Phishing-resistant MFA is the mandate. We’re built for it.
OMB M-22-09 requires phishing-resistant MFA across federal agencies as part of the zero-trust strategy. Dapple delivers FIDO2 phishing resistance without PIV card logistics or hardware token inventories — from a team that spent careers inside the national security community.
Contact Federal SalesWhere Dapple fits the federal checklist
OMB M-22-09 / Zero Trust
The federal zero-trust strategy names phishing-resistant MFA as the standard. Dapple’s FIDO2-based authentication is phishing-resistant by design — aligned with the identity pillar out of the box.
FIPS & FedRAMP roadmap
FIPS 140-3 validation of cryptographic modules is on our engineering roadmap, with FedRAMP authorization planned as the enterprise program matures. We publish status honestly on our Trust page.
CMMC & the defense base
For defense contractors, phishing-resistant MFA maps directly to CMMC access-control requirements — a practical, affordable path for the small and mid-size DIB companies primes depend on.
Privacy by architecture
No stored biometrics means no biometric PII holdings to report, secure, or breach — a materially simpler Privacy Act and PIA story than template-based biometric systems.
From the NSA to your agency’s login page
Dapple’s founder and CEO served nearly a decade as a cryptomathematician at the National Security Agency. Our board includes the architect of the Trusted Data Format — the open standard published by ODNI. This team has built for the highest-assurance environments in the world, and that standard is in the product’s DNA.
Meet the TeamFederal & Enterprise sales
Public-sector procurement questions route to a dedicated contact — capability statements, pilot structures, and small-business contracting vehicles included.