XignSys
XignSys GmbH is a German cybersecurity firm providing BSI-certified passwordless authentication (XignIn) and identity intermediation middleware (ID-Broker) to government agencies, critical infrastructure operators, utilities, healthcare, and educational institutions, primarily serving OZG-compliant eGovernment deployments in Germany.
- Company typePrivate
- Founded2016
- HeadquartersGelsenkirchen, Germany
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What XignSys does
XignSys GmbH is a German cybersecurity company founded in 2016 as a spin-off from the Institute for Internet Security at Westfälische Hochschule in Gelsenkirchen. The company specializes in digital identity and authentication infrastructure for regulated German markets, including eGovernment, E-Health, KRITIS (critical infrastructure), utilities, and education. Its core technology, XignIn, is a BSI-certified, passwordless multi-factor authentication solution that uses smartphone Secure Enclaves for cryptographic key management, comprising a server-side XignIn Manager, native XignIn SDK for Android/iOS, and a consumer-facing Xign.Me app. Complementing this, the ID-Broker middleware provides standardized OIDC/SAML intermediation between online services and German government identity providers (BundID, ELSTER, EUDI-Wallet), positioning XignSys as a cooperative partner of the Federal Ministry of the Interior for OZG implementations. The company also offers Keycloak expert solutions, Customer Identity & Access Management (CIAM), and a Postfach-Broker for secure government-to-citizen communication.
The business model combines recurring software licensing (XignIn SDK, 12-month auto-renewing terms), managed services (ID-Broker operated in BSI-C5 / ISO-27001 German cloud environments or on-premise), and project-based professional services and consulting. Pricing is not publicly disclosed; offers are built per customer requirement. Go-to-market is enterprise field sales with direct engagement supplemented by technology partners (e.g., Noske Office Consulting) for vertical-specific deployments. The company is privately held, founder-owned, and appears bootstrapped aside from a 2019 EY Startup Academy participation and ongoing public research grants. Geographic focus remains Germany/DACH with EUDI-Wallet readiness signaling intent to extend into broader European digital identity interoperability.
XignSys firmographics
Firmographics- Name
- XignSys
- Legal name
- XignSys GmbH
- Website
- https://xignsys.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- XignSys GmbH is a German cybersecurity firm providing BSI-certified passwordless authentication (XignIn) and identity intermediation middleware (ID-Broker) to government agencies, critical infrastructure operators, utilities, healthcare, and educational institutions, primarily serving OZG-compliant eGovernment deployments in Germany.
- Ownership category
- akta.pro rank
XignSys industry classification
Industry- Product category
- Identity and Access Management
- NAICS
- Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Programming Services (7371)
- akta.pro industry
- Multi-Factor Authentication (MFA) & Passwordless AuthenticationHardware, Technology & Telecom/Enterprise Platforms & Databases/Identity & Access Management (IAM) & Directory Services PlatformsAuthentication (MFA/Passwordless/Biometrics) PlatformsBusiness & Public Services/Web, Mobile & Digital Platforms/Digital Identity, Authentication & AccessIdentity & Access Management (IAM) Administration ServicesBusiness & Public Services/IT & Digital Services (Managed Services, Systems Integration)/Managed IT Services (MSP)Identity Verification, Proofing & KYC (IDV)Hardware, Technology & Telecom/Enterprise Platforms & Databases/Identity & Access Management (IAM) & Directory Services Platforms
Keywords
Where XignSys is headquartered
LocationHeadquarters
- HQ city
- Gelsenkirchen
- HQ country
- Germany
- HQ region
- Europe
Offices1 record
Markets served
XignSys business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Software Licensing (XignIn SDK and XignIn Technology): License fees for using XignIn SDK and XignIn technology solutions. The SDK is provided under a license agreement with specific terms including a 12-month initial term that automatically renews for additional 12-month periods unless terminated with 3 months notice. Payment is due annually or for the entire term upfront, with invoices payable within 14 days.
- Professional Services and Consulting: Security consulting, secure software development, implementation services, and project-based engagements covering the entire software lifecycle from concept through ongoing maintenance and support.
