MTG

What MTG does

MTG AG is a privately held German cybersecurity company headquartered in Darmstadt, founded in 1995, that builds and sells the MTG ERS® (Enterprise Resource Security) platform for managing cryptographic keys and digital identities across enterprise IT environments. The platform combines four tightly integrated components — Public Key Infrastructure (PKI, via MTG CARA), Certificate Lifecycle Management (CLM), a central Key Management System (KMS), and a vendor-independent Hardware Security Module (HSM) abstraction layer supporting Securosys, Utimaco, Entrust, and Thales HSMs. Since 2018 the company has prioritized Post-Quantum Cryptography (PQC), integrating NIST-standardized algorithms (ML-KEM, ML-DSA, SLH-DSA) and hybrid classical+PQC schemes across the ERS stack, and has participated in BMBF- and BSFZ-funded research projects with Fraunhofer SIT and academic partners.

The company serves enterprise and public-sector customers in Germany, the wider DACH region, and select EU markets (France, Netherlands), with primary verticals including energy and smart metering (Stromnetz Hamburg, Syna, Theben, VIVAVIS, EMH), public sector (BSI, Bundesnetzagentur), healthcare (Bitmarck, ITSG), telecommunications (Deutsche Telekom), and enterprise IT (Cisco, Software AG, Utimaco). Revenue is generated through three streams: subscription-based managed PKI/CLM services delivered via partner infrastructure DARZ GmbH (including a free tier capped at 50 PQC certificates), on-premises software licenses (perpetual or subscription), and professional services for HSM integration, PQC migration, and lifecycle operations. Distribution is direct enterprise field sales with consultation-led cycles, supplemented by technology partnerships with HSM vendors (Securosys strategic partner, Utimaco Premier VAR) and co-developed open-source tooling with Cryspen. Strategic positioning is anchored in regulatory compliance expertise (BSI TR-03109, BSI TR-3130, BDEW, eIDAS, German Telematics Infrastructure) and the academic credibility of Supervisory Board member Prof. Dr. Johannes Buchmann, a pioneer in quantum-resistant cryptography and Leibniz Prize recipient.

Name

MTG

Legal name

MTG AG

Website

https://mtg.de

Company type

Private

Founded year

1995

Operating status

Operating

Headcount range

51–100 employees

Short description

MTG AG is a Darmstadt-based German cybersecurity company that provides the MTG ERS® platform for managing cryptographic keys and digital identities through integrated PKI, CLM, KMS, and HSM components. It serves enterprise and government customers in energy, public sector, healthcare, and manufacturing across DACH and select EU markets.

Ownership category

akta.pro rank

Product category

Enterprise Cryptographic Key Management & PKI Software

NAICS

Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511), Computer Facilities Management Services (541513)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Key Management, Encryption & Secrets Management (KMS/HSM/Vault) (HDABAHAG)

akta.pro secondary industries

MPC / HSM / Key Management Infrastructure (FSADACAC), Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK)

Keywords

• Enterprise PKI solutions
• Certificate lifecycle management
• Cryptographic key management
• Post-quantum cryptography
• HSM integration services

Headquarters

HQ city

Darmstadt

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Services / Subscription: Managed PKI & CLM services offered as cloud-based subscriptions, powered by infrastructure partner DARZ. Customers pay recurring fees for managed certificate lifecycle management and PKI services.
2. On-Premises Software Licenses: On-premises deployment of MTG ERS components (PKI, CLM, KMS) with perpetual or subscription licenses for enterprise and government organizations requiring in-house infrastructure.
3. Professional Services: Consulting and implementation services for HSM integration, ERS infrastructure setup, PQC migration, and security lifecycle management including training and operational support.
4. Enterprise Software Solutions: AI-driven technology contributing to operational efficiency and revenue growth, with 37% revenue increase reported in Q1 2026.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels7 records

Core offering

MTG AG offers the ERS® (Enterprise Resource Security) platform — a modular cybersecurity solution combining Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), Key Management System (KMS), and Hardware Security Module (HSM) integration for managing cryptographic keys and digital identities across enterprise IT environments. The platform is delivered as managed cloud services (including a FREE PQC-PKI tier), on-premises software, and hybrid deployments, with all core components post-quantum cryptography (PQC) ready.

Product overview

MTG AG offers the ERS® (Enterprise Resource Security) platform — a modular, integrated cybersecurity solution 'Made in Germany' for managing cryptographic keys and identities across enterprise IT environments. The platform is organized around three core pillars: PKI & CLM (Certificate Lifecycle Management), KMS (Key Management System), and HSM (Hardware Security Module) integration. Key products include the MTG Certificate Lifecycle Manager, MTG CARA (Certificate Authority), MTG Corporate PKI & CLM, MTG Managed PKI & CLM (including a free tier), MTG IoT PKI & CLM, MTG KMS, MTG IoT KMS, and MTG KMS for VMware Encryption. The ERS® platform also encompasses Digital Trust Services (including MTG eID Service for electronic ID), Smart Metering Solutions (BDEW Web-API, CryptoController), and a dedicated Post-Quantum Cryptography (PQC) module. All core components are PQC-ready. MTG provides these solutions in cloud, managed, and on-premises deployment options.

