AdNovum NEVIS Security Suite

Modern businesses must enable secure, convenient access across digital properties for partners, B2B customers, consumers, employees, and contractors. This requires multiple authentication methods and assurance levels, risk-adaptive authentication and step-up controls, policy-based authorization, self-service identity management, partner federation, and layered application security. Timely provisioning and de-provisioning is emphasized as both a business enabler and a way to reduce data-loss risk when relationships end, while attribute management underpins effective policy-based access control. Consumer-centric industries also need online registration, profile management, and consent management capabilities. Web applications require multi-layer protection spanning network controls, service-level authentication/authorization, and integration with identity systems. Identity system owners also need visibility through statistics for operations and event detail for security analytics.

AdNovum, a Swiss enterprise founded in 1988 with development operations in Hungary, Portugal, Vietnam, and Singapore, addresses these needs with its Java-based NEVIS Security Suite, delivered as a hardened nevisAppliance or as installable software for platforms such as Linux and IaaS. The suite is modular—nevisAuth (authentication), nevisProxy (reverse proxy/WAF), nevisIDM (identity management), and nevisReports (reporting)—with optional nevisAdmin for deployment and DevOps patterns, including Docker/Kubernetes support and Git-based configuration branching.

nevisAuth supports broad MFA options (including FIDO UAF mobile biometrics, push, tokens, smartcards, and social login) plus federation via OAuth/OIDC/SAML/WS-Fed and a configurable risk engine that evaluates factors like IP, geo-velocity, device signals, and attributes; it can be extended via REST but currently lacks built-in third-party threat or compromised-credential intelligence. nevisProxy integrates tightly with nevisAuth for SSO, step-up authentication, session controls, SSL handling, and WAF protections including validation and adaptive allow/deny lists. nevisIDM is workflow-oriented with delegated admin, provisioning, and self-service, while nevisReports provides dashboards and formatted reports. Strengths center on strong MFA, modularity, and security for sensitive sectors; challenges include geographic concentration, missing external threat-intel inputs, and potential IGA enhancements.

• AdNovum is a Swiss-based enterprise focused on IT security software solutions, application management, and professional services.
• AdNovum was founded in 1988.
• AdNovum has software development operations in Hungary, Portugal, Vietnam, and Singapore.
• NEVIS Security Suite is implemented in Java.
• NEVIS Security Suite is available as a hardened, pre-configured Linux nevisAppliance or as a traditional software distribution.
• nevisAuth includes a built-in FIDO UAF 1.1 server supporting face and fingerprint biometrics on Android and iOS.
• Identity federation in NEVIS can use OAuth, OIDC, SAML, and WS-Fed.
• nevisProxy combines a secure reverse proxy with an integrated web application firewall.
• nevisReports can produce reports formatted for Microsoft Excel or PDF and can also provide web-based dashboards.
• The current solution does not integrate with third-party cyber threat intelligence or compromised credential intelligence.

• “Today’s businesses need support for secure and convenient ways to enable business partners, B2B customers, consumers and even employees or contractors to securely access resources across their digital properties.”
• “For all kinds of users, risk-adaptive authentication, the ability to ‘step-up’, is a necessity depending on the type of access or transaction.”
• “The ability to provision and de-provision users in a timely manner is critical, not only for business enablement but also to diminish the possibility of data loss when contractual relationships end.”
• “Attribute assignment and management is a key to proper policy-based access control operations.”
• “Web applications and their connected backend infrastructure need multiple layers of protection.”
• “IDM system owners need visibility of all the kinds of activities that are going on across their enterprises.”
• “The suite can be licensed as a whole, or each module can be licensed individually, depending on customer requirements.”
• “Risk factors can be weighted independently in policies depending on customer business requirements.”
• “Performance can be scaled horizontally by using load-balancer services in front of multiple AdNovum nevisAppliances.”
• “AdNovum makes a clear distinction between configuration and infrastructure, by declaring multiple branches in Git, which makes it simpler to migrate configs between environments.”