What runs today, and what we’re raising to build.

Every login in production rests on a secret — a password, a code, a key. Secrets get phished, they leak, and now they get faked by AI, cheaply, from anywhere on the planet. That is where account takeover and social-engineering losses come from.

The one thing an attacker on the other side of the world cannot fake is being physically present with you. Almost nothing in security uses that today.

That is the opening. KeyPulse turns physical presence into something a computer can actually check, at the moment it matters.

KeyPulse Secure Chain: when you authorise a sensitive action, your phone sends a pulse into the room. It scatters off the walls and objects and comes back as a pattern only that room, at that instant, could produce. Your phone and your watch both catch it — if they read the same pattern, they were in the same place. That match is the proof, and it works exactly once.

It is a full working ceremony on real hardware — a card, a phone, a backend, real cryptography. We have shown a recording cannot be replayed, that one stolen device is not enough, and that a device down the hall does not pass.

Today it is a prototype, not a shipped product. The security page lays out exactly what is proven and what is not — no blur.

The room’s response is not a yes/no signal — it is rich. Its shape, its surfaces, the air, what is in it: all of it folds into one pattern with enormous natural entropy, different in every place and every moment. A signature that did not exist before and will not exist after.

Our goal is to draw the key straight out of that entropy — a value the devices in the room rebuild together and nobody outside can guess. If it holds, the best way to protect a password is that it never exists: it is re-made from the room, only when you need it, only where you are.

Getting there, and having it independently checked and certified, is what we are raising for. It is real research, and it is the whole point.

KeyPulse was born inside IBF Medical from a simple conviction: certain digital operations can be secured not only by what a user knows or holds, but also by proof drawn from the physical world, produced at the exact moment an authorisation is requested.

Our patented technology adds a new layer of trust: it lets several devices compare information drawn from the same physical event and their shared environment to establish their co-presence at the moment of authorisation.

KeyPulse doesn’t replace existing security mechanisms — it adds a physical dimension to them. This approach opens the way to simpler authentication and authorisation experiences, with a strong ambition: making the password unnecessary wherever it applies.

To carry this shift, KeyPulse relies on a team with complementary strengths: Sandra Guerrier brings over twenty years of entrepreneurial experience and market knowledge; Magali Neveu steers financial strategy and growth structuring; Cyrille Lecroq carries the technology and its development.

A strong technology isn’t enough. It takes a team that can turn it into a market.

Together, they bring the three things scaling requires: protected technology, a real business read, and the ability to execute.

With KeyPulse, we’re not building a new password. We want to make the password unnecessary.

What is proven, what is a goal, and what is still open — laid out straight.

Demonstrated on real hardware

• →A working end-to-end ceremony — an ESP32-C3 card, an Android app and a backend — with real cryptography.
• →Resistance to replay of a recording of a past ceremony (each ceremony is bound to a per-operation challenge).
• →That stealing the phone alone, or the card alone, is not enough to complete a ceremony.
• →That two close devices produce compatible observations while a distant device does not.

Open — and stated as such

• →Real-time physical relay: KeyPulse is designed to raise the cost and change the nature of that attack; making it impossible is not claimed. Characterisation and mitigations are active research.
• →Hardware assurance: the current card is off-the-shelf parts. A Secure Element and Secure Boot are the product trajectory, not a present property.
• →Entropy, environment modelling and fuzzy-extraction bounds are studied, not productised.

What the seed funds

• →Take the environmental signature from lab result to a characterised, reproducible method — with published bounds on what an adversary outside the room can synthesise.
• →Independent security review and certification of the ceremony and the signature.
• →A published relay-resistance characterisation and the first mitigations in the protocol.
• →Hardened reference hardware (Secure Element, Secure Boot), a productised SDK, and one or two design-partner integrations in a high-assurance authorization flow.

The deck is shared on request rather than as a public download — it lets us keep it current and follow up properly. Book a briefing or use the form.