Differentiator

Problem solved

Functional benefit

Brands

• MTG ERS: Enterprise Resource Security solutions providing centralized protection for corporate resources and processes through PKI, KMS, and HSM integration.
• MTG CARA
• MTG Certificate Lifecycle Manager
• MTG KMS

Products and services

• MTG ERS® (Enterprise Resource Security) MTG ERS® is the core integrated platform providing centralized protection for corporate resources and processes through the combined deployment of PKI, KMS, and HSM, simplifying the management of cryptographic keys and identities across the enterprise. Sold to enterprise and government organizations.
• MTG Certificate Lifecycle Manager (CLM) Certificate Lifecycle Management solution providing transparency, automation, and controlled access for the simple and reliable management of one or more PKIs. Targeted at enterprise and government IT security teams.
• MTG Corporate PKI & CLM Corporate PKI and Certificate Lifecycle Management for the generation, use, and administration of digital certificates within an organization. Sold to enterprise customers requiring in-house PKI infrastructure.
• MTG Managed PKI & CLM Managed PKI and CLM service operated by MTG as a cloud/managed service (including a FREE tier limited to 50 certificates, powered by DARZ infrastructure). Targeted at organizations that want outsourced PKI and certificate management.
• MTG CARA – Certificate Authority PKI platform for issuing and managing digital certificates, supporting both classical and post-quantum cryptography algorithms. Targeted at organizations operating their own certificate authority.
• MTG PKI for Building Automation (BACnet-SC) PKI solution tailored for building automation, supporting the BACnet/SC (Secure Connect) protocol for securing building automation systems. Targeted at building automation operators and facility management.
• MTG IoT PKI & CLM PKI and Certificate Lifecycle Management specifically designed for securing identities of Internet of Things (IoT) devices and machine-to-machine communications. Targeted at IoT operators and manufacturers.
• MTG Key Management System (KMS) Cryptographic key management system for the central administration of security-relevant IT processes in companies and organizations, enabling centralized key lifecycle management. Targeted at enterprise IT security teams.
• MTG IoT KMS Key Management System tailored for IoT environments, managing cryptographic keys for connected devices and embedded systems. Targeted at IoT operators and manufacturers.
• MTG KMS for VMware Encryption Key Management System integrated with VMware encryption solutions (vSAN, VM Encryption) for secure key storage and management in virtualized environments. Targeted at enterprise IT teams running VMware infrastructure.
• MTG HSM Integration Services Manufacturer-independent HSM integration services enabling Securosys, Utimaco, Entrust, and Thales HSMs to be integrated into MTG ERS® infrastructures via the MTG HSM-Abstraction-Layer or standard interfaces (PKCS#11, JCA, CNG, SQLEKM). Targeted at enterprise customers deploying HSM hardware.
• MTG Digital Trust Services Managed PKI & CLM services including Sub-CA Services (BSI TR-03109) and BDEW Web-API-Services for smart metering infrastructure. Targeted at energy utilities and regulated infrastructure operators.
• MTG eID Service BSI TR-3130-compliant eID service providing highly secure online identification based on the German ID card (Personalausweis) for electronic identity verification. Targeted at government agencies and service providers needing online identification.
• MTG Smart Metering Solutions Comprehensive smart metering solutions including BDEW Web-API-Services, Sub-CA Services, MTG CryptoController, CLS Management, and Corporate PKI for network management of Smart Meter Gateways. Targeted at energy utilities and smart metering operators.
• MTG CryptoController Cryptographic controller component for smart metering infrastructure, securing communication and identities in the smart metering ecosystem. Targeted at energy utilities operating smart metering gateways.
• MTG PQC (Post-Quantum Cryptography) Post-Quantum Cryptography offerings integrated into MTG ERS® components (PKI, CLM, KMS), supporting hybrid classical+PQC algorithms (ML-KEM, ML-DSA, SLH-DSA) for quantum-resistant security. Targeted at organizations preparing for the post-quantum era.
• FREE PQC-PKI Free cloud-hosted PQC-PKI service enabling users to create and manage up to 50 active PQC certificates using NIST-standardized algorithms (ML-KEM, ML-DSA, SLH-DSA). Offered in partnership with DARZ GmbH. Targeted at organizations evaluating or piloting post-quantum cryptography.
• MTG PQC Size Calculator Online tool for evaluating and comparing the sizes of data objects produced by various classical and post-quantum cryptographic algorithms in protocol contexts, supporting ML-KEM, BIKE, HQC, SLH-DSA, and ML-DSA. Targeted at developers and architects evaluating PQC algorithm selection.
• JZLint 2.0 Open-source tool (joint with Cryspen) for validating Post-Quantum certificates and public keys, including linting rules for ML-KEM and ML-DSA X.509 certificates. Integrated into the open-source jzlint project. Targeted at PKI engineers and PQC implementers.