- Managed Services / ID-Broker Operations: Managed service delivery of ID-Broker in certified German cloud environments, providing ongoing operation, maintenance, and support for identity infrastructure.
Go-to-market motion1 record
Distribution channels4 records
Marketing channels5 records
XignSys product offering
Product offeringCore offering
XignSys develops and operates BSI-certified digital identity and authentication solutions centered on the proprietary XignIn passwordless MFA technology (Manager, SDK, and Xign.Me authenticator app). The company also delivers the ID-Broker middleware for connecting to German and EU government identity schemes (BundID, ELSTER, EUDI-Wallet) under the Onlinezugangsgesetz, plus Postfach-Broker for certified mailbox integration, and a suite of Keycloak-based CIAM, SSO, and managed trust infrastructure services. Target customers are enterprises, public administration, healthcare, critical infrastructure operators, and higher education institutions.
Product overview
XignSys is a cybersecurity company specializing in digital identities and authentication solutions, founded in 2016 as a spin-off from the Institute for Internet Security at Westfälische Hochschule. The product portfolio centers on the XignIn technology (comprising the XignIn Manager server component, XignIn SDK for Android/iOS, and Xign.Me consumer app) for passwordless MFA, supplemented by the ID-Broker middleware for OZG compliance connecting to BundID/ELSTER/EUDI-Wallet, Keycloak expert solutions, Customer Identity & Access Management (CIAM), and the Postfach-Broker for government mailbox integration. Services include Security Driven Development consulting, Professional Services (cloud/app development), and Technical Consulting, all built on open standards (OpenID Connect, OAuth2, SAML) and combined with proprietary BSI-certified security technology.
Differentiator
Problem solved
Functional benefit
Brands
- XignIn: Passwordless, cryptography-based multi-factor authentication technology solution developed by XignSys
- Xign.Me
- ID-Broker für OZG
- City.Pass
- XignIn SDK
- Keycloak Solutions
Products and services
- XignIn BSI-certified, hardware-independent passwordless multi-factor authentication technology based on asymmetric cryptography, delivered through three components: the XignIn Manager (central management), the XignIn SDK (for integration into web and mobile applications), and the Xign.Me authenticator app (end-user mobile token). Designed for organizations that need strong, phishing-resistant authentication with flexible key management on standard HSMs.
- ID-Broker (OZG) Middleware that enables OZG-compliant connection of online services to BundID, ELSTER, and the EUDI-Wallet, providing a central integration point for German and European government identity schemes. Targeted at public administration and companies that need to provide legally compliant digital administrative services.
- Postfach-Broker REST-API middleware that enables integration of certified digital mailbox solutions into applications, allowing organizations to send and retrieve documents via DE-Mail, BeBPo, and other certified mailbox providers.
- Customer Identity & Access Management (CIAM) Keycloak-based CIAM solution that combines login, registration, self-service, and consent management with the company's BSI-certified authentication components, offered as a managed package for organizations that need customer-facing identity.
- Single Sign-On (SSO) Keycloak-based SSO solution that unifies access to multiple applications and services for employees, citizens, or customers, with support for OIDC, SAML, and integration with XignIn and ID-Broker.
- All-in-One Trust Infrastructure Managed service that covers the complete lifecycle of a Keycloak-based identity infrastructure, from initial architecture and design through secure implementation, operation, and ongoing support, delivered by BSI-qualified personnel.
- Keycloak Expert Solutions Specialized consulting and engineering services for organizations that already run or want to deploy Keycloak at scale, including custom plugins, themes, migration, performance optimization, and cluster hardening.
- Security Driven Development Software development service that builds secure, OZG-compliant applications on top of the XignSys identity stack, with embedded security expertise and BSI-aligned development practices.
- Professional Services and Consulting Strategic consulting, architecture, integration, and support services for customers adopting the XignSys identity platform, delivered by BSI-qualified consultants and engineers.
