Secardeo GmbH

What Secardeo GmbH does

Secardeo GmbH is a privately held German software company founded in 2001 and headquartered in Ismaning near Munich, specializing in the automation of Public Key Infrastructure (PKI) and digital certificate lifecycle management. The company builds and sells the TOPKI (Trusted Open PKI) modular platform, which automates the complete certificate lifecycle — enrollment, provisioning, retrieval, recovery, revocation, expiration, and renewal — across heterogeneous certificate authority (CA) backends including public CAs (SwissSign, DigiCert, GlobalSign, Sectigo), managed private CAs (AWS Private CA), open-source PKI servers (EJBCA, OpenXPKI, DogTag), and on-premises Microsoft Active Directory Certificate Services (ADCS). The product portfolio consists of nine specialized modules: certEP (Windows Certificate Enrollment Proxy), certEntra (Entra ID automation, including the post-quantum-cryptography-enabled v2), certPush (mobile key distribution via MDM), certACME (ACME protocol proxy), certLife (lifecycle management with REST API and self-service), certRevoke (automated revocation), certBox (global certificate directory server connected to 70+ directories), certMode (mobile S/MIME retrieval), and certSync (Active Directory synchronization).

The company serves a regulated, enterprise-grade customer base spanning financial institutions (Luzerner Kantonalbank), medical technology (Drägerwerk), industrial manufacturing (STIHL, Sartorius), public administration (KV-Hessen, an EU body), and market research (a global market research corporation). Sales are executed through direct enterprise field engagement with quote-based pricing (no public pricing disclosed), supported by a network of eight channel and technology partners including SwissSign, QuoVadis, Deutsche Telekom Security, IDpendant, Die Netz-Werker, White Rabbit Security, WIRD Group, and GlobalTrust. The firm is founder-led, with Dr. Gunnar Jacobson serving as Managing Director since inception, and reports a headcount of 1-10 employees. Revenue model is subscription-based enterprise software licensing supplemented by professional services and consulting; no external funding rounds have been disclosed. The company holds patented PKI automation technologies and was independently ranked among the top 25 global PKI companies by Spherical Insights & Consulting in 2026.

Name

Secardeo GmbH

Legal name

Secardeo GmbH

Website

https://secardeo.com

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

1–10 employees

Short description

Secardeo GmbH is a privately held German software company founded in 2001 that builds the TOPKI platform for automated X.509 digital certificate lifecycle management across Microsoft, public CA, and private CA environments, serving large enterprises, financial institutions, and public administrations in DACH and globally.

Ownership category

akta.pro rank

Product category

PKI and Certificate Lifecycle Management Software

NAICS

Software Publishers (5132), Computer Systems Design and Related Services (54151)

SIC

Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)

akta.pro industry

PRIMARYBPAMAEAL

Device Identity & Certificate-Based Authentication (PKI)

Business & Public Services/Web, Mobile & Digital Platforms/Digital Identity, Authentication & Access

SECONDARYHDAEAJAB

Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers)

Hardware, Technology & Telecom/Enterprise Platforms & Databases/Identity & Access Management (IAM) & Directory Services Platforms

Headquarters

HQ city

Ismaning

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Software Licensing and Subscription: Secardeo generates revenue through the sale of its TOPKI platform software products, including certEP, certLife, certACME, certPush, certEntra, certBox, certMode, and certRevoke. These are enterprise software products sold to organizations for certificate lifecycle automation. The company also offers PKI services and consulting for implementation projects.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

Secardeo develops and sells the TOPKI (Trusted Open PKI) modular software platform and a suite of certificate lifecycle automation products — certEP, certPush, certEntra, certACME, certLife, certRevoke, certBox, certMode, and certSync — that automate the enrollment, provisioning, retrieval, recovery, revocation, expiration, and renewal of X.509 digital certificates and private keys across heterogeneous enterprise environments. The platform integrates with public CAs (SwissSign, DigiCert, GlobalSign, Sectigo), cloud-managed private CAs (AWS), Microsoft ADCS, and open-source PKI servers, and provides native integration with Active Directory and Microsoft Intune for automated S/MIME, SSL/TLS, and computer certificate operations.

