Confidential Information Memorandum

Strategic
Acquisition
Opportunity

Australia's Biometric Cyber-Defence Platform

May 2026Start with identity
Scroll

The Opportunity

Why Daltrey. Why now.

Three forces are converging at once — and no incumbent is positioned to answer all three.

AI Agent Crisis

0%

surge in face-swap attacks (iProov, H2 2023)

Autonomous AI agents and deepfakes now exploit credentials at machine speed. Traditional MFA cannot verify human presence.

Regulatory Mandates

0+

new reporting entities (AUSTRAC)

AUSTRAC Tranche 2, ASD Essential Eight, and age-verification laws are creating compulsory demand.

Market Explosion

$0B+

identity M&A in 2025

Identity is the hottest cybersecurity subsector. Palo Alto paid ~$25B for CyberArk.

What Daltrey Does

Every other authentication solution trusts the device.
Daltrey trusts the person.

Verifies the Human

Multi-modal biometrics: face, iris, voice, fingerprint, behavioural.

Continuous Liveness

ISO 30107-3 liveness detection defeats deepfakes, 3D masks and AI agents.

Physical + Digital

A single credential for doors, VPN, applications and secure areas.

Enrol Once

Portable biometric credential — no per-transaction IDV friction.

Integrates via OIDC, SAML, Active Directory and FIDO2. Pre-built connectors for Okta, ForgeRock, Ping, Microsoft, Gallagher, Honeywell and IDEMIA.

Physical + Digital Convergence

One credential for the door and the desktop.

Daltrey's founding differentiator: a single verified biometric identity that governs both physical access (buildings, secure areas) and logical access (VPN, applications) — with one audit trail.

Physical access

DaltreyID authenticates people at doors, turnstiles and secure areas through established access-control platforms — no cards, no PINs.

Gallagher Command CentreIDEMIA VisionPassHoneywell

Logical access

The same identity unlocks VPN, SSO and applications via the Branch middleware — continuously re-verifying the human, not the device.

OktaPing / ForgeRockMicrosoft EntraOracle

Integrations are real, not roadmap: Daltrey has a standing partnership with Gallagher's REST API and an SDK integration with IDEMIA's VisionPass facial reader (iBeta PAD-tested). This unified physical + logical credential is what no MFA, IAM or IDV incumbent offers.

Competitive Positioning

No incumbent does all of this.

CapabilityDaltreyMFA ToolsIAM PlatformsIDV ProvidersDevice Bio
Verifies the personOne-time
Continuous auth
Multi-modal biometricspartial
Physical + digital
Liveness detectionpartial
AI-agent resistantpartial

Daltrey is complementary to IAM platforms — it integrates as a biometric identity provider, making it an ideal bolt-on acquisition.

Market Opportunity

A $150B+ addressable market, growing 10–18% CAGR.

Biometric Systems
$0B
$0B
12.3%
Passwordless Auth
$0B
$0B
17.1%
Identity Verification
$0B
$0B
15.4%
IAM Platforms
$0B
$0B
10.4%
Fraud Detection
$0B
$0B
15.5%

Asia-Pacific is the fastest-growing region (18–22% CAGR). The Australian Government has committed A$2.9B to cybersecurity through 2030.

M&A Precedents

Identity is the hottest cybersecurity M&A subsector.

Palo Alto / CyberArk
Announced Jul 2025
~$25B
Closed Feb 2026. “Identity for the AI era.”
Ping Identity / Keyless
Oct 2025
Undisclosed
Most analogous: IAM acquires biometric auth.
Entrust / Onfido
Apr 2024
~$400–650M
Biometric IDV; price reported, not disclosed.
Accenture / CyberCX
Aug 2025
~A$1B+
Accenture's largest-ever security deal.
Thales / Tesserent
2023
~A$173M
AU cyber consolidation by a defence prime.

Identity is the most active cybersecurity M&A subsector. Strategic valuation multiples range from mid-single-digit to 20x+ revenue, with acquirers paying premiums for capability gaps.

Regulatory Catalysts

Compulsory demand — not discretionary.

AUSTRAC AML/CTF Tranche 2

Jul 2026

80,000–100,000 new reporting entities requiring identity verification.

ASD Essential Eight

Now

Phishing-resistant MFA at Maturity Level 2 — biometric authenticators recognised.

AU Age Verification Act

Dec 2025

Penalties up to A$49.5M for non-compliance.

UK Online Safety Act

2025

Penalties of £18M or 10% of global turnover.

PCI DSS 4.0

Mar 2025

Universal MFA for cardholder data environments.

EU eIDAS 2.0

Late 2026

Digital identity wallets with biometric enrolment across all member states.

Natural Acquirers

A clear field of natural acquirers.

Tier 1 — Highest Strategic Fit

Ping Identity / Thoma Bravo

Already acquired Keyless. Daltrey extends PingOne with multi-modal biometrics and AU government relationships.

Thales

Indirect minority via Tesserent (~7% equity). €2.4B cyber revenue. A natural pathway.

Entrust (Thoma Bravo)

Acquired Onfido. Daltrey extends them from one-time IDV to continuous biometric auth.

Tier 2 — Strong Strategic Fit

Palo Alto Networks

Building identity post-CyberArk. Human biometrics complements machine / privileged identity.

Okta ($2.61B revenue)

Daltrey already integrates. History of ~$100M tuck-in acquisitions.

Tier 3 — AU Banks (ANZ, CBA, Westpac, NAB) · Defence (Leidos, BAE) · CrowdStrike · DocuSign / Annature · AUCloud

Investment Highlights

Why this is a rare acquisition.

01

Only Solution in the Gap

No competitor simultaneously verifies the person, authenticates continuously, and converges physical + digital access.

02

Bolt-On Architecture

Middleware (Branch) integrates into existing IAM stacks. Zero disruption to an acquirer's customer deployments.

03

Regulation-Driven Demand

AUSTRAC Tranche 2 + ASD Essential Eight + age verification = compulsory adoption, not discretionary.

04

AI-Era Imperative

Biometric human-in-the-loop is the industry answer to autonomous AI-agent threats. A multi-year head start.

05

Sovereign Premium

IRAP-assessed PROTECTED hosting. B Corp certified. ISO standards leadership via CTSO. Unique in market.

06

Low-Cost, High-Value

Early-stage company. Tuck-in pricing versus $650M+ category benchmarks.

Biometric Cyber-Defence

Expression of Interest

For confidential enquiries regarding this opportunity, please register your interest below.

Or contact directly: michael@daltrey.com

Daltrey

Confidential Information Memorandum · May 2026 · OFFICIAL