All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Keyfactor sells businesses and governments software that manages digital certificates, the credentials machines use to prove their identity. Its Command product renews certificates, while EJBCA Enterprise runs a certificate authority, which issues them. Founded in 2001, Keyfactor says it has more than 1,000 customers, among them ServiceNow and Siemens. It reports annual recurring revenue above $200 million. Summit Partners led a growth investment of more than $1 billion in 2026. Certificate issuers and browser makers voted to cut public TLS certificate lifetimes to 47 days by 2029, which means more renewals for Keyfactor’s customers. Palo Alto Networks, owner of rival Venafi through CyberArk, could bundle certificate management into CyberArk’s identity security platform.
| Description | Machine-identity and PKI platform that issues and automates digital certificates, runs certificate authorities, signs code, and discovers cryptographic assets to prepare enterprises for post-quantum cryptography. | [f1] |
|---|---|---|
| Founded | 2001 | [f2] |
| HQ | Independence, Ohio, United States | [f3] |
| Latest funding | Strategic growth investment of more than $1 billion from Summit Partners (announced July 6, 2026) | [f4] |
| Product | What it does |
|---|---|
| Keyfactor Command | Certificate lifecycle automation that discovers, inventories, issues, and renews certificates and keys across clouds, Kubernetes, and on-prem from one console. |
| EJBCA Enterprise | Enterprise public key infrastructure built on the open-source EJBCA certificate authority, deployable on-prem or in the cloud for human and machine identities. |
| Cryptographic Posture Management | Cryptographic discovery, inventory, and agility tooling (AgileSec, CipherInsights) that finds quantum-vulnerable algorithms and supports the transition to post-quantum cryptography. |
| Keyfactor PKI as a Service | Cloud-hosted private PKI that Keyfactor builds and operates for the customer, bundled with round-the-clock security operations and Command certificate automation under one subscription. |
| Keyfactor SignServer | Centralized signing server for code, firmware, containers, and documents, with signing keys generated and stored in on-premises, cloud, or built-in hardware security modules. |
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
Keyfactor Command, EJBCA Enterprise, Keyfactor SignServer, and Cryptographic Posture Management issue and automate certificates, sign code, and inventory the cryptography that protects data, applications, networks, and devices. These lines are mapped to the Cyber Defense Matrix. [f5]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 4/5 | Keyfactor sells to the PKI, security and platform teams that manage certificates and keys, and outside bodies have put dates on their workload. CA/Browser Forum members voted to cut public TLS certificate validity from 398 days to 47 days in steps from March 2026 to March 2029. Federal News Network reports an executive order that sets 2030 and 2031 deadlines for federal post-quantum migration. [s26, s27, s25, s3, s1] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 4/5 | Keyfactor documents Command, EJBCA Enterprise and SignServer in detail, from enrollment protocols and deployment options to post-quantum and hybrid certificate support. NIAP lists EJBCA Enterprise 9.3.3 as a compliant certificate-authority product certified on 23 January 2026. Keyfactor publishes EJBCA’s source code on GitHub under the LGPL-2.1 licence. NIST lists an active FIPS 140-3 validation for the Bouncy Castle FIPS Java API, a library Keyfactor sponsors. [s3, s4, s6, s28, s38, s30, s31] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 4/5 | Under a CA/Browser Forum ballot, an industry standards rule, public TLS certificate validity began shrinking in March 2026 on a path to 47 days by March 2029. In June 2026, Federal News Network reported an executive order requiring federal agencies to move high-value systems to post-quantum keys by the end of 2030. [s26, s27, s1, s3] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 | Ted Shorter, a cofounder, is Keyfactor’s chief technology officer, and BankInfoSecurity reports that chief executive Jordan Rackie joined in May 2019 from a global revenue role at Tricentis. Keyfactor lists a chief PKI officer and a chief product and technology officer on its about page. No prior product build or exit for Shorter, Rackie or these two technical leaders appears on that page or in the captured press coverage. [s2, s21, s20] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 4/5 | Keyfactor names many reference customers