Your z/OS password quality guarantor and login protector

Harden your “z entrance area” guaranteeing most safe passwords and ultimate protection of the authentication (“login”) services – both in real-time!

z/OS penetration tests and audits clearly prove: Weaknesses in password and login security lead to a particularly high vulnerability – and quick success for the attacker. Why? First, although RACF does sport some login-related protection features and offers supplemental products, it still does not provide sufficiently sensitive (“filigree”) and automated security controls actually required in the fields of login and password security. Second, these are usual omissions made by the mainframe user himself because of a lack of real-time quality assurance, monitoring and audit in the areas of user IDs, passwords, phrases, and certificates.

As a powerful, cost-effective and hardware-free solution, SF-LoginHood paves the new integral path to the state-of-the-art protection of the z/OS platform in the area of the password and login security. Our company’s independence allowed a uniquely relentless and effective identification of all risks associated with the z platform in order to


Guarantee maximum password and phrase quality


Provide maximum protection against theft of any authentication-related data


Employ additional hardening of the authentication mechanisms that prevent their abuse 

Ensure transparency and completeness in effectively logging 100% of all relevant activities, and to

Establish real-time anomaly detection on the system, administration and user levels

This spectrum of necessary precautionary measures in the “z entrance area” clearly proves both. Simply setting up a list of forbidden passwords is just not enough anymore. Do not forget that RACF still requires you to program an exit in Assembler to realize that measure. Merely implementing audit solutions to reveal problems “ex-post” is also too little too late.

Euro-SOX, Basel II, PCI, ISO, BSI, DOD, and other standards make additional pro-active measures in the login environment almost a 100% duty – not only for financial service providers – and are a prerequisite for receiving the certificate of compliance. SF-LoginHood was developed specifically for this purpose in a needs-based approach based on 15 years of practical experience. You can say it is an optimally aligned and overhead-free bundle of effective measures that tackles all of the above-mentioned problems at the root by completing the z/OS security based on RACF. SF-LoginHood is therefore the ideal solution for all mainframe users across all business sectors and company sizes. It is also the “perfect match” for all pragmatic z/OS users who dismiss any “monitoring or compliance overkill” and just desire a strong and state-of-the-art protection for their sensitive “z/OS entrance area”.

Do you already use or plan to use any Smart Card, Token or Identity Management solution? That’s a good idea! SF-LoginHood does not become superfluous. On the contrary, only SF- LoginHood completes these measures, and could even be a low-cost alternative to them.

Finally, the z/os mainframe becomes an impregnable fortress!

Automate your IT Security and Compliance to the max today!

Solutions to the max.

Cross-Platform Security Solutions

Constant monitoring and auditing of all computer systems is state of the art. For large enterprises it also requires a real-time integration of the mainframe platforms governing event monitoring, vulnerability assessment and compliance checking. With SF-Sherlock and SF-NoEvasion, your security monitoring solution is powerful and can be implemented across your enterprise through the easy integration of the mainframe.


Over the past several years, compliance has become more and more an important issue, but also a tedious task. Our SF solutions assist you in automating the resulting workload to the max by also covering the entire mainframe platform - thanks to a 360-degree approach.


With SF-Sherlock, you can also protect your mainframe platform against attacks and combat high-level risks. Thanks to our max approach this also includes malicious code and exploits. Yes, both of these are real risks on the mainframe platform!

SF Solutions

All SF solutions are invented and developed in-house. Therefore, you can count on both our unique expertise and our high level of motivation in providing you with solutions and services with maximum performance, effectiveness, and productivity.

Are you expecting a governmental audit of your mainframe platform soon, as by the BaFin or ECB?

Let us help you prepare your mainframe security and compliance.

++800 - 37 333 853 or simply dial: ++800 - DRFEDTKE

Call our world-wide toll-free number now!

(++ represents the prefix for international calls; in most countries it is 00; in the U.S. it corresponds to 011)

News & IT Security Forum

10/2018 – SF-DeepDive – new due diligence (DD) software package for mainframe outsourcers

When it comes to making decisions about the future of a mainframe, outsourcing is one option to consider. Of course, both sides involved in such a step have their own interests, and there is even tough competition among today’s outsourcing service providers.

The new SF-DeepDive due diligence (DD) software package provides exactly what a mainframe outsourcer needs to get a clearer insight into given systems in a short amount of time.
As an option, it can be combined with local assessment services from our company.

08/2018 – SF-SafeDump supports the integration of external confidential data scanner (CDS) and data leakage prevention (DLP)

Companies dealing with extremely sensitive data often use confidential data scanner (CDS) or data leakage prevention (DLP) applications to do a general scan of all documents before they may leave house. It’s important to emphasize that such CDS and DLP solutions do not perform anonymization, but instead scan documents (files) for possible sensitive content and create a corresponding report. With SF-SafeDump’s new PTF level 017 it’s easy to exploit the performance of any CDS or DLP, namely, to double-check any anonymized dumps and log files as regards possible “leftovers.” But we don’t want to give you the wrong impression: the principal quality check, which is highly comprehensive and fully sufficient, also happens within SF-SafeDump. This means that you are safe and covered without a CDS or DLP. You should also be aware of the fact that SF-SafeDump covers many more categories of sensitive information than a CDS or DLP solution.

Overall, the integration of a given CDS or DLP solution into SF-SafeDump is fully optional. On the other hand, it’s a nice feature, since a CDS/DLP scan may increase a company’s internal level of compliance and promote good feelings while applying the “golden rule” of mandatory document scanning fully effectively to in fact any document, i.e. even to dump and log files originating from the mainframe. We will definitely support any such scenario and won’t take it “personally” if users extend the already powerful quality assurance provided by SF-SafeDump through additional review capabilities. We are confident about this, since SF-SafeDump learns from the results of the CDS or DLP. Just to be clear: it’s still the goal and duty of SF-SafeDump to leave all CDS or DLP reports empty.

With PTF Level 017, everything is provided for such an integration of a CDS or DLP application and even to fully automate the related procedures; the tools provided also solve all problems of best practice that occur within such an integration. The new PTF level 017 is now released and ready for download.


Join our newsletter list

Worldwide toll-free phone number

++800 - 37 333 853
or simply dial:
++800 - DRFEDTKE

+41 41 710 4005

(++ represents the prefix for international calls; in most countries it is 00; in the U.S. it corresponds to 011)

Find Us


Seestrasse 3a, 6300 Zug, Switzerland

Visitors & Training

Dammstrasse 19, 6301 Zug, Switzerland

Social Media

Xing → Linkedin →

Write Us

copy the address

Technical support and hotline
copy the address

Legal and compliance
copy the address