What XTec does

XTec Incorporated is a U.S.-based provider of identity, credential, and access management (ICAM) solutions, founded in 1992 and headquartered in Miami, Florida with a government-facing office in Reston, Virginia. The company built and operates the AuthentX platform, an end-to-end identity management suite that includes the AuthentX IDMS/CMS identity and credential management system, AuthentX Cloud (the only Government Community Cloud IAM solution authorized at FedRAMP High), the Authentication Authority for real-time credential validation, the AuthentX PACS physical access control system, AuthentXware middleware for logical access, AuthentX ID Secure (a FIDO2-certified passwordless server), the AuthentX Lifecycle Kiosk for self-service credential management, and XTec CloudPKI certificate authority services. Proprietary Mediametric technology, covered by 14 patents held by founder Albert Fernandez, underpins the company's smart card reader and counterfeit-resistant authentication architecture. The platform is integrated with Thales TCT Luna HSMs for cryptographic key protection and is linked to the Federal Bridge CA via WidePoint-ORC.

XTec generates revenue primarily through U.S. federal government contracts procured via GSA contract vehicles, including Blanket Purchase Agreements (BPAs) with HHS ($400M HSPD-12 ICAM SiS), DMDC ($100M+ for PIV cardstock and middleware), GSA ($50M+ PIV cardstock and $177.2M USAccess modernization), and the Department of the Navy (ESL BPA for HID Global licenses). Revenue mechanics combine managed services for credential issuance, subscription-based cloud IAM services through AuthentX Cloud, certificate authority and PKI service fees, and physical hardware sales of GSA-approved smart card readers. Customer concentration is essentially 100% U.S. federal government, spanning over 70 agencies including DHS, HHS, GSA, DMDC, DON, DEA, USAGM, AOUSC, the Federal Bureau of Prisons, and NSF. The company also maintains commercial distribution channels for PKI services to non-federal customers and has articulated capabilities in critical infrastructure, financial services, and healthcare verticals, though disclosed revenue from these segments is minimal. In March 2026, XTec was acquired by Germany-based Giesecke+Devrient and integrated into the Veridos joint venture between G+D and Bundesdruckerei, shifting XTec's growth trajectory into a global strategic acquirer's public sector identity platform.

Name

XTec

Legal name

XTec Incorporated

Website

https://xtec.com

Company type

Private

Founded year

1992

Operating status

Acquired

Headcount range

51–100 employees

Short description

XTec is a U.S.-based provider of identity, credential, and access management solutions serving primarily U.S. federal government agencies through GSA contract vehicles, anchored by its FedRAMP High-authorized AuthentX Cloud platform and PKI infrastructure.

Ownership category

akta.pro rank

Product category

Federal Identity and Access Management (ICAM)

NAICS

Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151), Computer Systems Design Services (541512)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Secrets Management & Machine Identity (API keys, certificates, workload identity) (HDAEAJAJ)

Keywords

• Identity access management
• Public key infrastructure
• Federal credential management
• Phishing-resistant authentication
• Smart card middleware

Headquarters

HQ city

Miami

HQ country

United States

HQ region

North America

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations, Supply Chain

Revenue model

1. U.S. Federal Government Contracts: XTec generates the majority of its revenue through federal government contract vehicles including Blanket Purchase Agreements (BPAs) with agencies such as GSA, DMDC, HHS, and the Department of the Navy. Revenue is driven by large multi-year BPAs covering credential issuance, identity management services, cardstock supply, middleware, and program management. Examples include a $400M HHS HSPD-12 ICAM SiS BPA, a $100M+ DMDC BPA, a $50M+ GSA PIV cardstock BPA, and a $177.2M GSA USAccess credentialing task order.
2. Government Community Cloud IAM Services: XTec operates AuthentX Cloud as a FedRAMP High authorized SaaS platform serving federal agencies. Revenue is generated through subscription-based managed service agreements for identity, credential, and access management hosted services.
3. Certificate Authority and PKI Services: XTec provides CA and PKI services to both federal and non-federal (commercial) customers, issuing PIV-I credentials and managing certificate chains. Revenue is generated through service fees for certificate issuance, management, and revocation services.

Go-to-market motion1 record

Distribution channels4 records

Marketing channels5 records

Core offering

XTec delivers the AuthentX end-to-end identity, credential, and access management (ICAM) platform for U.S. federal government agencies and select commercial customers. The platform provides identity verification, PIV/PIV-I credential issuance and lifecycle management, phishing-resistant MFA, physical and logical access control, PKI and certificate authority services, and cloud-based Hardware Security Modules, all operated within FedRAMP High authorized cloud infrastructure serving over 70 federal agencies.

