What CertiPath does

CertiPath, Inc. is a privately held digital identity company founded in 2004 and headquartered at 1900 Reston Metro Plaza in Reston, Virginia. The company operates a Public Key Infrastructure (PKI) Bridge Certification Authority (CA) that is cross-certified with the U.S. Federal Bridge CA, and is — per idmanagement.gov — the only commercial bridge approved to certify PIV-I credential providers. Its product portfolio, marketed under the TrustSuite brand, includes TrustMonitor (24/7 cloud-based PKI and trust-fabric monitoring with real-time credential-validity alerting), TrustZero (cloud-based high-assurance credential validation for Physical Access Control Systems, performing CRL checks every 60 seconds), TrustManager (a Physical Identity Access Manager that provisions and deprovisions identities across multiple PACS brands), TrustVisitor (enterprise high-assurance visitor pre-screening), IdentityManager (a cloud-based authentication gateway supporting PIV, PIV-I, CAC, OTP, and FIDO-2), and SNAP (a self-service mobile identity-proofing module integrated with IDEMIA). CertiPath also operates the 3CP (CertiPath Certified Credential Provider) program, which certifies external credential providers to its bridge standards.

The company's business model combines recurring subscription revenue from TrustSuite software products with professional services revenue from system-design, software-development support, and consulting engagements around PKI, PIV/PIV-I, E-PACS, identity federation, and FICAM implementation. Distribution runs through a direct enterprise/government sales motion backed by a GSA MAS Schedule contract (SINs 54151S and 541519PIV, valid through 12/1/2029) and channel relationships including Carahsoft for government distribution and large system integrators (Johnson Controls, M.C. Dean) for deployment. Customers are concentrated in U.S. federal agencies (notably the U.S. Marshals Service), major defense contractors (Boeing, Northrop Grumman, RTX), international defense entities (Netherlands Ministry of Defence), and regulated industries including energy, healthcare, and financial services. The company employs 11–50 people and is led by founder and CEO Jeff Nigriny, COO/CFO Tina Davis, and CISO George Baker. In December 2024, CertiPath added FIDO Alliance Certification and a strategic partnership with IDEMIA Public Security, and in 2025 expanded delivery capacity with 12 additional hires to support its USMS contract.

Name

CertiPath

Legal name

CertiPath, Inc.

Website

https://certipath.com

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

11–50 employees

Short description

CertiPath is a Reston, Virginia-based digital identity company operating the only commercial PKI Bridge approved to certify PIV-I credential providers, selling its TrustSuite of credential validation, monitoring, and physical access management products to U.S. federal agencies, defense contractors, and regulated industries.

Ownership category

akta.pro rank

Product category

Identity and Access Management

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)

akta.pro primary industry

Device Identity & Certificate-Based Authentication (PKI) (BPAMAEAL)

Keywords

• Public Key Infrastructure
• Identity credentialing solutions
• Physical access control
• Digital identity management
• Federated trust services

Headquarters

HQ city

Reston

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Software Products (TrustSuite): CertiPath sells its TrustSuite software products including TrustMonitor, TrustZero, TrustManager, TrustVisitor, IdentityManager, and SNAP. Products are sold directly to government agencies via GSA Schedule and through channel partner Carahsoft.
2. Professional Services: System design services, software development support, and consulting services for PKI, PIV/PIV-I credentials, E-PACS, identity federation, and FICAM implementation. Experts help with application development, system testing, and security architecture.
3. Federated Trust Services: PKI Bridge services enabling cross-organizational trust. Organizations can join as subordinate members under CertiPath Root CA or establish cross-certification relationships. CertiPath is the only commercial bridge approved to certify PIV-I credential providers.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels4 records

Core offering

CertiPath develops and operates a Public Key Infrastructure (PKI) Bridge CA and a suite of TrustSuite software products (TrustMonitor, TrustZero, TrustManager, TrustVisitor, IdentityManager, SNAP, ICAM ProofCards) for high-assurance digital identity credentialing, validation, and lifecycle management. The company enables organizations to issue, monitor, and validate PIV, PIV-I, and CAC identity credentials for secure physical and logical access control across federated trust communities. It is the only commercial PKI Bridge approved to certify PIV-I credential providers, as listed at idmanagement.gov.

Product overview

CertiPath offers the TrustSuite, a unified platform-plus-modules architecture of six products for high-assurance digital identity management. The core platform is TrustMonitor, a cloud-based PKI monitoring service that serves as the processing engine for credential validation across the product family. TrustZero is a cloud-based credential validation layer built on TrustMonitor that provides continuous PACS validation with configurable business logic. TrustManager is a PIAM solution that provisions personnel and credential records across multiple PACS brands. TrustVisitor handles visitor management with credential validation and mobile approval workflows. IdentityManager is an authentication gateway that provides passwordless access to web applications using various strong credentials. SNAP adds self-service identity proofing for employee and visitor enrollment via mobile devices. ICAM ProofCards provides a test card suite for validating PACS conformance.

