SecurEnvoy

enriched

Data ClassificationIdentity & Access Management

securenvoy.com ↗ · required email domain for this vendor's users

Trust profile

checked 6 of 16 signals

Limited
Independently verified
Has anyone other than the vendor confirmed this?
checked 3 of 4
Nothing here has been confirmed by an independent third party yet.
- No third-party certifications found
- Profile not claimed by the vendor
Limited
Operating durability
Is this a real, durable business?
checked 2 of 4
How long this vendor has been operating, and who stands behind them.
- Headquarters location not disclosed on their site
Mixed
Behaviour under stress
What do they do when something goes wrong?
checked 1 of 3
What their public record shows about handling vulnerabilities and outages.
- 12 published CVE(s) — a public disclosure record exists
- 2 rated critical
Not checked
Disclosure posture
Do they tell you the awkward things unprompted?
checked 0 of 3
We have not checked what this vendor discloses publicly yet.
Nothing checked here yet — this is not a mark against SecurEnvoy.
Not checked
Momentum
Are they still shipping, or coasting?
checked 0 of 2
We have not tracked this vendor's release activity yet.
Nothing checked here yet — this is not a mark against SecurEnvoy.

Data coverage: 13/100

Data coverage profile

Integrations

13 detected

Integrates with: Array Networks ↗, Barracuda ↗, Check Point Software ↗, Cisco ↗, Citrix ↗, Fortinet ↗, Google ↗, Juniper Networks ↗, Microsoft ↗, Palo Alto Networks ↗, SonicWall ↗, Sophos ↗, WatchGuard ↗

Buyer reviews

verified buyers only

No buyer reviews yet.

Reputation rating

anonymous

No ratings in this window yet.

Access management platform with SSO, MFA, and conditional access controls

CVE severity over time

Known CVEs (12)

RSS ⇢

CVE-2025-30236 ↗HIGH 8.62025
Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 allows authentication through only a six-digit TOTP code (skipping a password check) if an HTTP POST request contains a SESSION parameter.
CVE-2025-30235 ↗LOW 3.52025
Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication a…
CVE-2024-37393 ↗HIGH 7.52024
Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltrate data from Active …
CVE-2020-13376 ↗CRITICAL 9.02020
SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cookie.
CVE-2018-18466 ↗HIGH 7.02019
An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the application stores the emergency credentials in cleartext in the logs (present in th…
CVE-2018-7707 ↗MEDIUM 6.12018
Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HTML via an HTML-formatted e-mail message.
CVE-2018-7706 ↗MEDIUM 6.52018
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a .. (dot dot) in the option2 parameter in an attachmen…
CVE-2018-7705 ↗HIGH 8.12018
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitrary recipients via a .. (dot dot) in the filename parameter …
CVE-2018-7704 ↗MEDIUM 6.52018
SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1 parameter in a reply action to secmail/getmessage.exe.
CVE-2018-7703 ↗MEDIUM 6.12018
Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HTML via the mailboxid parameter to secmail/getmessage.exe.
CVE-2018-7702 ↗CRITICAL 9.12018
SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e-mail messages to arbitrary recipients, or modify arbitrary message bodies and a…
CVE-2018-7701 ↗MEDIUM 6.52018
Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers to hijack the authentication of arbitrary users for requests that (1) delete e-…

Resources & materials (2)

discovered on their site

Datasheets, whitepapers, and case studies found on securenvoy.com by the enrichment loop. Links open the original documents on the vendor's own site.

Competitors (12)

full alternatives comparison →

1Password Abbey Labs Aceiss Airrived Akeyless Security Alcor Alibaba Cloud Andromeda Security Apono Aquera archTIS Arexdata

Products (2)

Identity & Access Management

SecurEnvoy Access Managementsource ↗
Access management platform with SSO, MFA, and conditional access controls

Data Classification

SecurEnvoy Data Discovery Platformsource ↗
Automated data discovery & classification for sensitive data across on-prem & cloud

SecurEnvoy

Independently verified

Operating durability

Behaviour under stress

Disclosure posture

Momentum

Reputation rating?UI-20 — anonymous ratingA single anonymous 5-star signal from buyers, resellers, and analysts who've engaged with this vendor — separate from the domain-attributed reviews above. No rater identity is ever shown, not even at company level.

CVE severity over time?UI-24 — CVE severity timelineEvery known CVE with a disclosure date and severity, plotted by when it was published — lets you see whether disclosures are trending toward more or less severe, not just a raw count. Same NVD-sourced, name-matched data as the list below.