Keyfactor is a cybersecurity company focused on digital trust, helping organizations secure the machine identities and cryptography behind digital interactions. Its portfolio centers on public key infrastructure, certificate lifecycle automation, digital signing, cryptographic discovery, and crypto-agility for hybrid, multi-cloud, DevOps, and connected-device environments.
Through software, SaaS, and managed services, Keyfactor enables teams to issue and manage certificates, run private PKI, protect signing keys and software supply chains, inventory cryptographic assets, and prepare for post-quantum migration. The company’s capabilities span enterprise IT, cloud workloads, software delivery pipelines, and embedded IoT use cases.
Offerings, Capabilities, and Integrations
Keyfactor delivers a mix of self-managed software, cloud-delivered services, and managed PKI operations. Its capabilities include certificate discovery, lifecycle automation, private CA management, cryptographic asset inventory, secure code and document signing, and controls that help teams improve auditability, policy enforcement, and resilience as certificate volumes grow and cryptographic standards change.
The platform is built for flexible deployment across on-premises, cloud, SaaS, and Kubernetes environments, with integrations spanning cloud platforms, HSMs and key vaults, CI/CD tools, enterprise IT systems, and certificate authorities. Keyfactor publicly highlights support for protocols such as ACME, SCEP, EST, CMP, Microsoft Autoenrollment, and REST APIs, along with ecosystem integrations across AWS, Microsoft Azure, Google Cloud, ServiceNow, and broader DevOps and infrastructure tooling.
Products and Services
- Keyfactor Command: Certificate lifecycle automation platform that discovers, manages, and automates certificates and machine identities across private, public, and cloud certificate authorities from a single control plane.
- Keyfactor EJBCA Enterprise: Enterprise PKI platform for issuing and managing identities for devices, workloads, and users, with CA, RA, and VA capabilities plus support for multiple deployment models and automation protocols.
- Keyfactor PKI as a Service: Managed PKI offering that combines cloud-hosted PKI, 24/7 security operations, and certificate lifecycle automation in a single service.
- Keyfactor AgileSec: Cryptographic discovery and inventory offering that scans systems, endpoints, cloud workloads, networks, and code to identify cryptographic assets, vulnerabilities, and remediation priorities.
- Keyfactor SignServer: Server-side digital signing platform for code, firmware, documents, containers, and other content, designed to centralize signing workflows, secure keys with HSMs, and support high-volume signing operations.
- Keyfactor Signum: Code signing as a service that protects private signing keys in a cloud HSM, applies policy controls, and integrates with native developer and build tools such as SignTool, Jarsigner, Cosign, OpenSSL, and Jenkins.
- Bouncy Castle APIs: Widely used Java and C# cryptographic APIs for authentication, digital signatures, encryption, and post-quantum use cases, backed by Keyfactor support and ongoing certification investment.
- Keyfactor Command for IoT: IoT identity management solution that integrates with PKI to issue, manage, and automate device certificates from manufacturing through end-of-life.
- SSH Key Manager: Module for Keyfactor Command that centralizes discovery, rotation, policy enforcement, and lifecycle management for SSH keys and SSH-based access across enterprise environments.
- Keyfactor PQC Lab: Free SaaS-based sandbox and resource hub for testing quantum-ready certificates and exploring post-quantum PKI concepts.
Target Customers
Keyfactor primarily serves enterprise security, PKI, infrastructure, and platform teams that need to establish and operate digital trust across large certificate estates. Its offerings also align with DevOps, application security, and software engineering teams that need automated issuance, secure signing, and policy-driven controls without slowing delivery.
The company also targets organizations with complex connected-device and operational environments, including manufacturers and product teams in automotive, medical devices, transportation, industrial IoT, and other embedded or critical infrastructure use cases. Keyfactor’s customer and solution material also shows traction with financial services, software and IT, telecom, cloud, and large industrial enterprises.
Cloud Integrations and Marketplace
- AWS Marketplace: Keyfactor maintains an AWS Marketplace seller presence and promotes AWS-based deployment for offerings such as EJBCA Cloud and EJBCA SaaS, with additional AWS listings for SignServer Enterprise Cloud.
- Microsoft Azure Marketplace: Keyfactor has broad Microsoft Azure Marketplace coverage, including listings for Keyfactor Command, Keyfactor Command: PKI as-a-Service, Keyfactor Command for IoT, Keyfactor PQC Lab, EJBCA Enterprise Cloud, SignServer Enterprise Cloud, Signum SaaS, Bouncy Castle Crypto APIs, and AgileSec offerings.
- Google Cloud Marketplace: Keyfactor supports Google Cloud environments through official integrations around Google Cloud Certificate Authority Service, Load Balancer, Certificate Manager, Secret Manager, Google KMS, and Google Cloud Certificate Connector. Google Cloud also identifies Keyfactor as a partner for Certificate Authority Service, supporting Keyfactor’s validated Google Cloud presence.
Key People
- Jordan Rackie: Chief Executive Officer
- Mike Volanoski: President & Chief Revenue Officer
- Ted Shorter: Chief Technology Officer & Co-Founder
- Gün Akkor: Chief Product and Technology Officer
- Scott Meyerhoff: Chief Financial Officer
- Ellen Kindley: Chief Transformation Officer
- Gail Joyce: Chief People Officer
- Jamie Walker: Chief Marketing Officer
- Dan Michael: Chief Sales Officer
- Valtteri Vesikallio: Chief Customer Officer
- Tomas Gustavsson: Chief PKI Officer
- Chris Hickman: Chief Security Officer
Key Facts
- Headquarters: Independence, Ohio, United States
- Employees: 540+ employees
- Annual Revenue: $175M+ annual recurring revenue
- Parent Company: None
- Subsidiaries: Redtrust; InfoSec Global
- Publicly Listed: No (privately held)
