NETLOCK Kft.

What NETLOCK Kft. does

NETLOCK Kft. is Hungary's first and leading qualified trust service provider (qualified CA / hitelesítés-szolgáltató), incorporated as a private limited company in Budapest in 1996 and operating continuously for over 25 years. The company runs a regulated Public Key Infrastructure under EU eIDAS Regulation 910/2014 and Hungarian law (24/2016 BM decree), audited annually by the National Media and Communications Authority (NMHH). NETLOCK issues digital identity certificates (signature, seal, encryption, authentication), SSL/TLS certificates at DV, OV, and EV validation levels (including QWAC/PSD2), qualified timestamping tokens, and runs the EESZT healthcare authentication program mandated for all publicly funded Hungarian healthcare providers since November 2017.

The product portfolio spans cloud-based qualified e-signature via NETLOCK (with video-based identification), NETLOCK SIGN Business (browser-based bulk document signing without chip cards or readers), and NETLOCK SIGN Enterprise (server-side integrated signing for enterprise IT). Supporting modules include SIGNASSIST (server-side authentication and process control) and NLToken (browser extension supporting PAdES/XAdES/CAdES/ASIC signatures). Hardware (QSCD/SCD smart cards, USB and SIM-sized readers, HSM modules) is bundled with certificate subscriptions. Resale of Certum (Asseco) certificates extends the portfolio to Code Signing and S/MIME.

Revenue is generated predominantly through annual or multi-year subscriptions on certificates and signature packages priced in Hungarian Forint, supplemented by one-time hardware sales, professional services (developer support at HUF 180,000-360,000/day, PKI consulting), and expedite/liability-extension fees. The go-to-market is hybrid: a self-serve web platform for individuals and SMBs to purchase, manage, and renew certificates; direct enterprise sales for healthcare, legal, banking, and large-scale PKI deployments. Pricing tiers are segmented by certificate class (A/B/C for OV SSL), domain count for multidomain offerings, and transaction volumes for signature packages. End markets include Hungarian healthcare (mandated EESZT certificates), legal professionals (qualified lawyer certificates for MOKKA proceedings), e-commerce and banking (EV SSL, QWAC/PSD2), and general enterprises signing documents via qualified e-signatures.

Name

NETLOCK Kft.

Legal name

NETLOCK Informatikai és Hálózatbiztonsági Szolgáltató Kft.

Website

https://netlock.hu

Company type

Private

Founded year

1996

Operating status

Operating

Headcount range

51–100 employees

Short description

NETLOCK Kft. is a Budapest-based qualified trust service provider founded in 1996, offering PKI-based digital identity certificates, qualified e-signatures, timestamping, and SSL/TLS certificates for Hungarian healthcare, legal, financial, and general enterprise customers under EU eIDAS regulation.

Ownership category

akta.pro rank

Product category

Digital Trust Services

NAICS

Financial Transactions Processing, Reserve, and Clearinghouse Activities (522320)

SIC

Finance Services (6199)

akta.pro primary industry

Key Management Infrastructure (HSMs, key vaults, MPC/TSS key mgmt, rotation) (FSAPACAE)

Keywords

• Digital trust services
• Electronic signature solutions
• SSL certificates
• Qualified timestamping
• PKI infrastructure

Headquarters

HQ city

Budapest

HQ country

Hungary

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Certificate Services (SSL/TLS, Signature, Seal, Authentication): Recurring annual subscription fees for DV, OV, EV SSL certificates, signature certificates, seal certificates, authentication certificates, and PSD2 QWAC certificates. Sold per domain, per certificate class, with multi-year subscription options and multi-domain packages.
2. Electronic Signature Platform Services: Cloud-based qualified e-signature services (NETLOCK SIGN Business, NETLOCK SIGN Enterprise, NETLOCK cloud service) generating recurring subscription revenue for certificate packages with transaction volumes.
3. Timestamping Services: Annual subscription packages for timestamp tokens (e.g., TS1000: 1000 timestamps/year; TS5000: 5000 timestamps/year), with per-unit overage pricing.
4. Hardware (QSCD/SCD Devices, Card Readers): One-time sales of intelligent chip cards (QSCD/SCD), USB and SIM-sized card readers, and HSM modules bundled with certificate subscriptions.
5. Professional Services: One-time fees for expedited issuance, project management, developer support (junior/intermediate/senior/tester), PKI consulting, PKI assistant, business analyst, and establishment support.
6. Certificate Management Services: Fees for certificate renewal, modification, status change, re-keying (loss/compromise within/after 30 days), usage fees, and certificate status information access.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels5 records