in its case studies and on its trust center, among them ServiceNow, Siemens, Schneider Electric, M&T Bank, RSA and OVHcloud, and the FedRAMP Marketplace records one authorization letter for its government certificate-automation service. The scale figures are Keyfactor’s own, including annual recurring revenue above $200 million that IT Brief Asia relays as the company’s statement and customer counts of more than 2,500 in July 2026 and more than 1,000 in September 2026. [s8, s9, s1, s14, s12, s24, s10] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | BankInfoSecurity reports that Keyfactor raised more than $200 million from Insight Partners in 2019 and 2021. Keyfactor announced a growth investment of more than $1 billion led by Summit Partners in July 2026 and said in October 2026 that it had closed. When it reported Keyfactor’s $1.3 billion valuation, BankInfoSecurity cited an IT-Harvest estimate of $76.4 million in annual recurring revenue. Keyfactor now reports annual recurring revenue above $200 million growing more than 35% a year and says it operates profitably, but those are its own figures, so its efficiency is unconfirmed. [s21, s10, s11, s22, s12, s24] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 | Frost & Sullivan profiles Keyfactor beside Entrust, GlobalSign, Sectigo and Venafi in its 2024 PKI-as-a-Service Frost Radar, so an analyst places it in an established category without vendor coaching. Keyfactor reports a top Frost Radar placement and an ABI Research ranking on its own pages, and CyberArk, which bought Venafi in 2024, describes Venafi as the category creator of machine identity management. [s34, s35, s1, s36] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Keyfactor runs certificate authorities and holds a NIAP certification for EJBCA and a FedRAMP authorization for its government service. A platform vendor replacing those offerings for buyers requiring the approvals would need equivalent certifications. Palo Alto Networks completed its acquisition of CyberArk in February 2026, after CyberArk bought Venafi in 2024, so a large security platform already sells a machine identity line that Frost & Sullivan benchmarked beside Keyfactor. No data network effect appears in the cited sources. [s28, s14, s37, s36, s34] |
Keyfactor sells to teams facing two deadlines that outside bodies have set for enterprise cryptography. CA/Browser Forum members voted to cut the maximum validity of public TLS certificates from 398 days to 47 days in steps that began in March 2026 and end in March 2029. Certificate teams have to complete far more renewals. Keyfactor puts that rise at twelvefold on its homepage and says that expired certificates take down critical systems.
Post-quantum migration is the other deadline, and the federal government has moved it closer. NIST finalized its first post-quantum encryption standards in August 2024 and encourages administrators to begin moving to them as soon as possible. In June 2026, Federal News Network reported an executive order requiring federal agencies to move high-value assets to post-quantum keys by the end of 2030. The deadline for post-quantum signatures is the end of 2031. Agencies had generally planned for 2035.
The buyers are the PKI, security and platform teams that keep certificates current and now also have to find the cryptography a quantum computer could break. Keyfactor’s Cryptographic Posture Management product targets that inventory work, and it checks cryptography against standards such as NIST and ANSSI and regulations such as GDPR and PCI-DSS. [s26, s1, s25, s27, s3, s7]
Keyfactor sells a set of certificate and cryptography products that it groups under a Trust Control Plane, launched in June 2026 as one system for machine identities and cryptographic assets. Keyfactor Command discovers and inventories certificates and keys from any private, public or cloud certificate authority and automates renewal and provisioning through orchestrators and plugins. Command runs on premises, as a service Keyfactor hosts, in Kubernetes, or as a lightweight Azure Marketplace edition.
EJBCA Enterprise is the certificate authority, built on EJBCA, the open-source PKI software Keyfactor publishes on GitHub. Keyfactor sells it as software, as a cloud deployment, as a SaaS service and as a hardware appliance with a built-in hardware security module. Keyfactor PKI as a Service combines a fully managed PKI, round-the-clock security operations and Command, with Keyfactor’s team building and operating the customer’s PKI. SignServer signs code, firmware, containers and documents, with signing keys held in a customer’s hardware security module or in a built-in one.
