DigiCert, Entrust, Keyfactor and Sectigo

About Entrust

Entrust sells identity-centric security products, including a Cryptographic Security Platform, public key infrastructure, hardware security modules, key and secrets management, identity verification and card issuance systems. Entrust says its cryptographic security works to reduce risk, protect sensitive data, and enable compliance at scale, from verified onboarding and card issuance to trusted access and transactions.^[1][2][5]

Entrust says its Cryptographic Security Platform unifies PKI, HSMs, certificate lifecycle management, and key and secrets management in a cryptographic trust layer for centralized visibility, governance, and automation. Entrust says deployment is on premises or as a cloud-based service. Entrust says the platform provides cryptographic inventory, CBOM support, and policy control to plan and govern algorithm transitions. The Entrust Cryptographic Security Platform enables organizations to discover, own, and govern cryptographic assets wherever their data lives. The platform's compliance management capability inventories cryptographic assets, imports and exports CBOMs, applies policy frameworks, and monitors risk and compliance posture from a unified dashboard.^[8]

Entrust Certificate Manager is a platform that discovers, inventories, monitors, and automates certificates across hybrid environments and multi-CA ecosystems. Entrust says Certificate Manager can issue, renew, and revoke certificates across Entrust and third-party CAs from a single control point. Certificate Manager covers discovery, audit, issuance, renewal, and revocation of certificates. Entrust says Certificate Manager delivers automated lifecycle management that scales with 47-day certificate lifecycles and growing machine identities. Certificate Manager can be deployed across on-prem, private, and public cloud environments. Entrust offers on-premises, cloud, or hybrid PKI solutions. Entrust IoT Security allows organizations to secure IT and OT devices through scalable machine and user identity management.^[5][10]

The Entrust Cryptographic Security Platform Key Manager, formerly KeyControl, is a keys and secrets management solution that combines key lifecycle management with a decentralized, vault-based architecture. Entrust says Key Manager automates the lifecycle of encryption keys, including key storage, backup, distribution, rotation, and key revocation. Entrust says BYOK and HYOK integrations with CSP Key Manager reduce reliance on cloud provider trust models. Entrust says Key Manager acts as a universal key management server for KMIP-compatible virtualized environments. Entrust says security and compliance teams use its solutions to centralize key control and enforce encryption policies.^[11]

Entrust says nShield HSMs move keys out of software and into tamper-resistant hardware. Entrust states that over 100,000 Entrust nShield HSMs are deployed globally across government, financial, and technology organizations with 150+ partner integrations. Entrust says the modules are FIPS 140-2 and 140-3 certified, and that nShield HSMs can be deployed on-premises, in the cloud, or hybrid. Entrust says its Security World architecture enables unlimited key storage without traditional HSM complexity. Entrust offers subscription-based access to dedicated nShield HSMs for cloud-based cryptographic services.^[10][12]

Entrust says Entrust Identity Verification is built on Onfido technology. Entrust says its identity verification supports KYC, AML, eIDAS 2.0, and other regulatory requirements. Entrust Identity Verification lets organizations design drag-and-drop verification workflows and validate identities using biometrics, documents, and trusted data sources. Entrust Identity Verification integrates with Microsoft Entra ID. Entrust adds identity verification within Okta workflows to determine when additional verification is required.^[5][13]

Entrust's Card Issuance Systems provide personalized, high-volume issuance across government and financial markets. Entrust offers a cloud-based IAM solution with multi-factor authentication (MFA), credential-based passwordless access, and SSO. Digital and electronic signature solutions from Entrust help establish trusted identities and ensure authenticity for digital documents, emails, code, and mobile devices. Entrust CloudControl provides unified security and visibility across hybrid clouds.^[10]

Entrust's Cryptographic Center of Excellence helps organizations move from awareness to action on post-quantum readiness. Entrust offers PQ readiness assessments, tools, and direct access to Entrust experts. Entrust says its PKI and HSMs support the NIST standardized PQC algorithms, and that its solutions support a hybrid approach combining today's algorithms with PQC. Entrust says its solutions facilitate more than 400 government programs in over 100 countries. Entrust says it has been securing identities for nearly 60 years.^{[5][10][12][14][15][16]}

About Keyfactor

Keyfactor sells products that give security teams visibility and control over the identities and cryptography that secure every digital interaction. Keyfactor is building the Trust Control Plane, a system architected to observe, govern, and orchestrate the cryptographic identities and infrastructure that secure every digital interaction. Keyfactor designs cryptography, builds the systems that run it, and helps shape the policies that govern it. Keyfactor states that machine identities and cryptography encrypt data, verify trust, and authenticate every connection.^[6]

Keyfactor offers continuous discovery and observation of cryptographic assets across an environment, all in one place. Keyfactor issues identities for every machine, workload, and AI agent with a quantum-ready PKI. Keyfactor orchestrates certificate lifecycles with end-to-end automation. Keyfactor maintains certifications and compliance with regulatory and security frameworks.