Quantifiable outcome

• 37% revenue increase in Q1 2026 with AI-driving technology contributing to 99% of cost savings
• +1 more outcomes

Named customers10 records

Segments5 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

Feature7 records

Partnerships

Five partnerships are on record, tiered core and minor.

• Securosys SAcoreStrategic or Co-development Partner · 21 March 2024Strategic partnership announced March 21, 2024 between MTG AG and Securosys SA (Zürich, Switzerland). MTG integrates Securosys Primus Hardware Security Modules into the ERS platform, providing customers with state-of-the-art HSM technology for both on-premises and cloud deployments. The partnership combines Securosys's HSM technology with MTG's encryption and identity management capabilities, offering hybrid signature capabilities with PQC support. CEOs Jürgen Ruf (MTG) and Robert Rogenmoser (Securosys) formalized the partnership.
• DARZ GmbHcoreTechnology or IntegrationPartnership with DARZ GmbH (Darmstadt) for infrastructure hosting of FREE Managed PKI & CLM. DARZ provides the cloud infrastructure for MTG's managed PKI service offering. The FREE tier provides up to 50 active PQC certificates with instant registration and 1-2 business day provisioning.
• UtimacocoreTechnology or IntegrationMTG is Technology Partner and Certified Premier Value Added Reseller for Utimaco HSM. MTG offers a specialized portfolio of security products and services optimally integrated with Utimaco HSM, including a clusterable HSM high-availability solution. Utimaco develops and manufactures General Purpose HSMs at their Aachen facility.
• achelosminorStrategic or Co-development PartnerJoint deep dive session on Post-Quantum Cryptography at secIT by heise. Partnership for PQC knowledge sharing and industry education.
• Fraunhofer SITminorStrategic or Co-development PartnerResearch partner in QuantumRISC BMBF project for PQC algorithm analysis and optimization, including development of XMSS extension for Utimaco HSM.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Sectigo: Certificate Authority and CLM vendor that competes in the same enterprise and IoT certificate lifecycle space as MTG CARA and MTG IoT PKI/CLM, including PQC initiatives.
• Securosys: Swiss HSM vendor (Primus X/E-Series, FIPS 140-3, eIDAS-certified) partnered with MTG since 2024 and integrated into the ERS platform; sells into the same financial-services, government and PQC workloads as MTG.
• Venafi (CyberArk): Machine identity management and CLM leader (now part of CyberArk) addressing the same enterprise PKI/CLM use cases as MTG; significant overlap in TLS, IoT and DevOps certificate automation.
• AppViewX: Certificate lifecycle management and PKI automation vendor targeting similar enterprise CLM use cases as MTG; commonly compared alongside Keyfactor and Venafi in mid-to-large enterprise certificate automation deals.
• Utimaco: German-headquartered HSM and key management vendor whose CryptoServer and Se-Series HSMs are explicitly supported by MTG's HSM Abstraction Layer and embedded in MTG's German Telematics Infrastructure / eIDAS offerings — they co-sell and partially overlap in PKI/HSM software.
• DigiCert: Major commercial Certificate Authority and PKI platform provider; competes with MTG CARA and MTG CLM in issuing/managing certificates, particularly for TLS and IoT device identity.
• Keyfactor: Certificate Lifecycle Management (CLM) and machine-identity management vendor competing head-to-head with MTG's Certificate Lifecycle Manager and IoT PKI in enterprise and IoT deployments.
• HashiCorp Vault (Broadcom): Cloud-native secrets and key management platform widely adopted by enterprises for KMS-style workflows; competes for the same workload-level cryptographic key management budget as MTG KMS, particularly in cloud-first environments.

Broad incumbents

• Entrust: Established PKI, HSM and digital-identity vendor whose nShield HSM line MTG supports via its abstraction layer; broader portfolio in payment, eID and PKI creates overlap and partnering dynamics similar to MTG's.
• Thales: Global vendor of Luna HSMs (also supported by MTG's abstraction layer) with broad cybersecurity portfolio; competes with MTG in PKI/HSM integrations while also offering adjacent identity and data-protection solutions.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/MTG_IT_Security
• LinkedInlinkedin.com/company/mtg-ag

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about MTG