Not sure which plan is best for you?
Talk to one of PKI experts on how EZCA can reduce your IT cost, while improving your user productivity and security.
Schedule Free Assessment
Plans
Basic CA
All the security at an affordable price
FIPS 140-2 (Level 2) HSM backed CAs
1 cryptographic activity per CA per second
Support within one business day
99.9% Availability
Azure IoT Integration
Azure Key Vault Integration
Azure Application Certificate Rotation
Bring Your Own ADCS CA
Internal ACME Support
$200 per CA per month
Get Started
Premium CA
Higher throughput for cloud scale businesses
FIPS 140-2 (Level 3) HSM backed CAs
20 cryptographic activities per CA per second
24/7 Support within 24 hours
99.95% Availability
Public CA Certificate Management
Azure IoT Integration
Azure Key Vault Integration
Azure Application Certificate Rotation
Bring Your Own ADCS CA
Internal ACME Support
$2000 per CA per month
Request Demo
Private Infrastructure
Best for your most critical workloads
FIPS 140-2 (Level 3) HSM backed CAs
160 cryptographic activities per CA per second
24/7 Support within 1 hour
Fully Isolated Infrastructure
Public CA Certificate Management
Azure IoT Integration
Azure Key Vault Integration
Azure Application Certificate Rotation
Bring Your Own ADCS CA
Internal ACME Support
$6000 per CA per month
Request Demo
Bring your Own HSM
All the great features of Private Infrastructure with the ability to manage your own CA keys
Fully Isolated Infrastructure
24/7 Support response within 1 hour
99.95% Availability
Bring your own HSM support
Get Pricing
Frequently Asked Questions
How Many Certificates does Each Certificate Authority Include?
We do not charge per certificate, as long as you stay within the cryptographic activities per second of your CA, you can create infinite number of certificates for free.
What is the Difference Between FIPS 140-2 (Level 2) and FIPS 140-2 (Level 3)
FIPS 140-2 Level 3, adds higher standards of physical protections to the HSM (Most organizations only require level 2).
Are There Any Infrastructure Costs or Other Extra Costs?
No, with EZCA there are no hidden fees, you pay what you see, if you create a basic CA in a single location you will only be charged $200 a month, all resources are created in the Keytos tenant and paid by Keytos.
What is a Cryptographic Activity?
A cryptographic activity is any operation that requires the use of a private key. This includes certificate creation, CRL signing, OCSP responses, and key generation.
Can I Chain to an Existing Root CA?
Yes, if you already have an existing Root CA, you can export the Certificate Signing Request of your EZCA CA, Sign it with your existing Root CA, and import it back to EZCA.
Can Keytos Engineers Help Design and Setup my PKI?
Yes, we understand that creating your own PKI can be scary, our PKI experts are here to help you setup a world class PKI by following the latest industry standards.