Your z/OS password quality guarantor and login protector

Harden your “z entrance area” guaranteeing most safe passwords and ultimate protection of the authentication (“login”) services – both in real-time!

z/OS penetration tests and audits clearly prove: Weaknesses in password and login security lead to a particularly high vulnerability – and quick success for the attacker. Why? First, although RACF does sport some login-related protection features and offers supplemental products, it still does not provide sufficiently sensitive (“filigree”) and automated security controls actually required in the fields of login and password security. Second, these are usual omissions made by the mainframe user himself because of a lack of real-time quality assurance, monitoring and audit in the areas of user IDs, passwords, phrases, and certificates.

As a powerful, cost-effective and hardware-free solution, SF-LoginHood paves the new integral path to the state-of-the-art protection of the z/OS platform in the area of the password and login security. Our company’s independence allowed a uniquely relentless and effective identification of all risks associated with the z platform in order to


Guarantee maximum password and phrase quality


Provide maximum protection against theft of any authentication-related data


Employ additional hardening of the authentication mechanisms that prevent their abuse 

Ensure transparency and completeness in effectively logging 100% of all relevant activities, and to

Establish real-time anomaly detection on the system, administration and user levels

This spectrum of necessary precautionary measures in the “z entrance area” clearly proves both. Simply setting up a list of forbidden passwords is just not enough anymore. Do not forget that RACF still requires you to program an exit in Assembler to realize that measure. Merely implementing audit solutions to reveal problems “ex-post” is also too little too late.

Euro-SOX, Basel II, PCI, ISO, BSI, DOD, and other standards make additional pro-active measures in the login environment almost a 100% duty – not only for financial service providers – and are a prerequisite for receiving the certificate of compliance. SF-LoginHood was developed specifically for this purpose in a needs-based approach based on 15 years of practical experience. You can say it is an optimally aligned and overhead-free bundle of effective measures that tackles all of the above-mentioned problems at the root by completing the z/OS security based on RACF. SF-LoginHood is therefore the ideal solution for all mainframe users across all business sectors and company sizes. It is also the “perfect match” for all pragmatic z/OS users who dismiss any “monitoring or compliance overkill” and just desire a strong and state-of-the-art protection for their sensitive “z/OS entrance area”.

Do you already use or plan to use any Smart Card, Token or Identity Management solution? That’s a good idea! SF-LoginHood does not become superfluous. On the contrary, only SF- LoginHood completes these measures, and could even be a low-cost alternative to them.

Finally, the z/os mainframe becomes an impregnable fortress!

Automate your IT Security and Compliance to the max today!

Solutions to the max.

Cross-Platform Security Solutions

Constant monitoring and auditing of all computer systems is state of the art. For large enterprises it also requires a real-time integration of the mainframe platforms governing event monitoring, vulnerability assessment and compliance checking. With SF-Sherlock and SF-NoEvasion, your security monitoring solution is powerful and can be implemented across your enterprise through the easy integration of the mainframe.


Over the past several years, compliance has become more and more an important issue, but also a tedious task. Our SF solutions assist you in automating the resulting workload to the max by also covering the entire mainframe platform - thanks to a 360-degree approach.


With SF-Sherlock, you can also protect your mainframe platform against attacks and combat high-level risks. Thanks to our max approach this also includes malicious code and exploits. Yes, both of these are real risks on the mainframe platform!

SF Solutions

All SF solutions are invented and developed in-house. Therefore, you can count on both our unique expertise and our high level of motivation in providing you with solutions and services with maximum performance, effectiveness, and productivity.

Are you expecting a governmental audit of your mainframe platform soon, as by the BaFin or ECB?

Let us help you prepare your mainframe security and compliance.

++800 - 37 333 853 or simply dial: ++800 - DRFEDTKE

Call our world-wide toll-free number now!

(++ represents the prefix for international calls; in most countries it is 00; in the U.S. it corresponds to 011)

News & IT Security Forum

08/2018 – SF-SafeDump supports the integration of external confidential data scanner (CDS) and data leakage prevention (DLP)

Companies dealing with extremely sensitive data often use confidential data scanner (CDS) or data leakage prevention (DLP) applications to do a general scan of all documents before they may leave house. It’s important to emphasize that such CDS and DLP solutions do not perform anonymization, but instead scan documents (files) for possible sensitive content and create a corresponding report. With SF-SafeDump’s new PTF level 017 it’s easy to exploit the performance of any CDS or DLP, namely, to double-check any anonymized dumps and log files as regards possible “leftovers.” But we don’t want to give you the wrong impression: the principal quality check, which is highly comprehensive and fully sufficient, also happens within SF-SafeDump. This means that you are safe and covered without a CDS or DLP. You should also be aware of the fact that SF-SafeDump covers many more categories of sensitive information than a CDS or DLP solution.

Overall, the integration of a given CDS or DLP solution into SF-SafeDump is fully optional. On the other hand, it’s a nice feature, since a CDS/DLP scan may increase a company’s internal level of compliance and promote good feelings while applying the “golden rule” of mandatory document scanning fully effectively to in fact any document, i.e. even to dump and log files originating from the mainframe. We will definitely support any such scenario and won’t take it “personally” if users extend the already powerful quality assurance provided by SF-SafeDump through additional review capabilities. We are confident about this, since SF-SafeDump learns from the results of the CDS or DLP. Just to be clear: it’s still the goal and duty of SF-SafeDump to leave all CDS or DLP reports empty.

With PTF Level 017, everything is provided for such an integration of a CDS or DLP application and even to fully automate the related procedures; the tools provided also solve all problems of best practice that occur within such an integration. The new PTF level 017 is now released and ready for download.


07/2018 – SF-Sherlock’s new PTF level provides performance improvements for environments with massive amounts of event data (SIEM, Splunk, etc.)

SF-Sherlock, and thus also SF-NoEvasion, has passed additional intensive performance reviews – driven by z/OS installations that process huge amounts of event data within their z/OS-SIEM, log archive, or Splunk integration. Larger amounts of event data easily result from the monitoring of DB2, CICS, MQ, Webshpere as well as other subsystems.

We achieved these great results by using the latest machine instructions supported by System Z machines as well as by further improving SF-Sherlock’s “event consolidation” feature supported by the real-time sniffer. Especially if your SIEM, log archive, or operational intelligence solution is  licensed by the data volume it receives the event consolidation feature is of great benefit and will help you to reduce costs by not wasting your licensed data volume on redundant event data.

The new PTF level 080 is now released and ready for download.

Join our newsletter list

Worldwide toll-free phone number

++800 - 37 333 853
or simply dial:
++800 - DRFEDTKE

+41 41 710 4005

(++ represents the prefix for international calls; in most countries it is 00; in the U.S. it corresponds to 011)

Find Us


Seestrasse 3a, 6300 Zug, Switzerland


Visitors & Training

Dammstrasse 19, 6301 Zug, Switzerland


Social Media

Xing → Linkedin →

Write Us


copy the address

Technical support and hotline: hotline@enterprise-it-security.com

copy the address