Keyfactor Platform vs OpenXPKI
Keyfactor Platform
keyfactor.comOpenXPKI
openxpki.orgSide by side
| Figure | Keyfactor Platform | OpenXPKI |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · Certificate Management Software | 7.9 (#13) | 7.6 (#20) |
| Spec score · Public Key Infrastructure Software | 7.9 (#12) | 7.6 (#14) |
| Deployment | The product can be deployed as a service, container, software appliance, on-premises installation, or with hosted PKI as a Service. | Community Edition Debian packages are available for Debian 12, while Enterprise Edition is packaged for RHEL, SLES, and Ubuntu Server LTS. |
| Founded | 2001 | 2009 |
| Integrations | Keyfactor describes an API-first architecture with integrations for DevOps tools, key vaults, mobile and IoT devices, and other systems. | Connectors can access flat files, LDAP directories, SQL databases, and web services; Enterprise Edition offers DigiCert, Sectigo, and SwissSign extensions. |
| Intended users | The product is presented for PKI, security, infrastructure, and DevOps teams, including organizations operating across on-premises and multi-cloud environments. | The product is aimed at professional PKI environments, and its training lists system administrators, IT operations staff, PKI operators, developers, and integration engineers as audiences. |
| Purpose | Keyfactor Certificate Lifecycle Automation discovers, manages, and automates digital certificates across an enterprise. | OpenXPKI is enterprise-grade PKI and Trustcenter software for customizable management of X.509v3 certificates. |
| Support | Keyfactor advertises PKI expertise and provides customers with a support portal. | Community Edition support is available through a mailing list; commercial support options with SLAs are offered by White Rabbit Security GmbH. |
Plans
Keyfactor Platform
- Keyfactor Certificate Lifecycle AutomationPriced on request
OpenXPKI
- Community EditionFree
- Enterprise EditionPriced on request
- OpenXPKI as a ServicePriced on request
In their own words
Keyfactor Platform
Keyfactor Platform, through Keyfactor Command, gives PKI, security, infrastructure, and DevOps teams visibility into certificates and tools to govern their lifecycle. It can inventory certificates from certificate authorities, scan networks for unknown SSL/TLS certificates, and connect to key and certificate stores. Teams can automate enrollment, renewal, revocation, and provisioning, with self-service workflows available through a user interface or API. Listed enrollment protocols are SCEP, ACME, and EST. Administrators can set role-based permissions, protect private keys with retention and storage policies, and require enrollment or approval workflows. Integrations span CI/CD, cloud, HSM, IoT, ITSM, public and private certificate authorities, and web servers. Deployment options are on premises, as a hosted certificate lifecycle service, or as fully managed PKI in a single-tenant cloud platform. Keyfactor says Command has been tested for deployments with more than 500 million certificates. A 30-day trial is offered. Pricing is available on request, and there are no per-certificate fees listed.
OpenXPKI
OpenXPKI is PKI and Trustcenter software for managing X.509v3 certificates in professional environments. Its customizable workflows cover requests, renewals, and revocations, with enrollment through SCEP, EST, SimpleCMC, ACME, and a REST-like API with OpenAPI support. One instance can host multiple PKI Realms, each with separate namespaces, profiles, workflows, and policies. The Ember.js web interface serves users, operators, and administrators in major browsers. Connectors reach flat files, LDAP, SQL databases, and web services; Enterprise Edition adds extensions for DigiCert, Sectigo, and SwissSign. Hardware Security Modules are supported through PKCS#11. YAML configuration can be tracked with revision control, and custom reporting workflows can produce downloadable CSVs. Community Edition is free and fully functional, with Debian 12 packages and mailing-list support. Enterprise Edition has packages for RHEL, SLES, and Ubuntu Server LTS; service and commercial support options are also listed, with SLAs available. The software was founded in 2009.