Product overview

Secardeo GmbH offers the TOPKI (Trusted Open PKI) modular platform for automated certificate lifecycle management, along with a comprehensive suite of specialized certificate management products. The portfolio includes certEntra (Entra ID certificate enrollment), certEP (Windows Certificate Enrollment Proxy supporting multiple CAs), certPush (mobile certificate provisioning via MDM), certACME (SSL/TLS automation via ACME), certLife (certificate lifecycle management with REST API and self-service), certRevoke (automated revocation), certBox (certificate directory server for S/MIME), certMode (mobile certificate retrieval), and certSync (AD synchronization). The TOPKI platform enables hybrid CA operation supporting on-premises Microsoft CAs, managed private PKIs in the cloud (AWS), and public CAs. Founded in 2001 and headquartered in Ismaning near Munich, the company serves Global 500 enterprises, financial institutions, and public administrations.

Differentiator

Problem solved

Functional benefit

Products and services

• TOPKI (Trusted Open PKI) Platform Modular PKI platform for complete automation of certificate lifecycles including enrollment, provisioning, retrieval, recovery, revocation, expiration, and renewal. Enables hybrid CA operation and migration between public CAs, cloud-managed private CAs, and on-premises Microsoft CAs within a single platform. Sold to enterprise customers for certificate lifecycle automation.
• certEP (Certificate Enrollment Proxy) Windows Certificate Enrollment Proxy that enables native Windows autoenrollment from non-Microsoft CAs on-premise or in the cloud. Supports public CAs (SwissSign, DigiCert, GlobalSign, Sectigo), managed PKI services such as AWS Private CA, and open-source PKI servers (EJBCA, OpenXPKI, DogTag) for S/MIME, SSL/TLS, and computer certificates.
• certPush Key recovery and distribution service for provisioning user certificates and private keys from a central key archive to mobile or MDM-managed devices in a protected PFX container.
• certEntra Azure Web App for automated digital certificate registration for Entra ID users, enabling S/MIME certificate deployment to Intune-managed devices and supporting CBA authentication certificates. The v2 release is the first market implementation of post-quantum cryptography using hybrid ML-KEM/RSA for long-term protection of archived keys.
• certACME ACME protocol proxy for automatic enrollment of server, client, or device certificates using the standard ACME protocol for SSL/TLS certificate automation.
• certLife Service for certificate lifecycle management, discovery, central autoenrollment, self-services, notifications, and REST API. Provides convenient self-service for server administrators and users to request, renew, recover, or revoke certificates.
• certRevoke Service for automatic revocation of orphaned certificates from Active Directory objects when users or computers are removed or changed, triggered by certEP or a Microsoft CA.
• certBox Certificate Directory Server (PKI Appliance) for securely publishing internal S/MIME certificates and globally retrieving external certificates for end-to-end email encryption. Connected to over 70 certificate directories globally.
• certMode Exchange ActiveSync (EAS) Proxy for retrieving recipient certificates from a global directory server to mobile devices for end-to-end S/MIME encryption.
• PKI Services Professional services offering including consulting, conception, and realization of Windows PKI solutions for enterprise customers.

Quantifiable outcome

• Secardeo certEP is used by global corporations for the auto-enrollment of hundreds of thousands of user and computer certificates from non-Microsoft CAs.
• +1 more outcomes

Named customers7 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration10 records

Feature10 records

Partnerships

Eight partnerships are on record, tiered core.

