Specifiction
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your tool
Vendor dashboard
Tech riderRev. 29 Sept 2026

EZCA

Ch 017.7of 25 Public Key Infrastructure Software
  1. 1Runs onAndroid, API, iOS, Linux, Mac, self-hosted, Web, Windows
  2. 2Costsfree trial · paid from $200/mo
  3. 3Deployment modelhybrid
  4. 4ACME supportYes
  5. 5SCEP supportYes
  6. 6EST supportYes
  7. 7HSM integrationYes
  8. 8Certificate profilesYes
8 lines stated Written from the maker's own pages: keytos.io
Visit site Alternatives
The EZCA homepage

Overview

EZCA is ranked #1 of 25 in public key infrastructure software on Specifiction. It runs on Android, API, iOS, Linux, macOS, Self-hosted, Web, Windows. There is no free plan. A free trial is offered. Paid plans start at $200/mo.

EZCA plans and pricing

All plans
Basic $200/mo $200 / CA / month FIPS 140-3 Level 2 HSM backed CAs · 1 certificate created or OCSP response per CA per second · Support within one business day · 99.9% availability keytos.io · 29 Sept 2026
Premium $500/mo $500 / CA / month FIPS 140-3 Level 3 HSM backed CAs · 10 certificates created or OCSP responses per CA per second · 24/7 support within 24 hours · 99.95% availability · Public CA certificate management keytos.io · 29 Sept 2026
Self-Hosted Licensing $3,000/mo $3,000 (with unlimited CAs) / location / month Everything in Private Infrastructure · Self-healing infrastructure with Azure PaaS services keytos.io · 29 Sept 2026
Private Infrastructure $6,000/mo $6,000 / location / month Everything in Premium · 160 certificates created or OCSP responses per CA per second · 24/7 support within 1 hour · Fully isolated infrastructure keytos.io · 29 Sept 2026

Compared on public key infrastructure software

Free plan
Nokeytos.io
Paid from
$200/mokeytos.io
Deployment model
hybridkeytos.io
ACME support
Yeskeytos.io
SCEP support
Yeskeytos.io
EST support
Yeskeytos.io
HSM integration
Yeskeytos.io
Certificate profiles
Yeskeytos.io

Facts

What it does
EZCA is a cloud PKI service for running and scaling certificate authorities without operating the PKI infrastructure yourself.keytos.io · 29 Sept 2026
Protocols
It issues certificates through ACME, EST, and SCEP, and provides APIs for applications and workflows.keytos.io · 29 Sept 2026
Microsoft integration
EZCA integrates with Azure, Entra ID, Intune, Azure Key Vault, and Azure applications.keytos.io · 29 Sept 2026
MDM integrations
The product supports Intune and Jamf for device certificates.keytos.io · 29 Sept 2026
Existing PKI
EZCA can chain to an existing on-premises CA or bring an existing AD CS CA into the cloud setup.keytos.io · 29 Sept 2026
Certificate use cases
The platform manages certificates for users, devices, applications, Wi-Fi, VPN, web services, and IoT.keytos.io · 29 Sept 2026
IoT
EZCA supports certificate-based device authentication for Azure IoT Hub and Azure IoT Central.keytos.io · 29 Sept 2026
Security
The maker says EZCA uses HSM-backed CAs, with Basic backed by FIPS 140-3 Level 2 HSMs and Premium by Level 3 HSMs.keytos.io · 29 Sept 2026
Audit and SIEM
CA changes, certificate requests, and approvals are logged and can be exported to a preferred SIEM.keytos.io · 29 Sept 2026
Revocation
EZCA supports certificate revocation checking through CRLs and OCSP.keytos.io · 29 Sept 2026
Availability
The pricing page lists 99.9% availability for Basic and 99.95% for Premium.keytos.io · 29 Sept 2026
Certificate limits
The maker says there is no certificate count limit; pricing is based on the number of certificate authorities managed.keytos.io · 29 Sept 2026
Support
Basic includes support within one business day, Premium includes 24/7 support within 24 hours, and Private Infrastructure includes 24/7 support within one hour.keytos.io · 29 Sept 2026
Company
Keytos says it was founded by Marcos and Igal Flegmann, brothers with experience building PKI and identity tools at Microsoft.keytos.io · 29 Sept 2026

Company

Founded
2021keytos.io · 28 Sept 2026
Headquarters
Boston, Massachusetts, United Stateskeytos.io · 28 Sept 2026

Best EZCA alternatives

See all 12
All accessCh 02 KeyTalk CKMS Free trialAndroidiOS from €5/mo7.4 All accessCh 03 SecureW2 Cloud NAC AndroidAPI 7.4 All accessCh 04 step-ca Free planAPILinux Free to start7.3 All accessCh 05 OpenCA PKI Free planLinuxMac Free to start7.2 All accessCh 06 XiPKI Free planAPILinux Free to start7.1 All accessCh 07 Entrust Certificate Manager AndroidAPI 7.0

Where it ranks on Specifiction

Is EZCA yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote EZCA

Sources