Workforce identity & KYE

Know your employee, from application to exit

Deepfake candidates, synthetic identities, and help desk social engineers all share one tactic: posing as your people. 1Kosmos Workforce brings Know Your Employee (KYE) to every hire, verifying identity once and proving it at every interview, login, and reset.

A woman sits at a table with a thoughtful expression, surrounded by a bright, modern interior.

Workforce identity & KYE

Know your employee, from application to exit

Deepfake candidates, synthetic identities, and help desk social engineers all share one tactic: posing as your people. 1Kosmos Workforce brings Know Your Employee (KYE) to every hire, verifying identity once and proving it at every interview, login, and reset.

A woman sits at a table with a thoughtful expression, surrounded by a bright, modern interior.

Workforce identity & KYE

Know your employee, from application to exit

Deepfake candidates, synthetic identities, and help desk social engineers all share one tactic: posing as your people. 1Kosmos Workforce brings Know Your Employee (KYE) to every hire, verifying identity once and proving it at every interview, login, and reset.

A woman sits at a table with a thoughtful expression, surrounded by a bright, modern interior.

Secure, fast, and truly passwordless.

g2 logo
G2
Senior Assistant, Business Process Services at DXC Technology

A state of the art authentication solution.

gartner logo
Gartner Peer Insights
Manager, IT Security and Risk Management

User-friendly interface with secure verification and amazing performance.

g2 logo
G2
IT and Services

One of the best passwordless solutions catering MFA.

gartner logo
Gartner Peer Insights
Senior Executive - Security Operations

Secure, fast, and truly passwordless.

g2 logo
G2
Senior Assistant, Business Process Services at DXC Technology

A state of the art authentication solution.

gartner logo
Gartner Peer Insights
Manager, IT Security and Risk Management

User-friendly interface with secure verification and amazing performance.

g2 logo
G2
IT and Services

One of the best passwordless solutions catering MFA.

gartner logo
Gartner Peer Insights
Senior Executive - Security Operations

Secure, fast, and truly passwordless.

g2 logo
G2
Senior Assistant, Business Process Services at DXC Technology

A state of the art authentication solution.

gartner logo
Gartner Peer Insights
Manager, IT Security and Risk Management

User-friendly interface with secure verification and amazing performance.

g2 logo
G2
IT and Services

One of the best passwordless solutions catering MFA.

gartner logo
Gartner Peer Insights
Senior Executive - Security Operations

Secure, fast, and truly passwordless.

g2 logo
G2
Senior Assistant, Business Process Services at DXC Technology

A state of the art authentication solution.

gartner logo
Gartner Peer Insights
Manager, IT Security and Risk Management

User-friendly interface with secure verification and amazing performance.

g2 logo
G2
IT and Services

One of the best passwordless solutions catering MFA.

gartner logo
Gartner Peer Insights
Senior Executive - Security Operations

Secure, fast, and truly passwordless.

g2 logo
G2
Senior Assistant, Business Process Services at DXC Technology

A state of the art authentication solution.

gartner logo
Gartner Peer Insights
Manager, IT Security and Risk Management

User-friendly interface with secure verification and amazing performance.

g2 logo
G2
IT and Services

One of the best passwordless solutions catering MFA.

gartner logo
Gartner Peer Insights
Senior Executive - Security Operations
Continuous carousel with 4 testimonials. Playing

Secure, fast, and truly passwordless.

g2 logo
G2
Senior Assistant, Business Process Services at DXC Technology

A state of the art authentication solution.

gartner logo
Gartner Peer Insights
Manager, IT Security and Risk Management

User-friendly interface with secure verification and amazing performance.

g2 logo
G2
IT and Services

One of the best passwordless solutions catering MFA.

gartner logo
Gartner Peer Insights
Senior Executive - Security Operations

Secure, fast, and truly passwordless.

g2 logo
G2
Senior Assistant, Business Process Services at DXC Technology

A state of the art authentication solution.

gartner logo
Gartner Peer Insights
Manager, IT Security and Risk Management

User-friendly interface with secure verification and amazing performance.

