ZeroSSL
ZeroSSL is a Vienna-based certificate authority (subsidiary of HID Global, part of ASSA ABLOY) that issues SSL/TLS certificates to over 2 million active clients — from individual developers to Fortune 500 enterprises — via a freemium platform with ACME automation, REST API tooling, and enterprise distribution through HID Global.
- Company typePrivate
- Founded2016
- HeadquartersVienna, Austria
- Headcount—
- GTM typeB2B and B2C
- OfferingSoftware
What ZeroSSL does
ZeroSSL is a certificate authority founded in 2016 in Vienna, Austria, operating as a subsidiary of HID Global Corporation (part of ASSA ABLOY). The company issues SSL/TLS certificates and provides certificate lifecycle management tooling, serving more than 2 million active clients that span individual developers, startups, SMBs, and Fortune 500 enterprises including Microsoft, Intel, HubSpot, Stack Overflow, Rakuten, Nubank, and Hostinger. ZeroSSL issues over 5 million certificates monthly with stated 99.9% browser trust coverage and operates globally.
The platform is built on the ACME (Automated Certificate Management Environment) protocol for automated issuance and renewal, complemented by a JSON REST API for programmatic certificate management and a web-based Management Console for end-to-end lifecycle handling. Core products include free 90-day certificates, paid annual certificates (200-day validity), and single-domain, multi-domain (SAN), and wildcard variants, with One-Step Validation supporting email, CNAME DNS, and HTTP/HTTPS file upload methods. Supporting products include the ZeroSSL Bot (a proprietary ACME client), SSL Monitoring (built-in health checks and expiration monitoring), ZeroSSL Protect (a paid security add-on offering 24/7 monitoring, malware detection, surface and core vulnerability scans, and blacklist monitoring), and Enterprise SSL (DV/OV/EV certificates with centralized Account Certificate Manager, role-based access, and PKI expert support delivered through the HID Global partnership).
ZeroSSL operates a freemium subscription model with five tiers — Free, Basic ($13.99/month or $9.99/year), Premium ($74.99/month or $54.99/year), Business ($149.99/month or $109.99/year), and Platinum ($219.99/month or $169.99/year) — with annual billing offering approximately 29% savings. Go-to-market combines product-led self-service (app.zerossl.com), an affiliate and reseller partner program distributed through ACME clients and hosting providers (Acme.sh, Caddy Server, dehydrated, nginx-proxy, Windows ACME, etc.), and direct enterprise sales executed via the HID Global relationship. Revenue is not publicly disclosed.
ZeroSSL firmographics
Firmographics- Name
- ZeroSSL
- Legal name
- ZeroSSL GmbH
- Website
- https://zerossl.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Short description
- ZeroSSL is a Vienna-based certificate authority (subsidiary of HID Global, part of ASSA ABLOY) that issues SSL/TLS certificates to over 2 million active clients — from individual developers to Fortune 500 enterprises — via a freemium platform with ACME automation, REST API tooling, and enterprise distribution through HID Global.
- Ownership category
- akta.pro rank
ZeroSSL industry classification
Industry- Product category
- Certificate Authority / PKI Security Software
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Communications Services, Nec (4899), Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Access Management & Policy Enforcement (Zero Trust) (BPAMAEAH)
- akta.pro secondary industries
- API Security & Service-to-Service Security (mTLS, Service Mesh Security) (HDABAHAN), Network Security Services (Firewall/VPN/ZTNA/SASE Integration) (BPAEAEAG)
Keywords
Where ZeroSSL is headquartered
LocationHeadquarters
- HQ city
- Vienna
- HQ country
- Austria
- HQ region
- Europe
Offices1 record
Markets served
ZeroSSL business model
Business model- GTM type
- B2B and B2C
- Offering type
- Software
- Cost components
- Technology or R&D, Infrastructure, Personnel, Operations, Marketing or Sales
Revenue model
- Freemium Subscription Tiers: Tiered subscription model ranging from free Basic tier to paid Premium, Business, and Platinum plans offering increasing certificate limits, support levels, and advanced features. Annual billing discounts available.
- Transaction-based Certificate Issuance: Revenue generated from certificate issuance fees beyond free tier limits, including additional seats, domains, and wildcards across paid plans.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free tier with basic SSL capabilities |
| Subscription | Monthly | Entry-level paid tier for individuals and small projects |
| Subscription | Monthly | Mid-tier plan for growing websites and applications |
| Subscription | Monthly | Business-focused plan for organizations requiring volume certificates |
| Subscription | Monthly | Enterprise-tier plan with maximum capabilities and support |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels5 records
ZeroSSL product offering
Product offeringCore offering
ZeroSSL is a certificate authority that issues free 90-day and paid annual SSL/TLS certificates covering single-domain, multi-domain (SAN), and wildcard use cases. The platform provides ACME protocol automation, a REST API, and a web-based management console for end-to-end certificate lifecycle management, with additional paid security modules (ZeroSSL Protect) and an enterprise offering (Enterprise SSL via HID Global partnership).
