Not sure which plan is best for you?
Talk to one of PKI experts on how EZCA can reduce your IT cost, while improving your user productivity and security.
Schedule Free Assessment
Plans
Basic CA
All the security at an affordable price

FIPS 140-2 (Level 2) HSM backed CAs

1 cryptographic activity per CA per second

Support within one business day

99.9% Availability

Azure IoT Integration

Azure Key Vault Integration

Azure Application Certificate Rotation

Bring Your Own ADCS CA

Internal ACME Support

$200 per CA per month
Get Started
Premium CA
Higher throughput for cloud scale businesses

FIPS 140-2 (Level 3) HSM backed CAs

10 cryptographic activities per CA per second

24/7 Support within 24 hours

99.95% Availability

Public CA Certificate Management

Azure IoT Integration

Azure Key Vault Integration

Azure Application Certificate Rotation

Bring Your Own ADCS CA

Internal ACME Support

$500 per CA per month
Request Demo
Private Infrastructure
Best for your most critical workloads

FIPS 140-2 (Level 3) HSM backed CAs

160 cryptographic activities per CA per second

24/7 Support within 1 hour

Fully Isolated Infrastructure

Public CA Certificate Management

Azure IoT Integration

Azure Key Vault Integration

Azure Application Certificate Rotation

Bring Your Own ADCS CA

Internal ACME Support

$6000 per CA per month
Request Demo
Bring your Own HSM
All the great features of Private Infrastructure with the ability to manage your own CA keys

Fully Isolated Infrastructure

24/7 Support response within 1 hour

99.95% Availability

Bring your own HSM support
Get Pricing
Frequently Asked Questions
How Many Certificates does Each Certificate Authority Include?
We do not charge per certificate, as long as you stay within the cryptographic activities per second of your CA, you can create infinite number of certificates for free.
What is the Difference Between FIPS 140-2 (Level 2) and FIPS 140-2 (Level 3)
FIPS 140-2 Level 3, adds higher standards of physical protections to the HSM (Most organizations only require level 2).
Are There Any Infrastructure Costs or Other Extra Costs?
No, with EZCA there are no hidden fees, you pay what you see, if you create a basic CA in a single location you will only be charged $200 a month, all resources are created in the Keytos tenant and paid by Keytos.
What is a Cryptographic Activity?
A cryptographic activity is any operation that requires the use of a private key. This includes certificate creation, CRL signing, OCSP responses, and key generation.
Can I Chain to an Existing Root CA?
Yes, if you already have an existing Root CA, you can export the Certificate Signing Request of your EZCA CA, Sign it with your existing Root CA, and import it back to EZCA.
Can Keytos Engineers Help Design and Setup my PKI?
Yes, we understand that creating your own PKI can be scary, our PKI experts are here to help you setup a world class PKI by following the latest industry standards.