Differentiator

Problem solved

Functional benefit

Brands

• TrustSuite: Collective brand for CertiPath's interoperable digital identity enablement solutions supporting high-assurance physical and logical access control, including TrustMonitor, TrustVisitor, TrustManager, TrustZero, and IdentityManager products.
• TrustMonitor
• TrustVisitor
• TrustManager
• TrustZero
• IdentityManager
• SNAP
• ICAM ProofCards
• 3CP (CertiPath Certified Credential Provider)

Products and services

• TrustMonitor Cloud-based PKI monitoring and validation service that performs 24/7 monitoring of certification authorities, Certificate Revocation Lists, and OCSP infrastructure across federated identity communities, delivering real-time situational awareness, impact analysis, and alerting on credential validity and trust network integrity.
• TrustVisitor Enterprise high-assurance pre-screening visitor management solution that validates credentials and automatically provisions access for visitors using PIV, CAC, PIV-I smart cards, or government-issued IDs, with mobile approval workflow and FedCheck background-check integration.
• TrustManager Physical Identity Access Manager (PIAM) that automatically provisions and deprovisions identity records and credential records across multiple PACS brands (CCure 9000, LenelS2 OnGuard, Identiv Hirsch, Gallagher, HID pivCLASS), supporting cross-community federated provisioning when paired with TrustMonitor.
• TrustZero Cloud-based high-assurance credential validation service providing enterprise-level continuous validation for PACS with configurable business logic including VIP settings, Extended Validity Period, and Degraded Mode, backed by 60-second interval CA CRL status checks.
• IdentityManager Cloud wallet-based web authentication gateway that eliminates passwords by allowing employees and contractors to access enterprise and third-party applications using strong credentials (PIV, PIV-I, CAC, FIDO-2, OTP), with role-based authentication strength policies, step-up/step-down authentication, and OpenID Connect/OAuth2 compatibility.
• SNAP Self-service mobile identity proofing module that automates I-9 and badging processes for employee onboarding, rebadging, and visitor registration using selfies and identity document photographs, with identity document verification provided by IDEMIA.
• ICAM ProofCards Physical access control system testing tool consisting of test credentials (cards 1-58) that validate PIV and PIV-I conformant systems by testing for known-good baselines, manipulated data, invalid dates, copied credentials, revoked credentials, and key mismatches.
• Federated Trust Services PKI Bridge services enabling cross-organizational trust. Organizations can join as subordinate members under CertiPath Root CA or establish cross-certification relationships. CertiPath is the only commercial bridge approved to certify PIV-I credential providers. Includes Trust Community membership, Policy Management Authority, and the 3CP (CertiPath Certified Credential Provider) certification program.
• System Design Services Professional system design and consulting services for PKI, PIV/PIV-I credentials, E-PACS, identity federation, and FICAM implementation. Experts assist with application development, system testing, and security architecture.
• Software Development Support Software development support and consulting services for clients implementing identity security solutions, including application development support, system testing, and security architecture guidance.

Quantifiable outcome

• Credential status checks occur every 60 seconds for near real-time validation
• +1 more outcomes

Named customers5 records

Segments7 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration9 records

Feature7 records

Partnerships

16 partnerships are on record, tiered core, strategic and minor.