g2 logo
G2
IT and Services

One of the best passwordless solutions catering MFA.

gartner logo
Gartner Peer Insights
Senior Executive - Security Operations

Secure, fast, and truly passwordless.

g2 logo
G2
Senior Assistant, Business Process Services at DXC Technology

A state of the art authentication solution.

gartner logo
Gartner Peer Insights
Manager, IT Security and Risk Management

User-friendly interface with secure verification and amazing performance.

g2 logo
G2
IT and Services

One of the best passwordless solutions catering MFA.

gartner logo
Gartner Peer Insights
Senior Executive - Security Operations

Secure, fast, and truly passwordless.

g2 logo
G2
Senior Assistant, Business Process Services at DXC Technology

A state of the art authentication solution.

gartner logo
Gartner Peer Insights
Manager, IT Security and Risk Management

User-friendly interface with secure verification and amazing performance.

g2 logo
G2
IT and Services

One of the best passwordless solutions catering MFA.

gartner logo
Gartner Peer Insights
Senior Executive - Security Operations

Secure, fast, and truly passwordless.

g2 logo
G2
Senior Assistant, Business Process Services at DXC Technology

A state of the art authentication solution.

gartner logo
Gartner Peer Insights
Manager, IT Security and Risk Management

User-friendly interface with secure verification and amazing performance.

g2 logo
G2
IT and Services

One of the best passwordless solutions catering MFA.

gartner logo
Gartner Peer Insights
Senior Executive - Security Operations
Continuous carousel with 4 testimonials. Playing

The KYE gap

Verified once, exploited every day after

Background checks confirm a name at the door, not the person who shows up to work, logs in, or calls the help desk. Without KYE controls, that gap invites DPRK operatives, deepfake candidates, and Scattered Spider attacks.

41% of security leaders

say their company hired and onboarded a fraudulent candidate (GetReal Security, 2025)

320+ companies

infiltrated by North Korean IT workers in 12 months, up 220% (CrowdStrike, 2025)

$400M profit hit

to M&S after attackers talked their way past the help desk (Marks & Spencer, 2025)

A woman leans over to assist a man at a laptop in a modern office setting, both focused on the screen.

The KYE gap

Verified once, exploited every day after

Background checks confirm a name at the door, not the person who shows up to work, logs in, or calls the help desk. Without KYE controls, that gap invites DPRK operatives, deepfake candidates, and Scattered Spider attacks.

41% of security leaders

say their company hired and onboarded a fraudulent candidate (GetReal Security, 2025)

320+ companies

infiltrated by North Korean IT workers in 12 months, up 220% (CrowdStrike, 2025)

$400M profit hit

to M&S after attackers talked their way past the help desk (Marks & Spencer, 2025)

A woman leans over to assist a man at a laptop in a modern office setting, both focused on the screen.

The KYE gap

Verified once, exploited every day after

Background checks confirm a name at the door, not the person who shows up to work, logs in, or calls the help desk. Without KYE controls, that gap invites DPRK operatives, deepfake candidates, and Scattered Spider attacks.

41% of security leaders

say their company hired and onboarded a fraudulent candidate (GetReal Security, 2025)

320+ companies

infiltrated by North Korean IT workers in 12 months, up 220% (CrowdStrike, 2025)

$400M profit hit

to M&S after attackers talked their way past the help desk (Marks & Spencer, 2025)

A woman leans over to assist a man at a laptop in a modern office setting, both focused on the screen.

The solution

The solution

Verified at hire, proven every day after

Verified at hire, proven every day after

Today's attackers have moved past breaking in. They either get hired, or they call IT asking for a reset. 1Kosmos Workforce closes and locks both doors with one verified identity: a new hire's government ID is matched to a live biometric, and every reset after requires that same face, whether it's a help desk call or self-service.

Between the hire and the reset, typing rhythm, facial presence, and device signals keep watching for a swap, a proxy, or a hijacked session. When something changes, 1Kosmos steps in before an imposter can turn access into an incident.