Cryptographic discovery and agent identity are the newer additions. AgileSec finds cryptographic assets across devices, source code, binaries and cloud workloads and ranks quantum-vulnerable algorithms by risk. Keyfactor closed its acquisition of Cofide, a UK-based identity platform for software workloads and AI agents, in September 2026, to extend the Trust Control Plane to those workloads and agents. [s17, s3, s4, s38, s5, s6, s18, s15, s16]
Keyfactor competes for enterprise PKI and certificate-management budgets against companies that Frost & Sullivan profiled beside it in its 2024 PKI-as-a-Service Frost Radar, including Entrust, GlobalSign, Sectigo, Venafi, Ascertia, Axiad, eMudhra and HID. Keyfactor reports that Frost & Sullivan recognized it as the strongest performer on both the innovation and growth indexes of that Frost Radar, a placement it displays on its own pages.
Venafi is now part of Palo Alto Networks after two acquisitions. CyberArk completed its purchase of Venafi in October 2024 and described Venafi as the category creator of machine identity management. Palo Alto Networks completed its acquisition of CyberArk in February 2026 and said CyberArk’s products remain available as a standalone platform. Keyfactor appointed Matt Cohen, CyberArk’s former chief executive, to its board in October 2026.
Command manages certificates from any private, public or cloud certificate authority, so a customer can keep its existing authorities and add EJBCA where it wants Keyfactor to issue. Keyfactor markets CA migrations and algorithm updates as managed events inside Command. [s34, s35, s36, s37, s11, s3]
Keyfactor names its customers in case studies and on its trust center, among them ServiceNow, Siemens, Schneider Electric, M&T Bank, RSA, EQ Bank, OVHcloud, GRENKE and Truepic, and it quotes employees of ServiceNow, Schneider Electric and RSA on its homepage. The FedRAMP Marketplace lists Keyfactor for Government, a certificate-automation service, as FedRAMP certified since May 2026 with one authorization letter.
Keyfactor’s scale figures are its own. It reports annual recurring revenue above $200 million at the start of the third quarter of 2026, up from under $10 million in 2019, with growth above 35% a year. IT Brief Asia attributes those figures to Keyfactor. Keyfactor reported more than 2,500 customers in July 2026 and more than 1,000 in September 2026. It claims 40% of the Fortune 500 on its homepage and 40% of the Fortune 100 on its customers page.
Keyfactor expanded its global partner program so that partners can build advisory, implementation and managed services around its products. It offers a 30-day free Test Drive of Command. [s8, s9, s1, s14, s12, s24, s10, s39, s3]
Keyfactor pairs founder continuity with a broad executive team. Ted Shorter, a cofounder, is chief technology officer of a company established in 2001 as Certified Security Solutions, a consulting firm that rebranded as Keyfactor in November 2018 after becoming a software company. BankInfoSecurity reports that Jordan Rackie joined as president and chief executive in May 2019 from a global revenue role at Tricentis.
Keyfactor lists a chief PKI officer and a chief product and technology officer on its about page, and BankInfoSecurity puts the company at 566 employees. Keyfactor said Andy Collins and Colin Mistele would join its board when the 2026 investment closed, and it appointed Matt Cohen, CyberArk’s former chief executive, to the board in October 2026. [s2, s20, s21, s10, s11]
Outside registries document parts of Keyfactor’s security posture. NIAP lists EJBCA Enterprise 9.3.3 as a compliant certification-authority product certified on 23 January 2026, and Keyfactor says certified versions are eligible as a certificate-authority component in the NSA’s Commercial Solutions for Classified program. The FedRAMP Marketplace lists Keyfactor for Government at the Moderate class.
Keyfactor’s trust center lists ISO/IEC 27001, SOC 2, SOC 3, ISO/IEC 42001, CMMC, Common Criteria and FedRAMP Moderate among its compliance items, along with a pentest report and a contingency-plan test record. NIST’s CMVP lists an active FIPS 140-3 validation for the Bouncy Castle FIPS Java API, whose vendor is the Legion of the Bouncy Castle, an organization Keyfactor sponsors.
