AdNovum Nevis Security Suite

Businesses need reliable ways to let employees, external workers, partners, and customers securely access resources across separate networks while staying agile in fast-changing markets. Meeting both security and agility requires a coordinated set of capabilities: robust identity and lifecycle management (including federation and authorization data governance), strong authentication and authorization (spanning multi-factor methods and risk/context-based “adaptive” access with step-up controls), and modern web access management that goes beyond a simple “front door” by propagating identity and entitlements to applications, transforming sessions for interoperability, and inspecting traffic to protect web infrastructures. These needs, combined with compliance and audit evidence requirements during digital transformation, are driving suites that unify IAM, authentication, access enforcement, and analytics.

AdNovum, a Swiss enterprise founded in 1988, offers the Nevis Security Suite, positioned as such an integrated solution, with development contributions from Hungary and Singapore. The suite’s four core modules cover authentication (nevisAuth), secure reverse proxy plus WAF (nevisProxy), identity management (nevisIDM), and reporting/analytics (nevisReports), with optional components like nevisAdmin for console management. nevisAuth supports a wide range of mechanisms (from LDAP passwords to certificates, biometrics, OTP, Kerberos, SAML/WS-Fed, OAuth/OpenID Connect, national eIDs, and Swisscom Mobile ID) and is extensible via plugins. nevisProxy provides SSO, session handling, identity/entitlement propagation (RBAC), SSL termination and re-encryption, session inspection, and application rewriting to accelerate integration. nevisIDM targets lifecycle workflows, multi-tenancy, automation, self-service, and delegated admin, while nevisReports delivers configurable reports and dashboards. The suite emphasizes modular deployment choices, standards-based integration, horizontal scalability via load balancing, and strong auditability—including versioned identity objects in nevisIDM—reflecting experience in regulated environments.

• AdNovum was founded in 1988.
• AdNovum is a Swiss-based enterprise providing software solutions, application management, and professional services in IT security.
• Parts of AdNovum’s software development are provided from Hungary and Singapore.
• Nevis Security Suite includes four major modules: nevisAuth, nevisProxy, nevisIDM, and nevisReports.
• nevisAuth supports authentication mechanisms including LDAP passwords, TAN variants (mTAN via SMS and eTAN via e-mail), X.509 client certificates, biometrics, OTP, Kerberos, SAML 2.0, WS-Federation, OAuth, and OpenID Connect.
• Swisscom Mobile ID is supported and is targeted especially at the Swiss market.
• nevisProxy includes an integrated web application firewall and functions as a secure reverse proxy.
• nevisIDM supports multi-tenant environments and provides lifecycle and workflow capabilities for identities and authorization information.
• Nevis Security Suite is implemented in Java and can be delivered as a hardened, pre-configured Linux appliance or as a software distribution.
• nevisIDM entries within the directory are versioned, enabling retrieval of previous versions of identity information objects.

• “Achieving security and agility as two important pillars of an adequate strategy for interoperating with partner organisations, external business users ─ but also with customers and consumers within the extended enterprise ─ requires the secure and efficient implementation of various technologies.”
• “An important building block is strong authentication based on several identifying factors.”
• “This can subsequently be the basis for risk- and context-based Access Management, also sometimes called ‘adaptive’ authentication and authorisation.”
• “Session data can be transformed in transit for achieving interoperability between different types of applications.”
• “The inspection of traffic is becoming a more and more crucial factor in protecting modern web application infrastructures.”
• “nevisAuth is versatile and feature-rich authentication platform providing access to enterprise applications based on a large set of authentication mechanisms.”
• “nevisProxy implements a full-featured secure reverse proxy with an integrated web application firewall (WAF) for enabling and protecting access to internal systems.”
• “The nevisIDM module focuses on the simplification of administration processes by enabling self-service, automation and delegated administration.”
• “A large range of predefined but also configurable reports can be made available on demand or automated.”
• “The overall design of the products allows for a highly individual, use case-specific selection of required modules and the design of targeted customer scenarios ranging from the implementation of a single module complementing existing solutions to the deployment of the full platform.”