25

device, network, and threat signals scored in real time per session

3

automated responses when a session drifts: step up, restrict, or end

100%

of session events logged with timestamps and severity tags for audit

How it works

How it works

One verified identity, from application to last day

One verified identity, from application to last day

Follow a new hire through the KYE journey to see exactly what 1Kosmos Workforce verifies at each step.

Step/01

Application

A LiveID at application means a stolen or synthetic identity fails the live biometric match.

Step/01

Application

A LiveID at application means a stolen or synthetic identity fails the live biometric match.

Step/02

Interview

A LiveID check before each round confirms the applicant is on camera, not a proxy or deepfake.

Step/03

Offer

A government ID is matched to the same face, and US work eligibility is confirmed against that identity.

Step/03

Onboarding

The verified identity binds to the HR record and directory account before access is granted.

Step/05

Day 0

New hires sign in passwordless with LiveID or phrase + PIN. No initial password is ever sent.

Step/06

Ongoing & exit

Help desk resets require a LiveID match, and continuous signals flag any swap.

A gradient background transitioning from black to purple and pink hues.

Factor coverage

Assurance that rises with the risk

Not every step needs every factor. 1Kosmos Workforce turns on only what each stage of the KYE journey requires, reaching full assurance at Day 1 registration, while the Intelligence Layer monitors risk across all of them.

Pre-Hire

Job application

IDV

LiveID

Wallet

Assessment

IDV

LiveID

Wallet

CA-Contextual

CA-Facial

Interview

IDV

LiveID

Wallet

CA-Contextual

CA-Facial

Employment verification

I9 verification

Offer

IDV

LiveID

Wallet

Hire

Day 0: Provisioning

IDV

LiveID

Wallet

Day 1: Registration

IDV

LiveID

Wallet

Continuous Authentication-Contextual

Continuous Authentication-Facial

Continuous Authentication-Typing-Login

Continuous Authentication-Typing-Post login

1Key

MSFT Verified ID

1K Vault

OS Auth

Web Auth

Legacy app auth

Day 1: Usage

IDV

LiveID

Wallet

CA-Contextual

CA-Facial

CA-Typing-Login

CA-Typing-Post login

1Key

MSFT Verified ID

Day 1: Operational SSPR

IDV

LiveID

Wallet

Day 1: Operational help desk

IDV

LiveID

Wallet

A gradient background transitioning from black to purple and pink hues.

Factor coverage

Assurance that rises with the risk

Not every step needs every factor. 1Kosmos Workforce turns on only what each stage of the KYE journey requires, reaching full assurance at Day 1 registration, while the Intelligence Layer monitors risk across all of them.

Pre-Hire

Job application

IDV

LiveID

Wallet

Assessment

IDV

LiveID

Wallet

CA-Contextual

CA-Facial

Interview

IDV

LiveID

Wallet

CA-Contextual

CA-Facial

Employment verification

I9 verification

Offer

IDV

LiveID

Wallet

Hire

Day 0: Provisioning

IDV

LiveID

Wallet

Day 1: Registration

IDV

LiveID

Wallet

Continuous Authentication-Contextual

Continuous Authentication-Facial

Continuous Authentication-Typing-Login

Continuous Authentication-Typing-Post login

1Key

MSFT Verified ID

1K Vault

OS Auth

Web Auth

Legacy app auth

Day 1: Usage

IDV

LiveID

Wallet

CA-Contextual

CA-Facial

CA-Typing-Login

CA-Typing-Post login

1Key

MSFT Verified ID

Day 1: Operational SSPR

IDV

LiveID

Wallet

Day 1: Operational help desk

IDV

LiveID

Wallet

Use cases

Protect the moments attackers target

New hire screening

Verify new hires and contractors with IAL2-compliant identity proofing before any account is provisioned.

Help desk verification

Replace agent judgment with a government ID check and live biometric match that returns pass/fail in seconds.

MFA reset and recovery

Confirm a verified identity before agents or self-service portals reset passwords, MFA, or profiles.