EJBCA has a public vulnerability history a buyer can check. NVD records CVE-2022-34831, rated critical, in which EJBCA before version 7.9.0 could issue a certificate carrying names a client never validated, and CVE-2023-34196, a partial denial-of-service flaw in an EJBCA servlet before version 8.0.0. [s28, s29, s14, s9, s30, s31, s32, s33]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| CyberArk | adjacent | Identity security vendor that bought Venafi in 2024 and has been part of Palo Alto Networks since February 2026, which says it keeps selling CyberArk as a standalone platform. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
| Venafi | competes with | Machine identity management vendor that Frost & Sullivan profiled beside Keyfactor in its 2024 PKI-as-a-Service Frost Radar, now owned by CyberArk. | |
| DigiCert | competes with | Competes for the same enterprise certificate-management and PKI budget. | |
| Entrust | competes with | Frost & Sullivan profiled it beside Keyfactor in its 2024 PKI-as-a-Service Frost Radar. | |
| Sectigo | competes with | Frost & Sullivan profiled it beside Keyfactor in its 2024 PKI-as-a-Service Frost Radar. | |
| GlobalSign | competes with | Frost & Sullivan profiled it beside Keyfactor in its 2024 PKI-as-a-Service Frost Radar. | |
| SandboxAQ | competes with | Rival for the post-quantum migration buyer that Keyfactor targets with Cryptographic Posture Management. | N/AWe scored these companies at different scopes, so the totals measure different things. |
Add analyzed competitors to compare them side by side with Keyfactor.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
press the advantage
Keyfactor’s EJBCA software runs certificate authorities, which issue the certificates machines use to prove their identity. Keyfactor publishes EJBCA’s core code as open source and sells EJBCA Enterprise, which US government evaluators certified in 2026. It also won FedRAMP Moderate authorization, a US approval for cloud services, for its government service, so a rival serving federal agencies would need equivalent approvals. A customer leaving EJBCA could have to reissue certificates from another authority and re-create its issuance rules. A PKI as a Service customer, whose certificate authorities Keyfactor runs, could also have to move off the top-level authority Keyfactor created for it. Palo Alto Networks already sells Venafi, a competing machine identity line, through CyberArk.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Customers buy software they configure and run, Command, EJBCA Enterprise and SignServer, and Keyfactor also hosts Command and EJBCA Enterprise and runs a fully managed PKI with round-the-clock security operations for customers who want it. No cited source describes Keyfactor accepting accountability for the customer’s PKI security outcomes. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | Customers leaving Keyfactor’s certificate authorities may have to reissue certificates from another authority and re-create issuance policies. A PKI as a Service customer may also have to transfer or replace a root that Keyfactor created and keeps in a FIPS-certified hardware security module. Command manages certificates issued by any authority, so replacing EJBCA need not mean replacing Command. Keyfactor documents hardware key custody on the EJBCA appliance and in PKI as a Service. No cited source describes or sizes what leaving that custody involves. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 2/3 | Keyfactor holds a FedRAMP Moderate authorization for its government certificate-automation service, listed on the FedRAMP Marketplace since May 2026. NIAP certified EJBCA Enterprise 9.3.3 in January 2026. Keyfactor says certified EJBCA versions are eligible for the NSA’s classified-solutions program. A replacement for federal and classified buyers would need equivalent FedRAMP and Common Criteria validations. No cited source describes a requirement that ties a customer to Keyfactor itself. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Keyfactor builds certificate-authority software that NIAP certified against its protection profile for certification authorities, supports post-quantum, composite and hybrid certificates, and clusters CA and registration-authority nodes for deployments that scale to millions of active certificates. AgileSec adds discovery of cryptographic assets across source code, binaries and cloud workloads. Keyfactor needs specialized cryptography and distributed-systems engineering to build these capabilities. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | Keyfactor sells to regulated enterprises and governments. Keyfactor names M&T Bank and EQ Bank as bank customers and Siemens and Schneider Electric as industrial customers. It has one federal authorization for its government service in the FedRAMP Marketplace. Keyfactor says its customers include the U.S. federal government and government organizations across NATO countries. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 3/3 | Devices, workloads and users obtain certificates from EJBCA through enrollment protocols such as ACME, SCEP and EST. NIAP describes EJBCA as able to answer certificate-status requests when it is deployed as an OCSP responder. Keyfactor says on its homepage that expired certificates take down critical systems. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 | Keyfactor publishes its core certificate-authority software as open source on GitHub under the LGPL-2.1 licence, and NIST’s CMVP lists the Legion of the Bouncy Castle as vendor of the Bouncy Castle library Keyfactor sponsors. The inventories Command and AgileSec build describe each customer’s own certificates and cryptography. No dataset, content licence or granted patent that Keyfactor retains across customers appears in the cited sources. |
Keyfactor sells to the PKI, security and platform teams of large organizations that issue and manage certificates and keys across clouds, data centers, devices and software pipelines. Its customer stories run from banks such as M&T Bank and EQ Bank to industrial firms such as Siemens and Schneider Electric and technology companies such as ServiceNow. The company says its customer base includes the U.S. federal government and government organizations across NATO countries.
