Your behaviour is the key.
Passwords check who you are once, at login. BehaviorKey keeps checking quietly throughout the session, learning how each user types and touches the screen and combining it with real-time context to spot an intruder instantly.
The problem
Stolen credentials walk straight through the front door.
Static methods such as passwords and fixed biometrics verify a user only at the start of a session. Once an attacker has valid credentials, or a device is left unlocked, nothing checks who is really using it.
of breaches started with stolen or compromised credentials, the most common initial attack vector.
on average to identify and contain a breach that involved stolen credentials.
global average cost of a data breach.
Source: IBM Cost of a Data Breach Report 2024.
How it works
Authentication that never stops.
BehaviorKey runs silently in the background. Legitimate users are never interrupted.
Learn
Builds a profile from typing rhythm, touch pressure, swipe and tap patterns.
Sense context
Adds real-time cues such as device, location and time of use.
Score
Continuously compares live behaviour with the profile to produce a trust score.
Respond
On anomaly, the session is challenged, re-verified or locked.
Product
Security that adapts to the person.
Based on a framework for context-aware behavioural biometrics.
Keystroke dynamics
Typing rhythm and timing reveal who is at the keyboard.
Touch biometrics
Swipe, tap and pressure patterns on mobile screens.
Context aware
Real-time contextual cues reduce false alarms as habits change.
Privacy-preserving
Designed to analyse behaviour patterns, not the content users type.
Who it's for
For organisations where one login isn't enough.
Banking & fintech apps
Detect account takeover mid-session, not after the transfer.
Enterprises
Protect sensitive systems on shared or unattended devices.
Healthcare & government
Keep confidential records accessible only to the right person.
The research
A framework for context-aware continuous authentication.
- Static passwords and unvarying biometrics only verify users at session start.
- Proposes a framework combining behavioural patterns with real-time contextual cues.
- Designed to adapt to diverse user behaviours and detect anomalies robustly.
- Includes privacy-preserving practices as part of the framework.
Pon Dinesh Kumar, M., Patel, S. C., Lamkuche, H. S., Itmazi, J. A., & Al Sherideh, A. (2025). Beyond Password's: Context Aware Behavioral Biometrics for Continuous Authentication. Studies in Systems, Decision and Control. Springer.
Team
Built by security engineers.
Founded in 2025 by a student team from the faculty below.
Faculty of Engineering & Information Technology
Cybersecurity, behavioural modelling and platform engineering.
FAQ
Questions we hear often.
Does BehaviorKey replace passwords?
It complements them. Login works as usual, then BehaviorKey keeps verifying the user for the rest of the session.
Does it record what I type?
No. It analyses how you type and touch, such as timing and pressure, not the content.
What happens if my behaviour changes?
Contextual cues and adaptive profiles account for normal changes like a new device or posture.
How do we integrate it?
Through an SDK for web and mobile apps. Contact us for a pilot.
Make every minute of the session trusted.
We are partnering with banks, enterprises and app developers to pilot BehaviorKey.