Entrust is a privately held identity-centric security company that helps organizations protect people, devices, and data across onboarding, authentication, transactions, cryptographic security, digital signing, and credential issuance. Its portfolio spans identity security, public key infrastructure, hardware security modules, key and secrets management, identity verification, and digital card issuance, with deployment options across on-premises, cloud, and hybrid environments.
Entrust organizes its offerings around securing the full identity lifecycle. Its products are used to establish trusted identities, protect cryptographic assets, automate certificate and key lifecycles, verify users during onboarding and reauthentication, and issue credentials for payments and other digital services. The company also supports multi-cloud security, compliance-driven operations, and preparation for post-quantum cryptography transitions.
Offerings, Capabilities, and Integrations
Entrust combines identity security, cryptographic controls, and issuance workflows in a portfolio that supports workforce, consumer, citizen, and machine identity use cases. Its capabilities include phishing-resistant authentication, single sign-on, adaptive risk controls, AI-driven biometric and document verification, PKI, HSM-backed key protection, key and secrets management, compliance monitoring, digital signatures, and digital card enablement.
Across the portfolio, Entrust supports cloud, on-premises, and hybrid deployment models plus API- and standards-based integration. The company supports identity and access standards such as SAML, OpenID Connect, OAuth, and SCIM, along with cryptographic interfaces including PKCS#11, OpenSSL, Java JCE, and Microsoft CAPI/CNG. Entrust also integrates with major cloud environments, databases, backup platforms, containers, Kubernetes platforms, SIEM tooling, and digital wallet ecosystems such as Apple Pay and Google Wallet.
Products and Services
- Cryptographic Security Platform: Unified platform for PKI, HSM-backed trust, and key, certificate, and secrets lifecycle management with governance, visibility, automation, and post-quantum readiness.
- nShield HSMs: Hardware security modules that provide tamper-resistant key generation, protection, encryption, signing, and root-of-trust services for enterprise and regulated environments.
- nShield as a Service: Subscription-based cloud access to dedicated nShield HSM infrastructure for organizations that want HSM-backed cryptographic services without operating hardware on site.
- PKI as a Service: Cloud-delivered PKI offering for certificate issuance and lifecycle management that reduces infrastructure overhead while supporting scalable private trust use cases.
- Entrust CSP Key Manager: Key and secrets management software that combines lifecycle control, decentralized vault-based architecture, and centralized policy and compliance oversight.
- CloudControl: Cloud security and compliance offering focused on multi-cloud posture, virtual infrastructure protection, container security, and policy alignment for regulated environments.
- Identity as a Service (IDaaS): Cloud-based identity and access management platform for MFA, passwordless access, SSO, adaptive authentication, and digital onboarding across workforce, consumer, and citizen scenarios.
- IDV as a Service: Remote identity verification service for onboarding and re-verification using document checks, biometrics, data verification, fraud signals, and configurable workflows.
- Digital Card Solution: Digital-first card issuance platform that lets banks and issuers deliver secure, instantly available payment credentials and wallet provisioning from banking experiences.
- Entrust Signing Engines: Digital signing portfolio for enterprises and trust service providers that supports legally compliant, certificate-based document signing workflows.
- Entrust Signing Automation Engine: On-premises signing platform that integrates and automates digital signatures in business applications and processes through web services and standards-based signing operations.
- Entrust Remote Signing Engine: On-premises platform for deploying cloud-based remote signing services with centrally protected HSM-backed signing keys and user-approved signatures through web APIs.
Target Customers
Entrust serves organizations that need high-assurance identity, cryptographic, and credential issuance capabilities. Its customers include large enterprises, financial institutions, banks, payment issuers, government agencies, trust service providers, and organizations modernizing digital onboarding, authentication, signing, and certificate operations.
Industry coverage includes financial services, government, healthcare, education, telecommunications, gaming, and broader enterprise environments. Within those segments, Entrust targets security, identity, infrastructure, platform, and compliance teams that need to secure customer and workforce interactions, protect keys and certificates, reduce fraud, and meet regulatory or audit obligations across hybrid and multi-cloud estates.
Cloud Integrations and Marketplace
- AWS Marketplace: Entrust has AWS Marketplace presence for Identity as a Service and Cryptographic Security Platform vault and key management offerings, giving AWS customers procurement and deployment paths for IAM and cryptographic control capabilities.
- Azure Marketplace: Entrust has Azure Marketplace presence for products including PKI as a Service and Cryptographic Security Platform, and it also lists identity-focused offerings for Microsoft-centric environments.
- Google Cloud: Entrust integrates with Google Cloud for bring-your-own-key and external key management use cases, and it also supports identity verification workflows aligned to Google Cloud environments.
Key People
- Tony Ball: Chief Executive Officer
- Mike Baxter: President and Chief Technology & Product Officer
- Kurt Ishaug: Chief Financial Officer
- Lisa Tibbits: Chief Legal and Compliance Officer
- Patrick Steele: Chief Sales Officer
- Karen Kaukol: Chief Marketing Officer
- Kelsey Holthus: Chief Human Resources Officer
- Anudeep Parhar: Chief Operating Officer, Digital
Key Facts
- Headquarters: Minneapolis, Minnesota, United States
- Employees: Approximately 3,700
- Annual Revenue: $916.7M
- Parent Company: None
- Subsidiaries: Multiple international operating subsidiaries, including Entrust (Europe) Limited, Entrust Security UK Limited, Entrust Security Solutions UK Limited, Entrust Netherlands B.V., Entrust International LLC, and nCipher Security, LLC.
- Publicly Listed: Privately held
Analyst Recognitions
- Gartner: 2025 Gartner Magic Quadrant for Identity Verification: Visionary. 2025 Gartner Magic Quadrant for Access Management: Challenger.
- IDC: 2025 IDC MarketScape for Worldwide Identity Verification in Financial Services: Leader.