Keyfactor has invested directly in the government segment. Its government certificate-automation service holds a FedRAMP Moderate authorization listed since May 2026, and Keyfactor says NIAP’s January 2026 certification of EJBCA Enterprise keeps the certificate authority eligible for the NSA’s classified-solutions program.
Keyfactor’s buyers face two outside deadlines that add work to the same teams. Public TLS certificate validity began shrinking in March 2026 on a path to 47 days under a CA/Browser Forum ballot. In June 2026, Federal News Network reported an executive order giving federal agencies until the end of 2030 to move high-value systems to post-quantum keys.
Keyfactor covers certificate issuance, certificate management, code signing and cryptographic discovery under one Trust Control Plane. Keyfactor Command finds certificates and keys across public and private authorities, cloud services, network endpoints, Kubernetes and key stores, and it automates renewal, provisioning and installation through orchestrators and plugins. EJBCA Enterprise issues certificates through ACME, SCEP, EST, CMP and other enrollment protocols and supports NIST post-quantum candidate algorithms with composite and hybrid certificates.
Keyfactor runs these products for customers as well as selling them. PKI as a Service combines a fully managed PKI, round-the-clock security operations and Command, and EJBCA comes as a SaaS service, a cloud deployment, software or a hardware appliance with a built-in hardware security module. SignServer signs code, firmware, containers and AI artifacts with keys held in hardware security modules.
AgileSec finds cryptographic assets across source code, binaries, file systems and cloud workloads and ranks quantum-vulnerable algorithms by risk. Keyfactor closed its acquisition of Cofide in September 2026 to issue identities to software workloads and AI agents, and it markets cryptographically verified identities for AI agents on a dedicated solution page.
Keyfactor names its customers in its own case studies and on its trust center, among them ServiceNow, Siemens, Schneider Electric, M&T Bank, RSA, EQ Bank, OVHcloud, GRENKE and Truepic. Its homepage quotes employees of ServiceNow, Schneider Electric and RSA, and the FedRAMP Marketplace records one federal authorization of Keyfactor for Government.
Keyfactor is the source of the growth figures. It reports annual recurring revenue above $200 million at the start of the third quarter of 2026, up from under $10 million in 2019, and growth above 35% a year, which IT Brief Asia relays as the company’s statement. Its 2026 releases give different customer counts, more than 2,500 in July and more than 1,000 in September. Sixth Street’s Alex Katz said in Keyfactor’s July release that the company had more than doubled in size since his firm invested in 2023.
Keyfactor pairs direct sales with partners and outside capital. It expanded its global partner program in July 2026 so partners can build advisory, implementation and managed services around its products. BankInfoSecurity reported Summit Partners’ $1 billion growth investment in July 2026, and Frost & Sullivan profiled Keyfactor in its 2024 PKI-as-a-Service Frost Radar.
Keyfactor states no prices on the captured product pages. Prospects can try Command through a 30-day free Test Drive, and a lightweight Command edition installs from the Azure Marketplace.
Keyfactor packages the same products several ways. PKI as a Service bundles managed PKI, security operations and Command under one subscription fee, with no hardware or CA software for the customer to buy. EJBCA Enterprise comes as software, a cloud deployment, a SaaS service or a hardware appliance, and Keyfactor sizes it from 2,500 active certificates upward.