Product overview
ZeroSSL is a certificate authority offering a unified SSL/TLS certificate platform with a layered product portfolio centered on its core SSL Certificate issuance (90-day free and annual paid certificates), augmented by ACME protocol automation (via the ZeroSSL Bot and third-party ACME client integrations), a REST API for developer-driven management, and a web-based Management Console for end-to-end certificate lifecycle handling. Additional paid modules include ZeroSSL Protect (security scanning and malware monitoring) and Enterprise SSL (delivered via HID Global partnership for large organizations). SSL Monitoring and Certificate Validation features are built into the platform at no additional cost. The platform targets individuals, developers, startups, and enterprise customers alike, with pricing tiers ranging from a free plan to business and platinum paid plans.
Differentiator
Problem solved
Functional benefit
Brands
- ZeroSSL Bot: A dedicated ACME bot that allows users to order and renew 90-day certificates automatically and completely free of charge.
- Enterprise SSL
- ZeroSSL Protect
Products and services
- ZeroSSL SSL Certificates SSL/TLS certificates issued by ZeroSSL as a certificate authority, supporting 90-day free certificates and paid annual certificates (200-day validity), covering single-domain, multi-domain (SAN), and wildcard use cases.
- ZeroSSL REST API
- ZeroSSL ACME Automation Automated SSL certificate issuance and renewal via the ACME (Automatic Certificate Management Environment) protocol, supporting unlimited free 90-day certificates through ZeroSSL's own bot and partner ACME clients with no rate limits.
- ZeroSSL Bot ZeroSSL's proprietary ACME client for fully automated ordering and renewal of 90-day SSL certificates at no charge, managed through the ZeroSSL platform.
- ZeroSSL Management Console A web-based user interface for managing SSL certificates end-to-end, including creation, validation, installation, expiration reminders, developer settings (API key access), and billing management.
- ZeroSSL Protect A paid security add-on providing 24/7 monitoring, automatic malware detection, vulnerability scans (Surface Scans and Core Scans), risk analysis reports, and blacklist monitoring to safeguard websites.
- Enterprise SSL Enterprise-grade SSL certificate management delivered in partnership with HID Global, covering DV, OV, EV, and wildcard certificates with flat-rate subscription pricing, full ACME/REST API automation, centralized Account Certificate Manager (ACM), role-based administration, and PKI expert support.
- SSL Monitoring Automated health checks for SSL certificates including status validation, expiration monitoring, connection checks, response body substring lookups, and HTTP error detection, with all statuses visible in the management console.
- SSL Certificate Validation Domain verification for SSL certificates supporting multiple methods: one-step email validation, CNAME DNS validation, and HTTP/HTTPS file upload validation, with automatic CSR generation.
Quantifiable outcome
- 5 million+ monthly certificates issued
- +2 more outcomes
Companies that use ZeroSSL
Customer profileNamed customers22 records
Segments4 records
Ideal customer profiles4 records
ZeroSSL technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration14 records
Feature4 records
ZeroSSL partnerships and signals
Strategic signalPartnerships
Twelve partnerships are on record, tiered core, supporting and flagship.
- Acme.shcoreAcme.sh is a prominent ACME client that integrates with ZeroSSL for automated certificate issuance and renewal. As a trusted partner, Acme.sh enables users to obtain and manage ZeroSSL certificates through command-line automation.
- Caddy ServercoreCaddy Server is a web server with built-in ACME support that integrates seamlessly with ZeroSSL for automatic HTTPS certificate management. Users can deploy ZeroSSL certificates effortlessly within the Caddy ecosystem.
- Acme PHPsupportingAcme PHP provides PHP-based ACME client functionality for obtaining and managing SSL certificates from ZeroSSL, enabling PHP developers to integrate automated certificate management into their applications.
- nginx-proxysupportingnginx-proxy is a docker-compose project that enables automated reverse proxy setup with integrated ZeroSSL certificate management for containerized applications.
- getsslsupportinggetssl is a bash-based ACME client that facilitates automated certificate issuance from ZeroSSL, providing a lightweight solution for Linux server administrators.
- dehydratedsupportingdehydrated is a Python-based ACME client compatible with ZeroSSL, offering flexible certificate management for various deployment scenarios.
- auto-sslsupportingauto-ssl provides automated SSL certificate management integration with ZeroSSL for web hosting environments and server management systems.
- nginx-lesupportingnginx-le offers automated certificate management for nginx reverse proxy configurations with ZeroSSL integration for seamless HTTPS deployment.
- Windows ACMEsupportingWindows ACME provides certificate automation specifically for Windows Server environments, enabling ZeroSSL certificate deployment on Microsoft infrastructure.
- PonzusupportingPonzu is a content management system with integrated SSL certificate support that leverages ZeroSSL for automated HTTPS management.
- HID GlobalflagshipHID Global is an enterprise security company providing physical and digital identity solutions. This enterprise partnership enables HID Global to offer ZeroSSL certificates as part of their comprehensive security offerings for enterprise customers requiring certificate management.