Differentiator

Problem solved

Functional benefit

Products and services

• AuthentX IDMS/CMS Flagship end-to-end identity management system that manages millions of U.S. federal identities. Provides identity vetting, biometric and document validation, and cryptographically secured credential issuance and lifecycle management for PIV, PIV-I, PIV-C, and FRAC credentials. Supports cloud-based and in-house deployment models and serves U.S. federal government agencies requiring HSPD-12 and FICAM compliance.
• AuthentX Cloud The only Government Community Cloud IAM solution authorized at FedRAMP High. Provides high-assurance identity verification, credential authentication, and authorization services with continuous monitoring and vulnerability management. Supports IAL1/IAL2/IAL3 enrollment, AAL1/AAL2/AAL3 credentialing, mobile identity credential issuance (mDL), QR code access control, and API management. Built for U.S. federal agencies and select commercial customers requiring the highest level of cloud security controls.
• AuthentXware Premier high-assurance identity management middleware providing end-to-end authentication, validation, and authorization for both logical and physical access. Functions as a sophisticated appliance safeguarding against internal and external threats with strong mutual authentication. The only certified middleware providing comprehensive desktop lifecycle management via Microsoft CAPI for smart card login, email encryption, digital signatures, and single sign-on.
• Phishing-Resistant MFA Comprehensive multi-factor authentication suite supporting smart card-based PIV/PIV-I credentials, PKI-based tokens (USB, wristbands, NFC), FIDO2 tokens, derived and mobile credentials, and biometric authentication with a Credential Management System (CMS) hosted at FedRAMP High. Trusted by over 70 federal agencies for HSPD-12, FICAM, and NIST compliance.
• XTec CA Services / CloudPKI High-availability, secure Certificate Authority services for Government and Commercial sectors, operating within a FedRAMP certified environment. Includes XTec CloudPKI, XTec CloudPIV-I Service, XTec CloudCA Service, XTec CloudSSP Service, and WidePoint NFI Service. Over 15 years of experience issuing PIV-I credentials, with cross-certification to the Federal Bridge CA via the WidePoint-ORC partnership and adherence to ISO 21188 specifications.
• Luna as a Service (Cloud HSM) Cloud-based Hardware Security Module (HSM) solution powered by Thales TCT Luna T-Series, delivered through the FedRAMP High authorized AuthentX Cloud. Features FIPS 140 Level 3 Certification and CNSS Approval for National Security Systems PKI. Provides geographic redundancy across three U.S. facilities for high availability and disaster recovery.
• Authentication Authority Central authentication validation solution functioning as an OCSP responder supporting CRL, LDAP, OCSP, and SCVP protocols. Provides real-time status for credentials, temporary cache for visiting credentials, and a live monitoring dashboard for physical and logical transactions with fraud detection including concurrent access attempt detection and suspicious activity alerts.
• AuthentX PACS (Physical Access Control System) Cloud-based Physical Access Control System integrated with AuthentX IDMS/CMS, featuring secure card readers and cryptographic authentication. Edge model infrastructure enables secure remote updates without hardware replacement. Supports NIST and FISMA security guidelines and includes card readers X9900, X9920, X9921, X9907, X9927, X10000, X10000 Biometric, and X10020.
• AuthentX Lifecycle Kiosk Self-service kiosk for credential enrollment and maintenance with biometric verification and cryptographic authentication. Supports PIN changes, credential unlocking, digital certificate updates, and personal information updates. Section 508 compliant and designed to reduce IT overhead for federal agencies managing large workforce credentials.
• AuthentX ID Secure (FIDO2 Server) Flagship authentication solution certified as a FIDO2 Server, enabling passwordless authentication with enhanced security, seamless user experience, scalability, and interoperability across a wide range of devices and platforms. Reduces vulnerabilities associated with traditional credentials using advanced cryptographic security and FIDO Alliance protocols.

Quantifiable outcome

• Successfully issued over 1,000,000 Derived PIV Credentials for the Department of Homeland Security on laptops, tablets, tokens, and mobile phones.
• +3 more outcomes

Named customers10 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

AI capability2 records

Feature12 records

Partnerships

Five partnerships are on record, tiered core and key.