Keyfactor delivers its products in the deployment shapes its buyers ask for. Command runs on premises, as certificate lifecycle automation hosted by Keyfactor, inside Kubernetes or as an Azure Marketplace edition, and EJBCA Enterprise runs as software, in a customer’s cloud, as SaaS in AWS and Azure, or as a hardware appliance.
The hosted services put Keyfactor in charge of operations. PKI as a Service is a fully managed private PKI with round-the-clock security operations, built and operated by Keyfactor’s team, and Keyfactor creates and secures the customer’s root while the customer keeps visibility of access to its root key material. On its trust center, Keyfactor announces SOC 2 Type II compliance for EJBCA SaaS and continued compliance for PKI as a Service, and it lists Amazon Web Services and Azure as infrastructure.
Keyfactor reports that certificates issued through EJBCA SaaS grew 168% from early 2025, its own measure of rising use of the hosted service.
Outside registries document Keyfactor’s main certifications. NIAP lists EJBCA Enterprise 9.3.3 as a compliant certification-authority product certified on 23 January 2026. Keyfactor says it has held Common Criteria certifications for EJBCA Enterprise since 2012. It says certified versions are eligible for the NSA’s Commercial Solutions for Classified program. The FedRAMP Marketplace lists Keyfactor for Government as FedRAMP certified at the Moderate class since May 2026.
Keyfactor’s trust center lists ISO/IEC 27001, SOC 2, SOC 3, ISO/IEC 42001, CMMC, Common Criteria and FedRAMP Moderate, and it offers a pentest report and a contingency-plan test record to reviewers. NIST’s CMVP lists an active FIPS 140-3 validation for the Bouncy Castle FIPS Java API, whose vendor is the Legion of the Bouncy Castle, an organization Keyfactor sponsors.
EJBCA’s open code and vulnerability history are both public. Keyfactor publishes the EJBCA source on GitHub. NVD records CVE-2022-34831, a critical flaw in EJBCA before 7.9.0 that could allow certificates for names a client never validated. NVD also records CVE-2023-34196, a partial denial-of-service flaw in EJBCA before 8.0.0. A buyer can check patch levels against those records before rooting trust in the product.
Keyfactor presents its products as one Trust Control Plane that brings together the tools enterprises use to manage cryptographic assets, with continuous visibility, automated operations and enforced governance. Command works across any private, public or cloud certificate authority, so a customer can keep authorities from other vendors in place while managing them in one console.
Keyfactor assembled much of that platform through acquisitions. VentureBeat reported the merger with PrimeKey alongside a $125 million investment from Insight Partners. Keyfactor acquired Cofide in September 2026 to add identity for workloads and AI agents.
Keyfactor also reaches developers and partners outside its own sales team. It publishes the EJBCA community edition on GitHub under the LGPL-2.1 licence, where the repository has 963 stars, and it expanded its partner program in July 2026 so partners can build implementation and managed services around the platform.
Keyfactor combines founder continuity with a chief executive hired from outside the company. Ted Shorter, a cofounder, remains chief technology officer of a business established in 2001 as Certified Security Solutions, a consulting firm that rebranded as Keyfactor in 2018 after becoming a software company. BankInfoSecurity reports that Jordan Rackie became president and chief executive in May 2019 after serving as global revenue leader at Tricentis.
BankInfoSecurity puts Keyfactor at 566 employees, and Keyfactor lists a chief PKI officer and a chief product and technology officer on its about page.
Keyfactor added board members with operating and investment experience in 2026. Keyfactor said Andy Collins and Colin Mistele would join its board when the growth investment closed, and in October 2026 it appointed Matt Cohen, who led CyberArk through its acquisition by Palo Alto Networks.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | About Keyfactor mission and cryptography | official | 2026-06-20 |
| f2 | BankInfoSecurity: Keyfactor lands $1B to expand crypto trust platform (July 6, 2026) | press | 2026-10-26 |
| f3 | Exa company record Keyfactor headquarters | research | 2026-06-20 |
| f4 | Keyfactor press release: growth investment led by Summit Partners (July 6, 2026) | official | 2026-10-26 |
| f5 | Keyfactor homepage platform overview | official | 2026-10-26 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.