- ZeroSSL BotcoreZeroSSL Bot is a Telegram-based ACME client managed by ZeroSSL that provides convenient certificate issuance and management through a chat interface, extending certificate automation to messaging platforms.
Scale indicators3 records
Recent moves6 records
Expansion highlights6 records
ZeroSSL competitors and assessment
Company assessmentBroad incumbents
- Cloudflare: Cloud platform that issues and manages free universal SSL certificates as part of its CDN/security stack. Competes indirectly by bundling SSL into broader security and edge services that displace standalone CAs.
- Entrust: Identity and certificate authority offering TLS/SSL, PKI, and digital identity solutions. Competes in the enterprise PKI and managed certificate lifecycle management segment where ZeroSSL Enterprise SSL plays.
- DigiCert: Largest commercial CA and enterprise PKI provider offering SSL, IoT, and identity certificates. Competes with ZeroSSL's Enterprise SSL offering (delivered with HID Global) for Fortune 500 PKI contracts.
- AWS Certificate Manager: Amazon's managed SSL/TLS certificate service for AWS workloads. Competes with ZeroSSL for cloud-native developers and enterprise customers standardizing on AWS infrastructure.
- Google Trust Services: Google-operated certificate authority that underpins much of the web's free/automated certificate ecosystem. Sets industry standards through Chrome root program policies that directly shape ZeroSSL's product roadmap.
Direct peers
- Sectigo: Major commercial certificate authority offering DV/OV/EV SSL, wildcard, and enterprise PKI. ZeroSSL's website references Sectigo's subscriber agreement, indicating Sectigo is both a partner/underlying issuer and a direct commercial competitor.
- Let's Encrypt: Free, automated, open-source certificate authority issuing X.509 certificates via ACME. Directly competes with ZeroSSL in the developer/automated SSL segment and is the primary benchmark for ZeroSSL's marketing.
- GoDaddy SSL (formerly Sectigo reseller program): Mass-market SSL certificate reseller historically powered by Sectigo/DigiCert. Competes with ZeroSSL for SMBs and small websites seeking affordable, simple SSL bundles.
- SSL.com: Commercial certificate authority offering DV/OV/EV SSL, wildcard, and enterprise certificates with ACME support. Comparable mid-sized competitor targeting similar SMB and developer segments.
- GlobalSign: Established certificate authority providing SSL/TLS, identity, and IoT PKI solutions. Competes with ZeroSSL in both developer-oriented and enterprise certificate management segments.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights6 records
Customer concentration
ZeroSSL social profiles
Digital presenceZeroSSL financial estimates
Financial estimateRevenue estimate
Valuation estimate
ZeroSSL leadership team
Management profileNumber of profiles
Profiles8 records
ZeroSSL funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ZeroSSL M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ZeroSSL
What does ZeroSSL do?
ZeroSSL is a certificate authority that issues free 90-day and paid annual SSL/TLS certificates covering single-domain, multi-domain (SAN), and wildcard use cases. The platform provides ACME protocol automation, a REST API, and a web-based management console for end-to-end certificate lifecycle management, with additional paid security modules (ZeroSSL Protect) and an enterprise offering (Enterprise SSL via HID Global partnership).
Is ZeroSSL a public or private company?
ZeroSSL is a private company. It is classified as corporate owned and is currently operating.
When was ZeroSSL founded?
ZeroSSL was founded in 2016.
Where is ZeroSSL based?
ZeroSSL is headquartered in Vienna, Austria, in the Europe region.
How does ZeroSSL make money?
Two revenue lines are on record. Freemium Subscription Tiers are the primary driver. The others are transaction-based Certificate Issuance.
Who are ZeroSSL's main competitors?
Broad incumbents on record are Cloudflare, Entrust, DigiCert, AWS Certificate Manager and Google Trust Services. Direct peers are Sectigo, Let's Encrypt, GoDaddy SSL (formerly Sectigo reseller program), SSL.com and GlobalSign.
Does ZeroSSL have an API?
Yes. ZeroSSL offers a REST API for SSL certificate management, supporting certificate creation, domain validation, renewal, download, cancellation, revocation, and CA certificate operations. Available via HTTPS GET and POST requests to api.zerossl.com. Users authenticate using a unique access_key assigned to each account, found in the Developer section of the management console. JSON request bodies are supported with Content-Type: application/json header. The API follows a tolerant reader pattern to maintain backward compatibility. API access is free and unlimited in request volume for customers on paid plans (Basic and above). Supports webhook status notifications for automated workflows. Developer documentation is at zerossl.com/documentation/api.
What industry is ZeroSSL in?
ZeroSSL's product category is Certificate Authority / PKI Security Software. Its primary akta.pro industry code is BPAMAEAH, Access Management & Policy Enforcement (Zero Trust), with a secondary code of HDABAHAN, API Security & Service-to-Service Security (mTLS, Service Mesh Security). Its NAICS code is 5182 and its SIC code is 4899.