• IDEMIA Public SecuritycoreTechnology or Integration · 2 December 2024IDEMIA Public Security and CertiPath partnered for digital identity-proofing and credential verification to support valid access to high assurance level environments and prevent identity fraud. CertiPath uses IDEMIA for its ID&V services in the SNAP module for secure self-service identity proofing of employees and visitors.
• Carahsoft Technology Corp.coreChannel Partner/ Reseller/ DistributorCertiPath partnered with Carahsoft to deliver its TrustMonitor product to the government market. Carahsoft is a trusted Government IT solutions provider that supports an ecosystem of software manufacturers, value-added resellers, system integrators, and consulting partners.
• LenelS2coreTechnology or IntegrationLenelS2 is a technology partner for CertiPath. The companies co-presented a webinar on High-Assurance Identity for Critical Infrastructure. TrustManager supports LenelS2 OnGuard PACS.
• GallaghercoreTechnology or IntegrationCertiPath is a Gallagher technology partner. TrustManager supports Gallagher PACS for enterprise provisioning and lifecycle management.
• HIDcoreTechnology or IntegrationCertiPath supports HID pivCLASS readers as part of its PACS integration capabilities. HID is a leading provider of secure identity and physical access control solutions.
• IntercedecoreTechnology or IntegrationCertiPath is an Intercede technology partner, supporting interoperability for identity and credential management solutions.
• BARCOcoreTechnology or IntegrationBARCO is listed as a technology partner for CertiPath, indicating integration compatibility with BARCO's security and visualization solutions.
• CCurecoreTechnology or IntegrationCertiPath supports Software House CCure 9000 PACS. CCure is listed as a technology partner for CertiPath's physical access solutions.
• Hirsch (Identiv)coreTechnology or IntegrationCertiPath supports Identiv Hirsch PACS for enterprise provisioning. Hirsch is listed as a technology partner for CertiPath.
• Johnson ControlsstrategicImplementation/ SI/ Consulting PartnerJohnson Controls is a services and deployment strategic partner for CertiPath, providing implementation and deployment services for CertiPath's identity solutions.
• M.C. DeanstrategicImplementation/ SI/ Consulting PartnerM.C. Dean is a services and deployment strategic partner for CertiPath, providing system integration and deployment services.
• BRCIminorImplementation/ SI/ Consulting PartnerBRCI is a services and deployment partner for CertiPath, assisting with implementation and consulting services.
• TechPartnerminorImplementation/ SI/ Consulting PartnerTechPartner is a services and deployment partner for CertiPath, providing technical consulting and implementation support.
• ISTminorImplementation/ SI/ Consulting PartnerIST is a services and deployment partner for CertiPath, providing integration and deployment services.
• Carillon Information SecuritycoreTechnology or IntegrationCarillon Information Security is a CertiPath Certified Credential Provider (3CP) and CertiPath Certified PIV-I Provider. Carillon provides PKI solutions, consulting, and PIV-I, ATA Spec42 compliant PKI, and PIV-C/CIV solutions.
• Carillon Federal ServicescoreTechnology or IntegrationCarillon Federal Services is a CertiPath Certified Credential Provider (3CP) providing PKI solutions and consulting services to federal clients.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Identiv: Identiv provides PKI, smart card readers, physical access control (Hirsch), and credentialed security solutions used in federal, defense, and critical infrastructure. It is a CertiPath technology partner and overlaps directly in the PIV-I credentialing and PACS-integration layer.
• Intercede: Intercede provides PKI middleware and identity credential management software used to issue and manage PIV, PIV-I, CAC, and derived credentials for enterprises and governments. It is a CertiPath technology partner, and its MyID platform competes and interoperates with CertiPath's TrustManager and IdentityManager in the same federal/defense credential lifecycle market.
• Entrust: Entrust is a long-standing PKI and digital certificate authority vendor with strong federal and enterprise penetration, offering certificate issuance, HSMs, and identity solutions. It competes with CertiPath's PKI Bridge services in cross-organizational trust and with TrustMonitor in PKI monitoring and validation.
• HID Global: HID Global is a leading provider of PIV/PIV-I smart cards, credential readers (including pivCLASS), and PKI-based physical access control solutions. It is a CertiPath integration partner and a direct competitor in the PIV-I credentialing and PACS-validation value chain.
• IDEMIA (Public Security): IDEMIA Public Security is a leading issuer of PIV and PIV-I smart cards, identity credentials, and identity verification services used by U.S. federal agencies and defense primes. It directly overlaps with CertiPath's PIV-I credential validation and identity proofing stack and is both a partner (SNAP integration) and a competitor in the high-assurance federal identity market.
• Carillon Information Security: Carillon is a CertiPath Certified Credential Provider (3CP) and CertiPath Certified PIV-I Provider offering PKI, PIV-I, and PIV-C/CIV solutions to federal clients. It directly competes and interoperates with CertiPath in the PIV-I issuance and consulting services market.

Broad incumbents

• Microsoft (Entra ID / PIV integration): Microsoft Entra ID (formerly Azure AD) integrates with PIV and derived PIV credentials and underpins identity for many federal and enterprise customers. As a broad incumbent identity platform, it competes with CertiPath's IdentityManager for passwordless/PIV-based authentication while driving overall demand for high-assurance federated identity.
• ForgeRock: ForgeRock offers an enterprise identity and access management platform with strong federal and regulated-industry deployments, including PIV/CAC authentication. It overlaps with CertiPath's TrustSuite at the broader identity-and-access layer that surrounds high-assurance PKI use cases.
• Thales (Digital Identity & Security): Thales provides a broad portfolio of PKI, HSMs, identity verification, and authentication solutions, including government and defense-grade credentialing. As a large incumbent with overlapping PIV/PKI capabilities, it competes with CertiPath's PKI Bridge and TrustSuite at the high-assurance end of the federal identity market.
• Okta: Okta provides workforce identity, SSO, and adaptive MFA used by federal agencies and large enterprises, including PIV integration. As a broad incumbent, it competes with CertiPath's IdentityManager and TrustVisitor in adjacent high-assurance authentication and visitor identity use cases.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/certipath

Compliance12 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CertiPath