START Project
States Taking Action Against Real Threats
Security Foundation
States Taking Action Against Real Threats (START) is a strategic initiative that enables states to prevent ransomware and cyber breaches, be prepared for quantum computing threats, and protect citizens, economies, and critical infrastructures.
START creates a unified, preventive, and resilient security posture across state agencies, departments, programs, and user groups. It is a proactive initiative that is scalable, cost effective, and minimally burdensome to both the cybersecurity workforce and users, yet comprehensive and powerful enough to stop fraudsters and attacks before they occur. ​
Security. Simple. Powerful. Affordable.
Quantum-ready security systems
A high-value security asset specific to the needs of the state. ​
A new quantum-ready security system is built specific to the needs of each state—providing the foundation for security that is universal and consistent across state agencies, programs, and user groups. Each system is a high-value security asset containing multiple modules enabled with agentic intelligent agents. It is scalable, powerful, cost effective, and minimally burdensome to states, the cybersecurity workforce, and users.
State security systems serve as the backbone of cybersecurity, fraud, and risk strategies, allowing states to control and enforce security protocols to secure critical assets and prevent-wide-ranging cyberattacks and fraud—while protecting citizen data and privacy.
Security Credentials & Protocols
Powerful new security protocols are implemented through START that follow users, whether employees, citizens, contractors, or partners, throughout the user lifecycle—from onboarding to confirmation for access.
​
Uniqueness of Users
States ensure that all users—employees, contractors, and citizens—are unique, without the use of ID documents and data. This enables states to prevent threats such as synthetic fraud, impersonation, credential sprawl, and imposter employees—along with the resulting risks, inefficiencies, and costs. States can stop criminals attempting to fraudulently receive unemployment insurance and other program assistance, without relying on third-party identity providers.
​
Security Credentials Replace Passwords
A new Security Credential is implemented that is unique, device-agnostic, and nontransferable--and is controlled by the state, not its users. Security credentials are granted by the state to all users: employees, officials, contractors, partners, citizens, and residents.​
Confirmation Replaces Authentication
​
START introduces a confirmation protocol that confirms the unique user—versus authenticating a device or credential. Users are quickly and easily confirmed in person or remotely when they apply for employment, request services, or apply for programs.