Remote workforce verification

Give remote and hybrid teams secure access to VPNs, cloud apps, and corporate systems with verified identity.

Passwordless for frontline workers

Secure shared workstations without passwords, personal tokens, or smartphones, and cut hardware costs.

Drop it into your stack

1Kosmos Workforce plugs into the HR, IAM, and service desk tools you already run, so verification happens inside existing workflows.

IAM & MFA

Active Directory

Microsoft Entra ID

Okta

Ping Identity

HR & identity governance

Workday

ADP

SailPoint

Saviynt

Talent acquisition

Workday Recruiting

Ashby

Greenhouse

Help desk & ITSM

ServiceNow

Jira Service Management

Freshservice

BMC Helix

Threat detection

CrowdStrike Falcon

Microsoft Defender

SentinelOne

SOC II Type 2
Logo featuring the text "FIDO Certified" with stylized letters in yellow and black.
FedRAMP High
FedRAMP High
Logo of Kantara, featuring a checkmark, with the text "Identity Proofing & Credential Management."
Presentation Attack Detection Level 2
ISO 27018
ISO 27001
SOC II Type 2
Logo featuring the text "FIDO Certified" with stylized letters in yellow and black.
FedRAMP High
FedRAMP High
Logo of Kantara, featuring a checkmark, with the text "Identity Proofing & Credential Management."
Presentation Attack Detection Level 2
ISO 27018
ISO 27001
SOC II Type 2
Logo featuring the text "FIDO Certified" with stylized letters in yellow and black.
FedRAMP High
FedRAMP High
Logo of Kantara, featuring a checkmark, with the text "Identity Proofing & Credential Management."
Presentation Attack Detection Level 2
ISO 27018
ISO 27001

Get started

Stop candidate fraud before it becomes workforce risk

See how 1Kosmos Workforce brings KYE to every hire and proves it at every login, reset, and access request.

Get started

Stop candidate fraud before it becomes workforce risk

See how 1Kosmos Workforce brings KYE to every hire and proves it at every login, reset, and access request.

Get started

Stop candidate fraud before it becomes workforce risk

See how 1Kosmos Workforce brings KYE to every hire and proves it at every login, reset, and access request.

About Know Your Employee (KYE)

FAQs

KYE is the practice of verifying the real-world identity of every employee, contractor, and third party, then continuing to confirm it throughout employment. 1Kosmos Workforce verifies identity once at hire, then re-confirms the same person at interviews, onboarding, logins, and help desk resets.

A background check verifies a name and history on paper, not the person accepting the offer or logging in on day one. KYE binds a verified government ID to a live person, then keeps confirming that same person for the life of the account.

Both confirm that a real person stands behind an identity. KYC (Know Your Customer) does it for the customers a business serves, often to meet financial regulations, while KYE protects the workforce side: hiring, system access, and account recovery for employees, contractors, and third parties.

Candidates prove their identity using a government ID matched to a live biometric before the first interview, so stolen and synthetic identities fail at the start. During each interview, KYE confirms the face on camera is the applicant and detects deepfakes, virtual cameras, and stand-ins before the round ends.

Resets and recovery require a LiveID match to the verified employee instead of knowledge-based questions. A caller with a name and badge number gets nothing, which shuts down the core Scattered Spider tactic.

Continuous authentication keeps verifying identity after login. KYE uses typing patterns, facial presence, and about 25 device and network signals to confirm the verified employee is still behind the session, triggering step-up auth or ending the session when risk rises.

Yes. 1Kosmos Workforce integrates with Active Directory, Microsoft Entra ID, Okta, Ping Identity, Workday, ADP, SailPoint, Saviynt, ServiceNow, CrowdStrike, and more, so verification runs inside the workflows you already have.

Biometrics are stored as an encrypted mathematical representation, never as a facial photo, inside your dedicated 1Kosmos environment. Document, biometric, and consent retention are configurable to your own policy and jurisdiction.

The latest in identity security.

Enter our orbit.