Overview

Product video
Cisco Duo provides the only security-first Identity and Access Management (IAM) solution to protect organizations from identity-based threats. Duo integrates all necessary components to serve as the sole IAM platform, while operating as a unified defense layer across your existing identity infrastructure.
Duo Essentials is a strong security-first IAM solution that includes:
Duo Directory: simplify your identity stack using Duo as your source of truth for identity and security, removing the need for an external authentication source.
Phishing-resistant MFA: prevent MFA bypass with Duo Proximity Verification by verifying the authentication and access devices are in close proximity.
Duo Single Sign-On (SSO) with Duo Central: provide a consistent user experience and easy application access with a single login.
AI Assistant: AI-powered conversational interface that helps administrators in their daily workflows.
Complete Passwordless: enable an end-to-end passwordless experience from initial enrollment to authentication without falling back to passwords or reliance on third-party identity providers.
Trusted Endpoints: block access from unknown, unregistered devices and only allow trusted devices to gain access to resources.
Before subscribing, you are required to sign up on the Duo website https://signup.duo.com to create a Duo ID. For questions related to product, pricing or private offers, reach out to our team at sales@duo.com
Highlights
- Duo delivers a unified, security-first IAM solution with robust, phishing-resistant multi-factor authentication, protecting organizations from identity-based threats across their entire authentication chain.
- Duo simplifies identity management by consolidating components like Duo Directory, single sign-on, and passwordless authentication, reducing total cost of ownership and streamlining both user access and administrative tasks.
- The platform leverages AI for continuous identity monitoring and offers features such as Trusted Endpoints and an AI-powered assistant, ensuring proactive threat detection and enhanced productivity without complex implementations.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide

Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
|---|---|---|
Duo Essentials | per 50 users | $1,800.00 |
Vendor refund policy
Please refer to the seller's website.
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
For support information please visit - https://duo.com/support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

