons

Setting up the Duo from the scratch can be challenging to some people who are not familiar with two-factor authentification. It is important for organizations or companies to provide a step-by-step installation procedure to users before they start using Duo as their sole authentification method.

Rating breakdown

Ease of Use

Likelihood to recommend

10.0/10

Easy to use MF authentication

Used Daily for 2+ years
Reviewed on 2/6/2019
Review Source: Capterra

I have used Duo Authentication at two institutions now as a two-factor authentication means. It is very easy to use and even less tech-savvy coworkers find it easy and straight forward to use.

Pros

Once Duo is set up, it's super easy to use, whether responding to a push notification or generating a one-time use password.

Cons

When attempting to change preferences in a browser to allow it to retain your login status, you must cancel an initial automatic push from the authentication screen in a browser, check a "remember me" box, then wait some time before attempting another push. This is a security measure, but a minor annoyance when trying to quickly make a change and move on.

Rating breakdown

Ease of Use

Likelihood to recommend

8.0/10

Duo Security Pricing

Starting from
$1/month
Pricing options
Free Trial
Free
Subscription
Value for money

30-day free trial, no credit card required.

Personal - for on-premise apps; up to 10 users: free

Business - for on-premise apps: $1 per user per month

Enterprise - for on-premise and cloud apps: $3 per user per month

Platform: $6 per user, per month

Duo Security Features

  • API
  • Application Security
  • Authentication
  • Automatic Notifications
  • Single Sign On
  • Two-Factor Authentication

  • Access Control
  • Activity Dashboard
  • Alerts / Escalation
  • Audit Trail
  • Auditing
  • Compliance Management
  • Monitoring
  • Password Management
  • Permission Management
  • Reporting & Statistics
  • SSL Security
  • Secure Data Storage
  • Third Party Integration
  • Website Security

Additional information for Duo Security

Key features of Duo Security

  • API access
  • Contextual access policies
  • Custom policies & controls
  • Customizable login page branding
  • Device recovery
  • Device visibility
  • Endpoint remediation
  • Fraud alerts
  • Groups management
  • Hardware tokens
  • One-tap mobile authentication
  • Outdated OS, browser & plugin identification
  • Phone callback
  • Provisioning
  • SMS passcodes
  • Self-remediation notifications
  • Self-service portal
  • Single Sign-On
  • Temporary bypass codes
  • Two-factor authentication
  • User & device reports
  • User device inventory
  • User management
  • User self-enrollment
  • User, authentication & administrator logs
  • VPN integrations

Benefits

  • Permissions and controls can be configured to prevent users logging in from high-risk countries, or those which the company does not do business in, and two-factor authentication requirements can be set on an app-specific basis.

  • Detailed data on users’ devices can be recorded, and vulnerabilities identified, including outdated operating systems, plugins, and browsers, with automatic notifications to users and the option to block access to applications until vulnerable devices are updated.

  • The Access Gateway offers Single Sign-On (SSO) for employees who user 10 or more cloud applications, while still assessing device health and checking users’ identities every time an application is accessed.

  • Staff, visitors, and contractors can be granted temporary access using bypass codes, with the ability to generate single, event, and time-based codes, which can be set to expire after a set number of uses or amount of time.

  • Stolen or lost authentication devices can be disabled and dissociated from their user, and re-enabled if found.

  • Duo Security FAQs

    Below are some frequently asked questions for Duo Security.

    Q. What type of pricing plans does Duo Security offer?

    Duo Security offers the following pricing plans:

    Starting from: $1/month

    Pricing model: Free, Subscription

    Free Trial: Available

    30-day free trial, no credit card required.

    Personal - for on-premise apps; up to 10 users: free

    Business - for on-premise apps: $1 per user per month

    Enterprise - for on-premise and cloud apps: $3 per user per month

    Platform: $6 per user, per month

    Q. What are the main features of Duo Security?

    Duo Security offers the following features:

    • API access
    • Contextual access policies
    • Custom policies & controls
    • Customizable login page branding
    • Device recovery
    • Device visibility
    • Endpoint remediation
    • Fraud alerts
    • Groups management
    • Hardware tokens
    • One-tap mobile authentication
    • Outdated OS, browser & plugin identification
    • Phone callback
    • Provisioning
    • SMS passcodes
    • Self-remediation notifications
    • Self-service portal
    • Single Sign-On
    • Temporary bypass codes
    • Two-factor authentication
    • User & device reports
    • User device inventory
    • User management
    • User self-enrollment
    • User, authentication & administrator logs
    • VPN integrations

    Q. Who are the typical users of Duo Security?

    Duo Security has the following typical customers:

    Freelancers, Large Enterprises, Mid Size Business, Non Profit, Public Administrations, Small Business

    Q. What languages does Duo Security support?

    Duo Security supports the following languages:

    English, French, German

    Q. What type of pricing plans does Duo Security offer?

    Duo Security has the following pricing plans:

    Free, Subscription

    Q. Does Duo Security support mobile devices?

    Duo Security supports the following devices:

    Android, iPhone, iPad

    Q. What other apps does Duo Security integrate with?

    Duo Security integrates with the following applications:

    Claromentis, Clinic Software ®, OneLogin, PortalGuard, RFPIO

    Q. What level of support does Duo Security offer?

    Duo Security offers the following support options:

    Forum, Knowledge Base, Online Support, Phone Support