iProov has become the first biometric vendor to meet the requirements of the National Institute of Standards and Technology’s newly updated Digital Identity Guidelines, known as Special Publication 800-63-4.
The company’s conformance was independently verified through a combination of recent tests and certifications, including ISO-accredited evaluation against the CEN TS 18099 standard for injection attack detection and FIDO Face Verification Certification for presentation attack detection. The results establish that iProov’s biometric liveness system meets the strengthened requirements for high-assurance identity proofing under the new federal guidelines.
The NIST SP 800-63-4 update introduces specific provisions addressing deepfakes, spoofing, and other AI-generated attacks. It also raises the bar for phishing-resistant authentication at the highest assurance level (AAL3). While developed for federal use, the NIST framework is widely regarded as a global benchmark and is often adopted by governments and enterprises for trust frameworks and cybersecurity compliance.
London-based iProov said its Dynamic Liveness technology, powered by its patented Flashmark illumination process, can detect and block video injection and replay attacks that bypass traditional liveness checks. The company operates a continuous threat-monitoring program through its Security Operations Center to track and mitigate emerging generative-AI risks.
“Biometric verification has become the root of trust for authenticity in the AI world,” said iProov founder and CEO Andrew Bud. “Gen-AI-based attacks are now too sophisticated for legacy systems to stop them.”
The announcement follows a series of developments in 2025 highlighting both the potential and the risks surrounding deepfake-resilient authentication. In September, iProov identified a sophisticated iOS-based video injection tool capable of bypassing weaker liveness checks, underscoring the urgency of adopting more advanced biometric protections. The company also expanded its airport identity-verification deployments earlier this year to improve passenger throughput and enhance spoof-resistance in live environments.
In October, regulatory filings showed that iProov was tightening its cost base amid an increasingly competitive biometrics market. The new NIST recognition may bolster its standing as governments and enterprises look to align with the updated identity-assurance framework.
The NIST SP 800-63-4 validation marks a significant step for vendors seeking to align with the U.S. government’s digital-identity modernization push. The standard’s new requirements for injection-attack resilience, fairness testing, and accessibility are expected to influence procurement criteria across multiple sectors, including finance and public-sector services.
iProov’s customer base includes ID.me, which uses biometric verification to protect access to Internal Revenue Service and Department of Veterans Affairs services. The company has also partnered with government agencies in the United Kingdom, Singapore, and the United States on secure digital-identity projects.
–
By the ID Tech Editorial Team
