DigiCert Software Trust Manager vs Keyfactor Platform
DigiCert Software Trust Manager
digicert.com
Keyfactor Platform
keyfactor.comSide by side
| Figure | DigiCert Software Trust Manager | Keyfactor Platform |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 1 |
| Spec score · Code Signing Software | 8.3 (#5) | 7.9 (#10) |
| Automation | Signing workflows can be integrated through native connectors, GitHub Actions, CLI, and APIs. | It supports automated certificate expiration alerts, renewals, provisioning, and self-service through a UI or API. |
| Founded | 2003 | 2001 |
| Headquarters | Lehi, Utah, USA | Independence, Ohio, United States |
| Integrations | Listed integrations include Azure DevOps, CircleCI, GitLab, Gradle, Jenkins, GitHub, and ReversingLabs. | Keyfactor describes an API-first architecture with integrations for DevOps tools, key vaults, mobile and IoT devices, and other systems. |
| Intended users | DigiCert lists global development teams, CI/CD-driven delivery teams, and teams working on firmware, devices, and operational technology among the product's audiences. | The product is presented for PKI, security, infrastructure, and DevOps teams, including organizations operating across on-premises and multi-cloud environments. |
| Purpose | Software Trust Manager protects software supply chain integrity through code signing, policy enforcement, and controls over key usage and access. | Keyfactor Certificate Lifecycle Automation discovers, manages, and automates digital certificates across an enterprise. |
Plans
DigiCert Software Trust Manager
- Software Trust ManagerPriced on request
Keyfactor Platform
- Keyfactor Certificate Lifecycle AutomationPriced on request
In their own words
DigiCert Software Trust Manager
DigiCert Software Trust Manager governs and automates software signing across artifacts, tools, and teams. Signing workflows can run after security checks and cover containers, binaries, and other artifacts, including Windows packages, Java archives, Android APK/AAB files, and macOS application and installer formats. Teams can use Signing Manager Controller, command-line tools, or the Click-to-sign graphical application, and connect workflows through native connectors, GitHub Actions, CLI tools, and APIs. Role- and team-based access, policy templates, workflows, and approvals govern high-risk signing actions. Logs link signed items to an actor and time for audits and incident response. Keys can be stored in FIPS 140-2 Level 3 or Common Criteria EAL4+ HSMs, with regional storage options. Threat detection includes software composition analysis, static binary analysis, Apple notarization scans, and DAST. Use requires a DigiCert ONE host environment, API key, client authentication certificate, and certificate password; two-factor authentication is required for all users. Pricing is on request, and a 30-day trial is listed.
Keyfactor Platform
Keyfactor Platform, through Keyfactor Command, gives PKI, security, infrastructure, and DevOps teams visibility into certificates and tools to govern their lifecycle. It can inventory certificates from certificate authorities, scan networks for unknown SSL/TLS certificates, and connect to key and certificate stores. Teams can automate enrollment, renewal, revocation, and provisioning, with self-service workflows available through a user interface or API. Listed enrollment protocols are SCEP, ACME, and EST. Administrators can set role-based permissions, protect private keys with retention and storage policies, and require enrollment or approval workflows. Integrations span CI/CD, cloud, HSM, IoT, ITSM, public and private certificate authorities, and web servers. Deployment options are on premises, as a hosted certificate lifecycle service, or as fully managed PKI in a single-tenant cloud platform. Keyfactor says Command has been tested for deployments with more than 500 million certificates. A 30-day trial is offered. Pricing is available on request, and there are no per-certificate fees listed.