Quantifiable outcome
- Significantly improved data quality, accelerated registration, and secure, convenient authentication for citizens, tourists and employees
- +2 more outcomes
Companies that use XignSys
Customer profileNamed customers2 records
Segments6 records
Ideal customer profiles5 records
XignSys technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration6 records
Feature6 records
XignSys partnerships and signals
Strategic signalPartnerships
Eleven partnerships are on record, tiered core, flagship, minor and moderate.
- Bundesministerium des Innern und für Heimat (BMI) / Federal Ministry of the InteriorcoreXignSys operates as a cooperative partner of the Federal Ministry of the Interior (BMI) for OZG implementations. They are responsible for implementing interfaces for connecting applications to BundID and Mein Unternehmenskonto (ELSTER) under the Onlinezugangsgesetz (OZG).
- Institut für Internet-Sicherheit an der Westfälischen HochschulecoreXignSys was founded as a spin-off from this research institute, establishing ongoing collaborative research relationships. The company benefits from academic research partnerships for innovation and talent development.
- Noske Office Consulting + Marketing GmbH (NOC)flagshipNOC uses XignSys ID-Broker for OZG-compliant connections to BundID and ELSTER for their tibros-Online education portal serving chambers of commerce. This partnership enables digital administration of training records and examination registrations for apprentices, trainers, and examiners across German chambers.
- Technische Hochschule Ostwestfalen-LippeminorResearch partner in the CoSiMo project for inclusive mobility systems, combining AI-based assistance with secure identity management for autonomous transportation systems.
- Hochschule Rhine-Waal (Rhine-Waal University of Applied Sciences)minorResearch partner in the CoSiMo project for inclusive mobility systems, contributing to the development of secure, interoperable mobility systems.
- TeleTrust - Bundesverband IT-Sicherheit e.V.moderateXignSys holds the TeleTrust 'Security made in Germany' seal and is a member of the TeleTrust association. This certification indicates compliance with German IT security standards and supports trust-building with German customers requiring domestic security certifications.
- Bundesministerium für Bildung und Forschung (BMBF)moderateFunding source for NetLab research project on secure digitalization and networking of testing laboratories in industry and automotive sectors, and Smartphone ID+ project for secure digital identities on smartphones.
- Bundesministerium für Wirtschaft und Klimaschutz (BMWK)moderateFunding source for Smartphone ID+ research project as part of the Digital Identities showcase initiative, focused on identification, authentication, digital signatures, and payment processes.
- Ministerium für Wirtschaft, Industrie, Klimaschutz und Energie des Landes Nordrhein-WestfalenmoderateFunding source for Smartphone-Bürger-ID project for mobile use of digital administrative services and CoSiMo research on inclusive mobility systems.
- Bescheinigungsstelle ForschungszulageminorFunding certification body for Corona platform research project on secure communication platform for health authorities during the COVID-19 pandemic.
- Deutsche PostmoderateIntegration partner for City.Pass solution, providing address verification interface during user registration to ensure clean and precise address data.
Scale indicators2 records
Recent moves7 records
Expansion highlights6 records
XignSys competitors and assessment
Company assessmentDirect peers
- IDnow: IDnow is a German identity verification (KYC/AML) provider offering AutoIdent and similar services. It overlaps with XignSys's identity verification integrations and is comparable in serving German regulated industries, though with a stronger verification rather than authentication focus.
- Verimi: Verimi is a German cross-industry identity platform offering secure login, eID, and identity verification. It directly competes with XignSys in the German consumer and citizen identity space, especially for e-government and regulated digital services.
- HYPR: HYPR is a passwordless authentication provider using FIDO2 and smartphone-based cryptographic credentials. It is a direct competitor to XignIn in the phishing-resistant MFA category, though HYPR's footprint is more US-centric while XignSys is Germany-centric.
- Keycloak (open source / Red Hat / Wildfly): Keycloak is the open-source IAM platform on which XignSys builds its Keycloak Expert Solutions and integrates XignIn. It is a direct technology peer, with XignSys positioned as a specialized system integrator and value-added extension provider on top of Keycloak.
