A unified PKI automation and governance engine combining certificate lifecycle operations, workflow orchestration, role-based governance, and audit intelligence — in one platform.
Five tightly integrated layers — each with a single responsibility, each contributing to the complete governance chain.
Web-based dashboards for the two governance panels, plus the operational surfaces devices actually touch.
Core PKI automation logic managing certificate lifecycle workflows, inventory matching, and CA interactions.
Deployed once per OT site. Collects certificate requests locally and relays them outbound only — the CA is never reachable from the site.
Hierarchical CA with offline Root CA (trust anchor) and online Intermediate CA (issuing authority) with air-gap support.
Structured storage for certificates, assets, and templates. Immutable audit event logs with full actor attribution.
Requests arrive automatically from the Orchestrator, not from a person — so governance needs only two roles, cleanly separated at the architecture level.
The control centre for the entire PKI environment. Approves assets, manages users, and holds certificate status for the whole estate.
New assets must be approved here before they can ever request a certificate — the trust gate for the whole platform.
Add users, assign permissions, and enforce MFA and RBAC across both panels.
View the status of every certificate across every asset owner — issued, pending, expiring, revoked.
An asset outside the inventory that requests a certificate is refused automatically and raised here for review.
An asset owner's own view of their own assets. Register, monitor, and keep certificates current — nothing outside their scope.
Full lifecycle control over the assets they own — register a new device, update its details, or retire it.
View the certificate status of their own assets only — no visibility into any other owner's estate.
Surface failed or stalled requests for their own assets so problems are caught before they become outages.
Track upcoming expiries and renewals for owned assets — the same information the CISO Panel sees, scoped to their own estate.
Security is not a layer added on top — it is the foundation the platform is built upon.
The Trust Engine continues to evolve — with a clear path toward HSM integration, Zero Trust, and Post-Quantum Cryptography.
Schedule a live demonstration tailored to your environment and compliance requirements.