Contact Us

EZCA Pricing

Request Demo

Plans

Basic

All the security at an affordable price

$200 / CA / month

  • FIPS 140-2 (Level 2) HSM backed CAs
  • 1 certificate created or OCSP response per CA per second
  • Support within one business day
  • 99.9% availability
  • Azure IoT integration
  • Azure Key Vault integration
  • Azure application certificate rotation
  • Bring your own ADCS CA
  • Internal ACME support
  • Available in Azure Public, Government, and Azure GCC High environments
Get started

Private Infrastructure

Best for your most critical workloads

$6,000 / location / month

  • Everything in Premium, plus:
  • 160 certificates created or OCSP responses per CA per second
  • 24/7 support within 1 hour
  • Fully isolated infrastructure
Request demo

Self-Hosted Licensing

Host and manage your own infrastructure in your own environment

$3,000 with unlimited CAs / location / month

    Everything in Private Infrastructure, plus:

  • Self-healing infrastructure with Azure PaaS services
  • Automatic deployment and scaling
  • Bring your own infrastructure support
Request demo

Not sure which plan is best for you?

Talk to one of PKI experts on how EZCA can reduce your IT cost, while improving your user productivity and security. Schedule free assessment

Frequently Asked Questions

How many certificates does each Certificate Authority include?

We do not charge per certificate, as long as you stay within the cryptographic activities per second of your CA, you can create infinite number of certificates for free.

What is the difference between FIPS 140-2 (Level 2) and FIPS 140-2 (Level 3)?

FIPS 140-2 Level 3, adds higher standards of physical protections to the HSM (Most organizations only require level 2).

Are there any infrastructure costs or other extra costs?

No, with EZCA there are no hidden fees, you pay what you see, if you create a basic CA in a single location you will only be charged $200 a month, all resources are created in the Keytos tenant and paid by Keytos.

What happens if I create more certificates than my plan's limit?

The plan limits are to ensure organizations don't abuse the system. For example if you issue two certificates at the same second in the basic plan, the CA will issue the certificates no problem. But if you start issuing 10,000 per hour that is where we start throttling you.

Can I chain to an existing root CA?

Yes, if you already have an existing Root CA, you can export the Certificate Signing Request of your EZCA CA, Sign it with your existing Root CA, and import it back to EZCA.

Can Keytos engineers help design and set up my PKI?

Yes, we understand that creating your own PKI can be scary, our PKI experts are here to help you setup a world class PKI by following the latest industry standards.