- Auth0 by Okta (developer identity): Auth0 (now part of Okta) provides developer-focused authentication and identity APIs including passwordless MFA. It is a direct peer in API-first authentication and competes with XignIn SDK and ID-Broker for developer and customer identity use cases.
- Okta (including Auth0): Okta is a leading cloud-based IAM platform offering MFA, passwordless, SSO, and CIAM capabilities. It directly competes with XignSys's passwordless MFA, CIAM, and SSO offerings, though Okta operates at global scale rather than specializing in German-regulated e-government.
Broad incumbents
- Ping Identity: Ping Identity provides enterprise-grade IAM, MFA, and CIAM solutions with strong presence in regulated industries including government and financial services. It competes with XignSys for complex, high-assurance identity deployments.
- ForgeRock: ForgeRock is a digital identity platform serving enterprise, government, and regulated industries with CIAM, MFA, and identity governance. It is a broad incumbent that competes with XignSys in complex, large-scale government and enterprise identity deployments.
- Microsoft Entra ID (formerly Azure Active Directory): Microsoft Entra ID is the dominant enterprise identity platform offering MFA, passwordless, SSO, and CIAM. It is a broad incumbent that competes across all of XignSys's verticals, with particular pressure in enterprise and government segments via Microsoft 365 bundling.
- Bundesdruckerei: Bundesdruckerei is the German federal government's identity services provider and operates the eID and related identity infrastructure. It is a broad incumbent in the German identity ecosystem with potential overlap with XignSys's government-facing offerings.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
XignSys social profiles
Digital presenceXignSys compliance and trust
Trust signalCompliance1 record
XignSys financial estimates
Financial estimateRevenue estimate
Valuation estimate
XignSys leadership team
Management profileNumber of profiles
Profiles2 records
XignSys funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
XignSys M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about XignSys
What does XignSys do?
XignSys develops and operates BSI-certified digital identity and authentication solutions centered on the proprietary XignIn passwordless MFA technology (Manager, SDK, and Xign.Me authenticator app). The company also delivers the ID-Broker middleware for connecting to German and EU government identity schemes (BundID, ELSTER, EUDI-Wallet) under the Onlinezugangsgesetz, plus Postfach-Broker for certified mailbox integration, and a suite of Keycloak-based CIAM, SSO, and managed trust infrastructure services. Target customers are enterprises, public administration, healthcare, critical infrastructure operators, and higher education institutions.
Is XignSys a public or private company?
XignSys is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was XignSys founded?
XignSys was founded in 2016. It employs 11 to 50 people.
Where is XignSys based?
XignSys is headquartered in Gelsenkirchen, Germany, in the Europe region.
How does XignSys make money?
Three revenue lines are on record. Software Licensing (XignIn SDK and XignIn Technology) is the primary driver. The others are professional Services and Consulting and managed Services / ID-Broker Operations.
Who are XignSys's main competitors?
Direct peers on record are IDnow, Verimi, HYPR, Keycloak (open source / Red Hat / Wildfly), Auth0 by Okta (developer identity) and Okta (including Auth0). Broad incumbents are Ping Identity, ForgeRock, Microsoft Entra ID (formerly Azure Active Directory) and Bundesdruckerei.
Does XignSys have an API?
Yes. XignSys offers REST APIs and SDKs for authentication and identity management integration. The XignIn SDK is available as a native library for Android and iOS that can be integrated into any app. The Postfach-Broker provides a standardized REST-API interface for authorities to connect to mailbox solutions. The XignIn Manager serves as the server-side component with no-code integration via plug-in technology and open standards. Integration with government identity systems (BundID, ELSTER, EUDI-Wallet) is via OIDC and SAML protocols. Developer documentation is at docs.xignsys.com.
What industry is XignSys in?
XignSys's product category is Identity and Access Management. Its primary akta.pro industry code is HDAEAJAC, Multi-Factor Authentication (MFA) & Passwordless Authentication, with a secondary code of BPAMAEAE, Authentication (MFA/Passwordless/Biometrics) Platforms. Its NAICS code is 54151 and its SIC code is 7371.