• IDEMIA Public SecuritycoreStrategic or Co-development Partner · 30 January 2024XTec and IDEMIA Public Security formed a strategic partnership to supply Personal Identity Verification (PIV) cardstock and personalization services to the GSA for the USAccess shared service. XTec provides identity and access management expertise, system integration, and program management, while IDEMIA supplies world-class smartcard technology. The partnership combines XTec's ICAM capabilities with IDEMIA's PIV and CAC card technology to deliver solutions meeting stringent government security requirements.
• YubicocoreStrategic or Co-development Partner · 2 July 2021XTec partnered with Yubico to issue PIV-compatible alternative tokens (YubiKey Series 5 FIPS hardware tokens) to Federal organizations. The partnership addresses use cases requiring alternative token form factors beyond smart cards. XTec and Yubico deployed these tokens at the Department of Homeland Security to complement existing HSPD-12 PIV credentials and help agencies meet the federal cybersecurity mandate for multifactor authentication.
• WidePoint-ORCkeyTechnology or IntegrationXTec's Cloud PKI CA is linked to the Federal Bridge CA through a strategic partnership between WidePoint-ORC and XTec. This partnership enables XTec's certificate chain to achieve cross-certification with the U.S. Federal PKI, allowing XTec to issue PIV-I credentials and provide certificates recognized across the federal government identity ecosystem.
• Thales TCT (Trusted Cyber Technologies)keyTechnology or IntegrationXTec partnered with Thales TCT to offer Luna as a Service, a cloud-based Hardware Security Module (HSM) solution integrated into XTec's FedRAMP High AuthentX Cloud. Thales TCT's Luna T-Series HSMs with FIPS 140 Level 3 Certification and CNSS approval provide the cryptographic key protection layer for XTec's IAM platform.
• HID GlobalkeyChannel Partner/ Reseller/ DistributorXTec serves as the primary contractor and integrator for HID Global perpetual licenses and maintenance under the Department of the Navy Enterprise Software License (ESL) BPA. XTec provides a centralized ordering process and pre-negotiated discounted pricing for HID Global products to all Navy components.

Scale indicators8 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• HID Global: HID Global is a leading provider of physical and logical access credentials, smart cards, and identity readers serving federal, enterprise, and government markets. XTec serves as the primary federal integrator and reseller for HID Global's ActivID and credentialing products through the DON ESL BPA, positioning HID as both a close channel partner and direct competitor in the federal ICAM space.
• Veridos: Veridos, the G+D/Bundesdruckerei joint venture into which XTec was integrated following the March 2026 G+D acquisition, is the global government identity solutions platform now housing XTec. Veridos supplies ePassports, national ID cards, and border management systems worldwide and is the closest structural peer for XTec's federal ICAM franchise post-acquisition.
• IDEMIA Public Security: IDEMIA is the global leader in government-issued secure identity solutions and a direct peer of XTec in federal PIV credentialing. XTec and IDEMIA co-deliver the GSA USAccess program (XTec provides IAM and program management, IDEMIA supplies the physical smartcards), making them both partners and adjacent competitors in the same federal identity stack.
• Thales Trusted Cyber Technologies: Thales TCT provides FIPS 140-3 certified hardware security modules (Luna HSMs) and PKI solutions to the U.S. federal market. Thales TCT partners with XTec to deliver 'Luna as a Service' within AuthentX Cloud, but also competes directly for federal PKI and encryption business, including CNSS-approved key management for National Security Systems.
• WidePoint-ORC: WidePoint-ORC is a provider of identity management and PKI services to federal and commercial customers and a direct peer of XTec. The two companies partner to link XTec's Cloud PKI to the Federal Bridge CA, but WidePoint-ORC independently competes for federal PKI, PIV-I, and mobility management contracts, including the NFI / derived credential services that overlap XTec's offerings.
• Entrust Corporation: Entrust is a global provider of PKI, certificate authority, and digital identity solutions used widely across U.S. federal agencies (TLS, PIV-I, DoD PKI). It competes with XTec in the federal PKI / CA services space and offers comparable certificate lifecycle management and trust-list interoperability, including AATL-listed certificates.

Emerging players

• CyberArk: CyberArk is a leading identity security platform focused on privileged access management, secrets management, and machine identity, with growing federal government traction. While not a PIV credentialing competitor, CyberArk overlaps with XTec's emerging phishing-resistant MFA and machine-identity adjacencies, particularly for federal zero-trust and EO 14028 implementations.

Broad incumbents

• Okta: Okta is a leading cloud-native identity and access management platform with FedRAMP authorization serving federal, state, and commercial customers. While Okta focuses on workforce SSO and customer identity rather than PIV credential issuance, it increasingly overlaps with XTec's phishing-resistant MFA and FedRAMP-authorized identity services in the federal market.
• Leidos: Leidos is a large federal IT and systems integrator serving DoD, DHS, HHS, and civilian agencies with cybersecurity, identity, and mission IT programs. Leidos competes with XTec for high-dollar federal ICAM and HSPD-12 integration awards and serves as a prime contractor on overlapping contracts where XTec operates as a sub-contractor or specialist vendor.

Regional players

• ManTech International: ManTech (now a Constellis subsidiary following 2024 sale) provided federal IT services including cybersecurity and identity solutions to DoD and intelligence agencies. As a U.S.-headquartered federal IT integrator, ManTech competed with XTec for ICAM and HSPD-12 systems integration contracts across defense and civilian agencies.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/xtec-incorporated

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about XTec