Keyfactor AgileSec helps discover cryptography, understand where it is used, and identify hidden vulnerabilities. Keyfactor AgileSec continuously discovers cryptographic assets across systems, endpoints, networks, cloud environments, and code repositories. Keyfactor AgileSec detects TLS certificates, SSH keys, tokens, algorithms, protocols, and cryptographic libraries across file systems, networks, infrastructure, and cloud environments. Keyfactor AgileSec deploys sensors to scan code, servers, endpoints, cloud workloads, and real-time network traffic, or it can use existing EDR and vulnerability management tools. Keyfactor AgileSec is offered as AgileSec SaaS, hosted by Keyfactor, or as a self-hosted deployment.^[7]

Keyfactor lets organizations centrally define which algorithms are used by each application and enforce them through secure policies. Keyfactor supports prioritizing and planning PQC migration efforts and continually monitoring their status. Keyfactor checks for compliance gaps against industry standards such as NIST and ANSSI and regulations such as GDPR and PCI-DSS.^[7][8]

Keyfactor Command is a Certificate Lifecycle Management tool that gives visibility and control over certificates via integration with every CA in every environment. Keyfactor Command is the observe and orchestrate layer of Keyfactor’s trust control plane. Keyfactor Command finds every certificate, including hybrid and PQ certificates, using real-time CA synchronization, network scanning, and agent-based or agentless discovery of key and trust stores. Keyfactor Command supports role-based permissions that control what users and groups can see and do, with approvals and workflows for enrollment and revocation. Keyfactor Command provides programmatic or self-service certificate enrollment via a portal or REST API. Keyfactor Command uses modular orchestrators to provision certificates directly to network endpoints, load balancers, servers, and cloud workloads. Keyfactor Command can be deployed on-prem, in the cloud, in a Kubernetes cluster, and combined with fully managed PKI. Keyfactor Command can be combined with a fully hosted, 24/7 managed private PKI.^[1]

Keyfactor Command for IoT provisions certificates for IoT devices from on-prem or from Keyfactor’s Cloud PKI as-a-Service platform. Keyfactor Command for IoT signs firmware and delivers over-the-air (OTA) software updates to a fleet of devices. Keyfactor Command for IoT manages encryption keys and digital certificates from generation and enrollment to provisioning, renewal, and revocation. Keyfactor Command for IoT integrates with embedded libraries such as wolfSSL and OpenSSL. Keyfactor describes embedding security in smart grids, manufacturing facilities, and energy and utilities infrastructure.^[5]

Keyfactor describes automotive OEMs and suppliers as needing to ensure that every vehicle and charging component has identity-first security from manufacturing to the end of the road. EJBCA Enterprise is a complete PKI platform for modern manufacturing environments. SignServer is an API-driven signing engine that enables signing in virtually any format to support complex manufacturing environments. Keyfactor describes running PKI in a datacenter, in the cloud, hybrid, or on the factory floor with a Local Registration Authority (RA).^{[3][5][7][8][10]}

About Sectigo

Sectigo sells digital certificates and website security products for the global business community.^[8]

Sectigo says its platform helps organizations secure users, devices, and workloads across their environments. Sectigo centralizes certificate management across the enterprise, bringing certificates from any source into one place. Sectigo states that by automating certificate lifecycle management, teams can reduce complexity and keep systems running reliably.^[1][4][9]

Sectigo says the industry is cutting certificate lifespans by nearly 90%. Sectigo says 81% of organizations already hit a certificate outage in the past year. Sectigo says it helps organizations prepare for shorter certificate lifespans, growing volumes of non-human identities and the transition to post-quantum cryptography.^[8][10]

Sectigo Certificate Manager is shortened to SCM. Sectigo Certificate Manager finds every certificate you own, renews them automatically, and alerts you before anything expires. Sectigo says its platform lets teams discover, issue, automate, and renew certificates across every team and environment. Sectigo describes the setup of its certificate lifecycle management as cloud-native and turnkey, with one place to manage everything. Sectigo says discovery, automation, and renewal covers 50 certificates or 500,000. Sectigo's CLM solutions are CA-agnostic and deliver more than 50 technology integrations from a single pane of glass.^{[4][8][10][11]}

Sectigo is a Certificate Authority that sells digital certificates to secure websites. Sectigo sells signing certificates for secure communication and digital signatures. Sectigo sells mark certificates, which display brand logos in email. Sectigo provides eIDAS sealing certificates that let manufacturers digitally seal conformity documents. Sectigo has issued over 1 billion certificates and currently secures more than 57 million active certificates.^[8][12]

Sectigo offers SiteLock for threat protection, CodeGuard for website backup and recovery, and HackerGuardian for PCI compliance scanning. SiteLock monitors websites through daily automated scanning and provides remediation to address issues. CodeGuard provides automatic daily website backups and one-click restoration. As an Approved Scanning Vendor, Sectigo provides unlimited PCI scans, daily vulnerability monitoring, and ready-to-submit PCI compliance reports.^[13]

Sectigo Partner Platform lets MSPs turn certificate lifecycle management into a managed service. Sectigo says each end customer gets a fully isolated tenant with separate usage reporting, billing, certificate inventories, and admin controls. Sectigo Partner Platform is currently available to a select number of channel partners. Kevin Weiss is Chief Executive Officer at Sectigo.^{[4][6][10][13]}