• Die Netz-Werker Systemmanagement und Datennetze AGcoreChannel Partner/ Reseller/ DistributorDie Netz-Werker is a nationwide IT system house in Germany that implements and deploys Secardeo solutions in customer environments. They are a key channel partner for reaching German enterprise customers.
• GlobalTrustcoreTechnology or IntegrationGlobalTrust provides digital certificates and cryptographic services, with over two decades of experience in cryptography. The partnership involves integration between GlobalTrust's CA services and Secardeo's certificate management platform for providing trusted S/MIME certificates.
• IDpendant GmbHcoreChannel Partner/ Reseller/ DistributorIDpendant is the market-leading system integrator for strong authentication and client security in Germany, designing tailored solutions for customers. They implement Secardeo PKI solutions as part of their authentication and security portfolio.
• QuoVadiscoreTechnology or IntegrationQuoVadis is a globally leading Certificate Authority founded in 1999 with offices in Switzerland, Netherlands, UK, Germany, Belgium, and Bermuda. QuoVadis provides digital certificates that integrate with Secardeo's TOPKI platform for automated certificate lifecycle management.
• SwissSigncoreTechnology or IntegrationSwissSign offers a portfolio of digital certificates, electronic signatures, and identity services. As a recognized trust service provider, SwissSign certificates are integrated with Secardeo's certEP for automated enrollment of S/MIME and other certificates.
• Deutsche Telekom SecuritycoreTechnology or IntegrationDeutsche Telekom Security is responsible for the Telekom Group's global cybersecurity, providing around-the-clock protection. The partnership integrates Deutsche Telekom's security services with Secardeo's PKI automation capabilities.
• White Rabbit Security GmbHcoreChannel Partner/ Reseller/ DistributorWhite Rabbit Security brings more than 15 years of experience in the PKI environment, making them an ideal partner for IT security in heterogeneous environments. They implement Secardeo solutions as part of their PKI consulting and integration services.
• WIRD GroupcoreChannel Partner/ Reseller/ DistributorWIRD Group maintains long-standing relationships with industry-leading IT and security technology producers and is a certified partner for Swiss security products and solutions, implementing Secardeo PKI solutions in the Swiss market.

Scale indicators4 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• Venafi (CyberArk): Direct competitor in machine identity and certificate lifecycle management, now part of CyberArk. Addresses the same enterprise use cases for SSL/TLS, S/MIME, and SSH key automation that Secardeo's TOPKI platform targets.
• AppViewX: Competitor in certificate lifecycle management and PKI automation, focused on enterprise NetOps and SecOps workflows; overlaps directly with Secardeo's certLife and certEP capabilities.
• Keyfactor: Direct competitor offering enterprise certificate lifecycle automation and PKI management (including EJBCA). Competes head-to-head for the same enterprise PKI automation RFPs that Secardeo addresses.

Broad incumbents

• Sectigo: Public CA and certificate management vendor whose certificates Secardeo integrates with, but also competes against in the broader enterprise certificate lifecycle automation market.
• Entrust: Established PKI and digital certificate vendor with both CA services and lifecycle management products; competes for the same regulated enterprise and government customers Secardeo serves.
• DigiCert: Largest public certificate authority with growing CertCentral/TLM lifecycle management offerings; competes with Secardeo both as a CA backend integration partner and as a full-stack PKI automation vendor.
• SwissSign: Swiss trust service provider whose S/MIME certificates Secardeo certEP v3 was specifically built to automate; competes for the same DACH-region enterprise PKI deals.
• GlobalSign: Long-standing public CA integrated with Secardeo (e.g., for S/MIME certificates) that also offers its own enterprise PKI and certificate management platform, creating both partnership and competitive overlap.

Emerging players

• Akeyless: SaaS-based secrets and certificate management platform targeting cloud-native enterprises; competes for certificate lifecycle automation budgets adjacent to Secardeo's traditional Microsoft-centric deployments.
• HashiCorp (IBM): Vault PKI secrets engine offers lightweight certificate issuance and lifecycle automation; overlaps with the developer/automation portion of Secardeo's market and could become a substitute for simpler use cases.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Facebookfacebook.com/secardeo-gmbh-222755814477958
• LinkedInlinkedin.com/company/secardeo-gmbh

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Secardeo GmbH