Announcing Keytos Shield - A new all-in-one passwordless identity platform

Keytos Shield: a New All-in-One Passwordless Identity Platform

Today we’re excited to announce the launch of Keytos Shield, a new all-in-one platform for passwordless identity management and access control. Keytos Shield builds on top of our existing suite of passwordless solutions, bringing them together into a single, unified platform that simplifies the process of moving to passwordless certificates and Wi-Fi.

With Keytos Shield, organizations can issue certificates, manage Wi-Fi access, and move to fully passwordless authentication in a single platform. In under 10 minutes, you can onboard to Keytos Shield and connect it to your Entra ID directory and Mobile Device Management (MDM) solution, such as Microsoft Intune or Jamf Pro, to enable seamless passwordless access for your users.

At Keytos we believe that passwordless authentication and phishing-resistant security shouldn’t be prohibitively expensive and reserved just for enterprises. Instead, it should be affordable and accessible to organizations of all sizes, whether you have 5 employees or 50,000. To empower every organization to move to passwordless authentication, you only pay for the users you need, with no minimums, commitments, or base subscription fees. Shield starts at just $1.50 per user per month, with no other subscription costs or hidden fees.

Start a Free Trial Schedule a Demo

What is Included in Keytos Shield?

When you create a Keytos Shield account, you instantly get access to:

• 🔐 Cloud PKI: Every Shield account comes with a multi-tier PKI environment at no additional cost which issues certificates for your users and devices, and powers the Shield platform. Have an existing on-premises PKI? No problem! You can easily connect your Shield PKI to your existing PKI environment without creating a separate Root CA.
• 🪪 SCEP + Device ACME Certificates: With Shield you can issue unlimited SCEP certificates to your users and devices across Microsoft Intune and any MDM platform that supports device ACME or SCEP enrollment. This allows you to move to passwordless certificates for Wi-Fi, VPN, and other certificate-based authentication scenarios for every laptop, workstation, phone, and tablet in your organization without a per-certificate cost.
• 🛜 Cloud RADIUS: Shield includes a cloud RADIUS service that allows you to easily connect your users and devices to your networks and Wi-Fi access points without the need for on-premises RADIUS servers. It works seamlessly with your Shield SCEP certificates so your devices connect to Wi-Fi in seconds without the need for passwords or shared secrets.
• 📱 BYOD Device Enrollment with Keytos Connect: Want to connect personal devices to your Wi-Fi without sacrificing encryption and security, or paying for MDM licenses? Shield integrates with the free Keytos Connect mobile & desktop app to allow your users to enroll their personal devices and connect to your Wi-Fi access points without the need for passwords or shared secrets. It can be enabled in Shield with a single click.
• 🌍 Global Footprint: Shield builds upon Keytos’ existing global infrastructure that spans over 20 regions worldwide, ensuring that your users and devices can connect to your networks and Wi-Fi access points from anywhere in the world with low latency and high availability.
• 🏛️ Data Sovereignty: For organizations that require data sovereignty for their workloads and key material, Shield is available in dedicated European, Australian, and US Government instances in addition to our global multi-region instance. This allows you to meet your compliance and regulatory requirements while still enjoying the benefits of a passwordless identity platform.

We’re also continuously improving Shield by adding new features and integrations that make passwordless authentication and certificate management even more seamless and user-friendly for organizations of all sizes. In the coming months we’ll be adding support for additional features such as:

• 📧 S/MIME Email Signing + Encryption: Shield will soon support S/MIME certificates for email signing and encryption, allowing your users to securely sign and encrypt their emails using certificates issued by your Shield PKI. This ensures that your organization’s email communications remain secure and trusted.
• 🔐 FIDO2 Passkey + CBA Onboarding: We’ll be bringing self-service passkey + PIV smart card onboarding to Shield, allowing your users to easily register and use FIDO2 passkeys and smart cards for passwordless authentication across your organization’s systems and services.

How Much Does Keytos Shield Cost?

Keytos Shield is designed to be affordable and accessible for organizations of all sizes. You only pay for the users you need, with no minimums, commitments, or base subscription fees. Shield starts at just $1.50 per user per month, with no other subscription costs or hidden fees. As your organization grows, you can easily scale your Shield subscription to accommodate more users without worrying about renegotiating contracts or moving to a different tier.

Number of Users	Price / User / Month
First 500 users	$1.50 USD
Next 500 users	$0.59 USD
Next 4,000 users	$0.25 USD
Next 5,000 users	$0.20 USD
Every user above 10,000	$0.15 USD

At Keytos we don’t believe that prices should be gated by sales calls or enterprise contracts. We won’t pressure you into multi-year contracts or have expiring promotions that artificially inflate prices. Instead, we want to empower every organization to move to passwordless authentication and enjoy the benefits of a secure, user-friendly identity platform without breaking the bank. To that end, we publish our pricing publicly and transparently, so you can see exactly what you’ll pay for Shield without any hidden fees or surprises.

Learn More About Shield Pricing

Can I Try Out Keytos Shield With a Free Trial?

Yes! We offer a 1-month free trial of Keytos Shield for organizations of all sizes. During your free trial, you’ll have access to all the features of Shield, including private PKI certificate authorities, unlimited SCEP certificates, cloud RADIUS service, BYOD device enrollment with Keytos Connect, and global footprint.

You can get started in just a few clicks with a free trial, no credit card required. After your free trial, you can move to a paid subscription and continue to enjoy the benefits of Keytos Shield without any interruptions.

Start Your Free Trial

How Does Shield Compare to EZCA and EZRADIUS?

Keytos Shield is a new Software as a Service (SaaS) offering built on top of our existing EZCA and EZRADIUS platforms, which have been used by thousands of organizations worldwide to move to passwordless certificates and Wi-Fi. You can think of the “EZ” suite of tools as the “Platform as a Service (PaaS)” offerings, while Shield is the SaaS offering that combines all the key features into a single platform and subscription.

Feature	EZCA	EZRADIUS	Shield
Cloud PKI	✅	-	✅
SCEP Certificate Issuance	✅	-	✅
Device ACME Certificate Issuance	✅	-	✅
Cloud RADIUS Server	-	✅	✅
Cloud RadSec Server	-	✅	✅
BYOD with Keytos Connect	-	✅	✅
Pricing Model	Per CA	Per User	Per User

For organizations that are looking for an all-in-one solution for passwordless identity management and access control, Shield is the ideal choice. It provides a unified platform that simplifies the process of moving to passwordless certificates and Wi-Fi, while also offering a more affordable and scalable pricing model. For organizations that want full control and customization over their PKI and RADIUS environments, EZCA and EZRADIUS may still be the better choice and will continue to be fully supported by Keytos.

How Do I Get Started With Keytos Shield?

In just a few clicks you can spin up a Keytos Shield account and start moving to passwordless certificates and Wi-Fi. No sales call, credit card, or enterprise contract is required. You can get started with a free trial and explore all the features of Shield without any risk or commitment.

Start Your Free Trial

Want to chat with a member of our team about your organization’s passwordless identity needs? Schedule a call with us today and we’ll be happy to answer any questions you have about Keytos Shield and how it can help your organization move to passwordless certificates and Wi-Fi.

Schedule a Call