Core offering

NETLOCK Kft. is Hungary's first qualified trust service provider, offering digital identity, electronic signature, timestamping, and authentication solutions built on Public Key Infrastructure (PKI). The company provides qualified e-signature platforms (NETLOCK SIGN Business/Enterprise), SSL/TLS certificates (DV, OV, EV, QWAC for PSD2), timestamping services, encryption and authentication certificates, and sector-specific certificates for healthcare (EESZT) and legal professionals. All offerings comply with eIDAS regulation and Hungarian law (24/2016 BM decree).

Product overview

NETLOCK Kft. is Hungary's leading qualified trust service provider offering a comprehensive portfolio of digital identity and electronic signature solutions. The core product family includes NETLOCK (cloud-based qualified e-signature with video identification), NETLOCK Sign Business (web-based mass document signing), and NETLOCK Sign Enterprise (enterprise-integrated signature solution). Supporting these are SIGNASSIST (server-side authentication module) and NLToken (browser-based signing extension). SSL certificate offerings span DV, OV, and EV levels plus QWAC for PSD2 compliance. Additional services include timestamping, encryption/authentication certificates, smart card hardware, EESZT healthcare certificates, and qualified lawyer certificates. The company also resells Certum certificates through partnership. All services comply with eIDAS regulations and Hungarian law, with ISO 9001:2015 and ISO 27001:2022 certifications.

Differentiator

Problem solved

Functional benefit

Brands

• NETLOCK Sign Business: Qualified e-signature service without chip card and card reader, enabling users to sign multiple documents simultaneously via web interface.
• NETLOCK Sign Enterprise
• SIGNASSIST
• NLToken

Products and services

• NETLOCK (Cloud e-Signature Service) Cloud-based qualified electronic signature service using video-based identification for remote onboarding, enabling document signing without physical smart card hardware. Targets individual professionals and businesses needing convenient qualified e-signatures.
• NETLOCK Sign Business Web-based qualified e-signature service for businesses that enables simultaneous signing of large volumes of documents through a web interface, removing the need for chip cards or card readers. Targeted at businesses with high-volume document signing needs.
• NETLOCK Sign Enterprise Integratable qualified electronic signature solution for medium and large enterprise IT systems featuring server-side key storage and flexible integration capabilities. Designed for organizations needing qualified signatures embedded into existing enterprise workflows.
• Qualified Timestamping Service Digital timestamping service that proves the accurate and authentic creation time of any digital document or data file. RFC 3161 compliant, using ECC algorithm and independent time sources (atomic clocks, GPS clocks). Available in TS1000 (1000/year) and TS5000 (5000/year) annual subscription packages with per-unit overage pricing.
• Domain Validated (DV) SSL Certificate Entry-level SSL/TLS certificate providing basic domain validation, suitable for general websites, blogs, and forums. Targeted at website owners seeking affordable encryption.
• Organization Validated (OV) SSL Certificate Organization Validated SSL certificate providing clear identification of the website operator. Suitable for e-commerce sites, credit card payment pages, and password-protected admin interfaces. Priced in three classes (A, B, C) with single-domain and multi-domain options.
• Extended Validation (EV) SSL Certificate Highest level of authentication SSL certificate, displaying the company name in the green address bar. Recommended for financial institutions, banking services, and high-trust e-commerce environments.
• QWAC Certificate (PSD2) Qualified Website Authentication Certificate compliant with the EU PSD2 directive and EBA Strong Customer Authentication (SCA) requirements. Enables banking and payment service providers to operate in the EU.
• Signature and Seal Certificate (Aláíró tanúsítvány és bélyegző) Signature and seal certificates for creating legally binding electronic signatures or organizational stamps on documents. Compliant with eIDAS regulation and Hungarian legal requirements, providing full probative force for individual or organizational signing.
• Encryption and Authentication Certificates Certificates enabling encryption of communications and certificate-based user identification. Used for receiving encrypted messages and authenticating users to IT systems and applications.
• EESZT Healthcare Certificate Enhanced-security SW authentication certificate for the Hungarian Electronic Health Service (EESZT). Available as a 2-year subscription at 30,000 Ft net. Enables healthcare institutions and pharmacies to authenticate to the national EESZT system as mandated by law since November 2017.
• Qualified Lawyer Certificate Package (Minősített ügyvédi tanúsítvány) Bundled qualified lawyer certificate package for Hungarian Bar Association members. Includes qualified signature/seal certificate with 1000 transactions/year, qualified timestamps (1000/year), QSCD smart card, and USB card reader. Available as 1-year (59,000 Ft net) or 2-year (105,000 Ft net) subscription. Required for electronic company procedures (MOKKA), court filings, and authentication.
• Certum Reseller Certificates Third-party SSL, Code Signing, and S/MIME certificates offered by NETLOCK as an official Certum (Asseco) reseller. Extends NETLOCK's product portfolio with international brand certificates.

