Rising Star Relock

Short Summary

Relock is a pre-seed cybersecurity startup founded in 2024, headquartered in Austin, Texas, with roots in Poland, focused on continuous authentication and breach prevention across North America and Europe. It addresses a growing gap in identity and access management: traditional MFA remains necessary but is increasingly insufficient against advanced threats like phishing, session hijacking, and token replay, especially in fragmented environments with legacy applications. Relock’s mission is to eliminate sensitive data breaches through secure-by-default mechanisms that improve security and user experience using cryptographic mutual trust.

The company provides a continuous passive authentication platform that runs transparently on top of existing authentication infrastructures. It is deployed automatically and invisibly in end users’ browsers and uses per-session cryptographic keys refreshed on every user or system interaction to maintain persistent session validation without requiring re-authentication. Rather than adding another MFA factor, Relock creates cryptographic continuity across the entire session and evaluates session integrity via cryptographically bound tokens. When a session is hijacked, inconsistencies are detected at the next interaction, the session is terminated, and a breach signal is generated.

Relock is designed to be identity-provider-agnostic and compatible with existing authentication flows, application logic, and both modern and legacy systems. Integration is supported through a browser agent or lightweight SDK, with added value from OpenTelemetry and CAEP Transmitter capabilities to improve incident response and policy enforcement while limiting false positives. Key challenges include potential privacy concerns related to continuous contextual tracking, early-stage scaling constraints, and an unfinished pricing and licensing model.

Interesting Facts

• Relock was founded in 2024.
• The company is headquartered in Austin, Texas, USA.
• Relock has roots in Poland.
• The company is at the pre-seed funding stage.
• Relock’s market segment is continuous authentication and breach prevention.
• The licensing model is still in development.
• Geographic focus includes North America and Europe.
• The solution deploys invisibly into end users’ browsers.
• Per-session cryptographic keys are refreshed with every user or system interaction.
• Integration support includes OpenTelemetry and CAEP Transmitter capabilities.

Notable Quotes

• “Traditional multifactor authentication (MFA) methods, while essential, are increasingly insufficient against sophisticated threats such as phishing, session hijacking, and token replay.”
• “Their mission is to eliminate sensitive data breaches through secure-by-default mechanisms that enhance both security and user experience based on cryptographic mutual trust.”
• “Rather than introducing yet another MFA factor, Relock establishes cryptographic continuity for each session, verifying user trustworthiness based on real-time interaction.”
• “If a session is hijacked, the service automatically identifies inconsistencies upon the next interaction, terminates the session, and signals the breach.”
• “Relock doesn’t aim to replace existing solutions.”
• “The future of authentication lies in cryptographic, context-aware, and user-transparent solutions.”
• “Overlay solutions like Relock, which offer passive session integrity validation without disrupting user experience or requiring architectural overhauls, are increasingly attractive.”
• “Continuously proving the client’s trustworthiness throughout the entire session becomes a critical capability of any truly secure and phishing-resistant authentication solution.”
• “Relock’s model is particularly well-suited for high-security and hybrid environments, where legacy constraints prevent adoption of modern identity protocols.”
• “Relock has the potential to define a new category in identity security: one that bridges current limitations and sets the foundation for zero-friction digital trust.”