CyberCyko FAQ
Questions deserve clear answers.
What CyberCyko Workforce does today, what is in development, what it costs, and when to bring an engineer into the conversation.
What is CyberCyko?
A cybersecurity platform built on identity. Its first product, CyberCyko Workforce, lets your team sign in to laptops and work apps with their phone and fingerprint instead of a password, and puts every company Windows laptop under one console.
How does signing in without a password work?
Your employee gets a prompt on their phone, touches the fingerprint sensor, and their laptop or app opens. The key that signs them in is held inside their phone’s security chip and never leaves it, so there is no password to phish, reuse or leak.
Can employees sign in to Windows without a password?
Yes. They wake the laptop, approve the request on their phone and touch the fingerprint sensor, and the desktop opens. The employee never types, knows or resets a password; the laptop’s local Windows account stays for IT’s break-glass and legacy use only. Mac lock-screen sign-in works too.
Is passwordless sign-in safer than a password with MFA?
Yes. Multi-factor authentication adds a step on top of a password, and that password can still be phished, reused or leaked. With CyberCyko there is no password at all. The key is held in the phone’s security chip, cannot leave it, and needs a live fingerprint or face to use.
Do you store our fingerprints or face data?
No. The fingerprint or face check happens on the employee’s own phone and releases a key held in its security chip. We cannot see fingerprints, face data, private keys or passwords. We store device records, public keys, access grants and the admin log.
What phone do employees need?
An iPhone or Android phone with a fingerprint or face sensor. CyberCyko Authenticator, our phone app, approves sign-in. CyberCyko does not manage the phone.
What happens when an employee changes their phone?
Remove the old phone in the console, so it can no longer approve a sign-in, and the employee pairs the new one. Keys are created on each device and stay there, so nothing carries over from the old phone.
Which platforms do you support?
Today: Windows laptops are fully managed, and passwordless sign-in works on Windows and at the Mac lock screen. Management for Mac, Ubuntu, Android and iOS is in development. Windows laptops get security settings, twelve checks, remote lock and screen takeover. Beyond Windows, admins can use the web console from an enrolled Mac, and employees approve sign-in with CyberCyko Authenticator on iPhone or Android, which does not manage the phone.
Do I need a security specialist to run it?
No. It is designed for the IT person you already have. People, devices, apps, security settings and the audit log are on one screen, in plain language, with no separate consoles to learn.
What if a laptop is offline when I make a change?
It applies the change as soon as it reconnects, and the console shows it as pending until then. Laptops that are online pick up a change within seconds.
What does laptop management include?
For Windows laptops: seven policy categories (disk encryption, firewall, USB storage, antivirus, screen lock, Windows updates and printing), twelve continuous security checks, live inventory, remote lock and restart, and screen takeover to help a user. Each laptop reports back whether it applied a setting.
What does it cost?
$6 per device per month, or $5.00 per device per month billed annually ($60 per device per year). Annual billing means pay for 10 months, get 12 (two months free, 16.7% off). Everything is included. There are no tiers and no paid add-ons. Up to 10 devices are free for the first year.
What counts as a device?
Each enrolled laptop, desktop or workstation. People are unlimited: if three people share one enrolled machine, that is one device. Someone with a laptop and a desktop counts as two.
Do I need to talk to sales?
No. Pick your device count, check out, and your console is ready in minutes. Talk to us if you are running a larger fleet or need a master services agreement (MSA), a data processing agreement (DPA) or a security review first.
What is single sign-on (SSO)?
Signing in once and opening your work apps, without a separate password for each. With CyberCyko, one phone approval opens your work apps, such as Microsoft 365, Google Workspace, Slack, GitHub and any other app that supports standard single sign-on; apps you mark as sensitive can ask for a second approval. IT decides who can open which app.
Which apps can we sign in to?
Anything that supports standard single sign-on. We ship ready-made setup for Microsoft 365, Google Workspace, Slack, GitHub, GitLab, Mattermost and Redmine. Anything else is added through a guided wizard with a test-connection button. Microsoft 365 domain sign-in is set up with our help.
What happens if someone loses their phone or laptop?
Remove that device from the console and it stops being able to sign in within seconds. There is no password anywhere that could still work. A lost laptop can also be locked remotely as soon as it reconnects. Locking does not erase it.
What happens when an employee leaves?
One click removes their access to the laptop and every app signed in through CyberCyko, and the action is logged. Accounts inside other services may still need closing there.
How do we handle contractors?
Invite them like any employee and remove their access with one click when the work ends. Every invite and removal is recorded in the admin log.
Do you keep our users in a database?
We keep a list of your users (name, work email, their enrolled devices and app access) so IT can manage access. We do not keep passwords or any other secret that signs them in: each identity is a key kept on the user’s own devices. A breach of our side would expose that user list, device records and public keys, none of which can sign anyone in without the hardware and the fingerprint.
Do you replace our antivirus?
No. We make sure the antivirus built into Windows is on and configured, and we report on it. We are not an antivirus product.
Does it replace our password manager?
For the laptop and every app signed in through CyberCyko, yes: there are no passwords left to store, share or rotate. Apps that do not support standard single sign-on still need their own sign-in.
Are you certified?
Yes. For information security, CyberCyko is ISO/IEC 27001:2022 certified (certificate 09115388E, issued 26 September 2026), and for quality management it is ISO 9001:2015 certified. Our SOC 2 Type II audit is in progress; we do not hold a SOC 2 report yet. We also map SOC 2, ISO 27001, CIS and NIST SP 800-171 controls inside the product so you can report on your own posture. Ask us for our current evidence under NDA.
How does this help with the DPDP Act?
Full DPDP compliance is due 13 May 2027. Access control, device security settings and a verifiable audit trail are three of the safeguards it asks for. We give you evidence for all three. We are not a consent manager and do not handle consent.
Where is our data?
On Amazon Web Services (AWS), serving teams worldwide. Our Privacy Policy lists the categories of sub-processor we use, and we give you each one’s name and purpose for your questionnaire. Prices are in US dollars; Indian customers are billed in Indian rupees at checkout.
Can we get a data processing agreement (DPA)?
Ask us. We will confirm the current DPA and contract wording directly.
Is anything sold separately?
No. Workforce has no hidden tier and no paid add-ons: every feature is in the one price.
Bring your review questions
Our engineering team can walk you through the product as it ships today and answer anything this page does not.
Contact usRead the security pageSee pricing