Quantifiable outcome

• Qualified e-signatures carry full probative force equivalent to handwritten signatures across the EU under eIDAS Article 25(2)
• +3 more outcomes

Named customers2 records

Segments5 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature7 records

Partnerships

One partnership is on record.

• Certum (Asseco)coreChannel Partner/ Reseller/ DistributorNETLOCK serves as an official Certum (Asseco) certificate reseller, offering Certum-branded SSL certificates (DV, OV, EV), Code Signing, and S/MIME certificates alongside its own CA hierarchy. This partnership extends NETLOCK's product portfolio to cover the full range of website security certificates through a trusted international brand.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• GlobalSign: Established European-headquartered CA and PKI provider offering SSL, e-signature, and identity solutions under eIDAS. Highly comparable to NETLOCK in regulatory positioning and product breadth, but operates at significantly larger international scale.
• Sectigo: Major global certificate authority offering SSL, Code Signing, S/MIME, and enterprise PKI. Competes directly with NETLOCK's SSL portfolio, including via Certum-branded products in some markets, and represents the kind of scale competitor that pressures domestic CA pricing.
• DigiCert: Global leader in TLS/SSL, PKI, and digital trust services. Competes with NETLOCK across the full SSL certificate spectrum (DV/OV/EV) and is the dominant Western European CA brand that NETLOCK competes against for enterprise and banking customers.
• Entrust: Established PKI, SSL, and digital identity solutions provider serving enterprises and governments globally. Comparable to NETLOCK in the PKI/digital certificate space, with overlapping offerings around SSL, e-signature, and authentication for regulated industries.

Emerging players

• Adobe Sign: Enterprise e-signature offering within Adobe Document Cloud, expanding qualified electronic signature capabilities in the EU. Competes with NETLOCK for enterprise e-signature spend, though typically at the SaaS/workflow layer rather than as a QTSP.
• DocuSign: Global e-signature and digital agreement platform with growing eIDAS-qualified offerings in Europe. Not a direct CA competitor but increasingly competes with NETLOCK's qualified e-signature products (NETLOCK SIGN Business/Enterprise) for enterprise document workflow spend.

Others

• IDnow: European provider of identity verification and e-signature solutions with video identification technology comparable to NETLOCK's VRA capability. Adjacent competitor in the remote identity verification layer that underpins certificate issuance workflows.

Regional players

• PrimeSign: DACH-region qualified trust service provider offering eIDAS-compliant e-signature solutions. Comparable to NETLOCK as a European regional QTSP focused on regulated verticals, providing a useful peer for European qualified trust service economics and growth benchmarks.

Direct peers

• Certum (Asseco): Polish qualified trust service provider and CA owned by Asseco; offers SSL, Code Signing, and qualified e-signature products. Both a NETLOCK partner (reseller relationship) and a peer, since Certum products are resold by NETLOCK but compete with NETLOCK's own CA hierarchy in adjacent CEE markets.
• Microsec: Hungarian qualified trust service provider offering e-signature, electronic sealing, timestamping, and PKI services. Most direct domestic competitor to NETLOCK, competing for the same Hungarian healthcare (EESZT), legal, and enterprise customers under the same eIDAS framework.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• Facebookfacebook.com/NETLOCKCA

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about NETLOCK Kft.