Standard contract
Customer reviews
Strong authentication and device checks have protected sensitive access and mitigated attacks
What is our primary use case?
Cisco Duo is primarily used for MFA configuration and to protect applications with the MFA requirement.
I can provide a specific example of how I use Cisco Duo to protect an application. We protect applications such as Microsoft login or internal applications. Before logging into any applications that require strict measures for our company, we add Cisco Duo before the authentication from Microsoft or internal authentication. Whenever there is a login request for a particular site, users are asked to enter the Cisco Duo push prompt or provide the OTP received via SMS or phone call. Without that, it will not authenticate the user to log into particular sites.
Alongside MFA, we use Cisco Duo for device health. For certain applications, we use criteria for people in senior leadership, ensuring that if their machine meets certain criteria such as having a firewall enabled, encryption enabled, and connected to a legitimate network, then and only then can they log into a particular site.
How has it helped my organization?
Cisco Duo has positively impacted my organization. We were able to mitigate compromised sessions by using Cisco Duo. In certain scenarios, when users receive MFA requests from unfamiliar locations, they know that it is not them trying to log in with their account, which has been the best feature we have used.
This has helped my users multiple times. Although I do not have an exact number, there have been instances, such as two or three times a month, where we have successfully mitigated the scenario. This has happened not only with regular users but also with senior leadership, showing that in both scenarios, we have been able to strengthen the environment through Cisco Duo.
What is most valuable?
Cisco Duo offers several best features, including a really cool interface. Anyone can become familiar with Cisco Duo in a day or two. Furthermore, the reporting, logs, and management capabilities are exceptional with Cisco Duo, which stands out as its best feature.
What makes the interface and management features stand out for me is that if I want to filter out the Android devices connected for a particular version, such as filtering how many users were connected using Android 13, I can easily filter that, which is not available in what we are currently using. This is a great feature. Additionally, there are custom criteria we can use in Cisco Duo, such as filtering by iOS or anything else we need according to our requirements.
What needs improvement?
I do not see any major flaws with Cisco Duo. According to our standards, we are very satisfied with Cisco Duo.
There is nothing I wish was a bit better, as what we need is already present in Cisco Duo, and as I mentioned, we have been using Cisco Duo for six to seven years.
For how long have I used the solution?
I have been using Cisco Duo for around six to seven years.
What do I think about the stability of the solution?
Regarding Cisco Duo's accuracy and reliability of output, especially in terms of authentication and security alerts, I find it very solid. Cisco Duo's accuracy and reliability of output is near perfect. You cannot go wrong with Cisco Duo's authentication policy and reporting. Everything can be easily trusted.
What other advice do I have?
I have not used Cisco Duo's AI capabilities as of now.
My advice for others looking into using Cisco Duo is that if you are really looking for a third-party application that can protect your organization or users from compromised sessions, then Cisco Duo is the perfect choice because it has the features and the trust of Cisco, making it really helpful for any organization to trust it blindly.
I would rate Cisco Duo a nine out of ten on a scale of one to ten. The reason I chose nine out of ten is that I believe no product is a perfect ten, so nine is the best that can be given to someone or any product.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Multi-factor access has strengthened our VPN security and reassured users after attacks
What is our primary use case?
We are using Cisco Duo in our company. Our primary use cases for Cisco Duo are mainly for our VPN connectivity for multi-factor authentication, and we are looking at extending it to other areas within our infrastructure for MFA deployment as well.
Before implementing Cisco Duo, we were concerned about phishing or credential-based attacks, especially since we experienced a ransomware attack, so we needed to ensure that we put in additional authentication for our platform. We started with that for our VPN connectivity where it will no longer be just a matter of username and password, but then we needed to step up with another layer of security.
When evaluating our identity strategy, we initially were looking for a standalone MFA tool, but then we wanted to extend Cisco Duo to our other environments because, for instance, our ERP system, we want to extend that authentication aspect to that area and then also other areas within our infrastructure. It is going to be a comprehensive solution for us, but we are still in the deployment stage. The first thing that we started with was the VPN aspect, but then we are extending it to other areas as well.
What is most valuable?
Cisco Duo's visibility into identity-based risks has improved our ability to manage security very well. Over the past four or five months that we started using it, we have noticed that it is really helping us.
Cisco Duo has helped us manage the security of both human users and non-human identities across our environment very well.
Cisco Duo has improved our operational efficiency, because we had attacks and were looking at getting another layer of security in terms of our infrastructure. Earlier on, you would only need to have your username and password to be able to connect to our VPN. But with another layer of Cisco Duo, it is helping us in terms of securing our users. Our users are now more comfortable after the attack in terms of being able to use that connectivity access, which is a key thing for us. It has really been very helpful.
What needs improvement?
I do not have a straight answer for how Cisco Duo can be improved at this time.
With the implementation that we are going through right now, I was asking a question about how we can use Cisco Duo on an application that is using its own internal authentication. I think it is more or less about us making sure that that kind of application is using perhaps our AD for the authentication, and that is where we would be able to implement Cisco Duo. I was just looking to find out whether it is possible to use it on a third-party application that is using its own internal authentication.
For how long have I used the solution?
Cisco Duo has been in use for less than a year. I would estimate approximately four to five months, which is not very long.
What do I think about the stability of the solution?
Cisco Duo is a stable product.
What do I think about the scalability of the solution?
Cisco Duo is scalable enough for our needs.
Currently, the number of people using Cisco Duo in our company is about fifteen, consisting of our management team and our executive team.
How are customer service and support?
Regarding the technical support by Cisco, I would say their products are very good. We have been using Cisco products for so many years, so we do not really have any issue with using Cisco products. They have been very secure, and in terms of performance, everything is very good for us.
I would rate their technical support a nine.
For response time, there may be a little bit of improvement needed because sometimes you have to wait a little bit, not too long, but sometimes you really want a quick response, and it is not always like that. There are also times when you need to understand some of these things.
Which solution did I use previously and why did I switch?
Before Cisco Duo, we were not using anything at all for MFA.
How was the initial setup?
The deployment process for Cisco Duo is straightforward for us and is not a difficult thing. It is not an issue.
What was our ROI?
I would not be able to talk much about cost reduction concerning Cisco Duo because since we deployed it, we have not engaged in any additional cost or anything like that, so I would not say that it has really helped us in terms of reduction of cost or an increase in expenditure. However, it is a product that is really helping us, so I think the cost-benefit of having it is something that we really appreciate.
What's my experience with pricing, setup cost, and licensing?
Regarding the pricing, what actually happened was that we got the product purchased through our HQ, so the costing aspect and all those things sit with our HQ. I do not have much information in terms of the costing when it comes to the procurement of it.
Which other solutions did I evaluate?
Before choosing Cisco Duo, all those evaluations were done from our HQ, so we were given the product to integrate into our system.
What other advice do I have?
Overall, I would give Cisco Duo a rating of nine out of ten.