Fortanix Data Security Manager vs Utimaco Enterprise Secure Key Manager
Fortanix Data Security Manager
fortanix.com
Utimaco Enterprise Secure Key Manager
utimaco.comSide by side
| Figure | Fortanix Data Security Manager | Utimaco Enterprise Secure Key Manager |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 2 |
| Spec score · Key Management Software | 7.7 (#6) | 7.9 (#4) |
| Spec score · Encryption Key Management Software | 7.7 (#8) | 7.9 (#5) |
| Headquarters | Santa Clara, California, United States | Aachen, Germany and Campbell, California, USA |
| Integrations | The product provides REST APIs and supports open standards including OAuth, OpenID (SAML), LDAP, JWT, and PKI, as well as Kubernetes and Docker. | Utimaco publishes integration guides for AWS BYOK, Azure BYOK, Google Workspace, Kubernetes, VMware, Dell, HPE, NetApp, Oracle Cloud, Veeam, Splunk, MySQL and other systems. |
| Support | Fortanix provides customer support, documentation, downloads, REST API documentation, FAQs, a technical support program, and professional services links. | Utimaco’s support portal offers product documentation, support cases, RMA cases, security advisories, and software downloads. |
| Trial | The DSM SaaS trial lasts 30 days and includes the full feature set; the page says no credit card is required to start a trial. | Utimaco offers a fully functional 60-day vESKM trial requiring registration and export-control verification. |
| What it does | DSM lets DevOps and security teams store, control, and manage secrets, credentials, certificates, API keys, and tokens outside source code. | ESKM generates, stores, serves, controls and audits encryption keys for storage systems, application servers and databases. |
Plans
Fortanix Data Security Manager
- Data Security Manager 30-days Free TrialFree
Utimaco Enterprise Secure Key Manager
- Enterprise Secure Key ManagerPriced on request
- Enterprise Secure Key Manager (ESKM)Priced on request
In their own words
Fortanix Data Security Manager
Fortanix Data Security Manager (DSM) gives DevOps and security teams a way to manage secrets, credentials, certificates, API keys and tokens outside source code. Secrets management can run on-premises, in the cloud, or across hybrid and multicloud environments. DSM provides REST APIs and supports standards and technologies including OAuth, OpenID (SAML), LDAP, JWT, PKI, Kubernetes and Docker.
Documented CI/CD integrations include HashiCorp Vault, Kubernetes Secret Store CSI Driver, Ansible, Jenkins, GitHub, GitLab, CyberArk, Delinea and Azure DevOps. Fortanix says the service stores secrets in a FIPS 140-2 Level 3 certified HSM and uses Intel SGX and Runtime Encryption technology. Role-based access controls, safeguards against unauthorized password changes, simultaneous-login alerts and audit logs support access oversight. Listed certifications include FIPS 140-2 Level 3, PCI-DSS, ISO 27001, CIS and SOC 2 Type 2. The DSM SaaS trial includes the full feature set for 30 days at free, with no credit card required to start. No numeric Enterprise price is listed.
Utimaco Enterprise Secure Key Manager
Utimaco Enterprise Secure Key Manager (ESKM) centralizes cryptographic key management across on-premises and cloud environments. It provides policy controls, centralized administration, and audit trails for key lifecycle management, alongside monitoring, recovery, scheduled backups, log rotation, and restore functions. Administrators can use a web GUI or command-line interface. ESKM supports OASIS KMIP, a RESTful API, and a native XML-based KMS protocol; it conforms to KMIP specifications 1.0 through 2.1 and supports client libraries including OpenKMIP and PyKMIP. The product page states capacity for more than 2 million keys, over 25,000 clients, and thousands of nodes per distributed cluster. Four models are available, including a Linux-based virtual appliance and hardware appliances. Physical L3 and L4 models include embedded HSMs identified as FIPS 140-2 Level 3 and Level 4; the virtual L1 is a hardened appliance with FIPS 140-2 Level 1 security. Listed key types include AES, 3-Key Triple DES, HMAC, RSA, and ECDSA. Pricing is on request.