What KeyHub does

KeyHub, operated by Topicus.Security B.V. (KvK 70541418), is a Dutch Identity and Access Management (IAM) platform founded in 2014 and headquartered in Deventer, Netherlands. It is a product line within the Topicus software group, a Dutch conglomerate with approximately 1,000 employees. The platform is delivered as on-premise software (with a virtual appliance option) and combines core IAM, Privileged Access Management built on least-privilege and Just-In-Time principles, audit dashboarding, SSO, 2FA, team password management, and provisioning through SCIM, LDAP, and Active Directory. A distinguishing architectural feature is its decentralized authorization model, in which teams themselves provision and approve access rather than relying on a central administrator.

The product stack is built on Java/Jakarta EE running on WildFly with PostgreSQL and Docker, exposed via a REST API with a published OpenAPI specification and a Terraform Provider generated from that spec. As of 2025–2026 the platform has shipped 49 major versions — including the April 2025 launch of a standalone Identity Lifecycle Management module and the February 2026 release 46 architected as a step toward a full IGA suite, followed by Segregation of Duties in March 2026 and OAuth2 Device Authorization Grant enhancements in May 2026. Integration coverage includes OpenID Connect (Azure AD, Google), webhooks for audit log events, and a browser extension for credential autofill. The company holds ISO 27001 certification covering development and maintenance processes.

Go-to-market is enterprise field sales targeting Dutch and EU regulated organizations, particularly those bound by ISO 27001, BIO, NEN7510, and NIS2. Revenue mechanics consist of annual software licensing (auto-renewing, 3-month notice), professional services for implementation and customization, and separately contracted maintenance and support SLAs. Marketing is content-led — blog, gated whitepapers, customer case studies, and detailed release notes — with named customers spanning Dutch IT services (Previder, TriOpSys), public-sector organizations (ZBO Organisatie), and Dutch municipalities. The company does not disclose pricing publicly; all deals are quote-based. No external funding rounds have been disclosed, consistent with the parent conglomerate's self-funded posture.

Name

KeyHub

Legal name

Topicus.Security B.V.

Website

https://topicus-keyhub.com

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

KeyHub, operated by Topicus.Security B.V., is a Dutch on-premise Identity and Access Management platform serving regulated Dutch and EU organizations with converged IAM, Privileged Access Management, audit dashboarding, and compliance tooling mapped to ISO27001, BIO, NEN7510, and NIS2.

Ownership category

akta.pro rank

Product category

Identity and Access Management (IAM)

NAICS

Computer Systems Design and Related Services (54151)

akta.pro primary industry

Identity & Access for Workforce (IAM/SSO/MFA, Conditional Access) (BPAEAIAH)

akta.pro secondary industry

Key Management Systems (KMS) & Key Lifecycle (HDADAFAC)

Keywords

• Identity access management
• Privileged access management
• Single sign-on
• Compliance auditing
• Password management

Headquarters

HQ city

Deventer

HQ country

Netherlands

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations

Revenue model

1. Software Licensing: Topicus KeyHub operates on a software licensing model with annual subscription fees. Licenses are non-exclusive, non-transferable, and non-sublicensable. Licenses are granted for one year initially and automatically renew unless terminated with 3 months notice.
2. Professional Services: Consultancy, advisering en projectmanagement services for implementation, customization, and ongoing support.
3. Maintenance and Support: Software maintenance and user support services, typically provided under separate Service Level Agreement (SLA).

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels5 records

Core offering

KeyHub is an on-premise Identity and Access Management (IAM) platform developed by Topicus.Security B.V. that combines IAM with Privileged Access Management, Single Sign-On, Two-Factor Authentication, team password management, identity lifecycle management, and real-time audit dashboards. It is purpose-built for compliance with Dutch and EU regulations including ISO27001, BIO, NEN7510, and NIS2, using a decentralized authorization model where teams themselves manage access provisioning.

Product overview

KeyHub is a Dutch Identity and Access Management (IAM) platform offering a converged IAM solution with multiple integrated modules. The platform consists of core components including Identity Access Management, Identity Lifecycle Management (launched April 2025), Audit Dashboard, Team Password Manager, Single Sign-On, and Two-Factor Authentication. KeyHub also provides Privileged Access Management based on least-privilege principles and Just-In-Time access. The platform supports decentralized authorization where teams self-manage access, and offers deployment via on-premise virtual appliance or software download. Integration capabilities include SCIM provisioning, Terraform Provider, OAuth2/SAML/OIDC for SSO, and webhooks. The platform emphasizes compliance with regulations including NIS2, ISO27001, BIO, and NEN7510, targeting organizations in the Netherlands seeking demonstrable control over digital identities and access rights.

Differentiator

Problem solved

Functional benefit

Brands

• KeyHub: Identity and Access Management (IAM) platform with focus on auditing and compliance within cybersecurity

Products and services

• Identity Access Management (IAM) Core IAM module that centrally manages access rights based on employee group memberships, providing control over who can access which systems for enterprise and government customers.
• Identity Lifecycle Management Module for managing identity lifecycle with real-time insight into activities, supporting user identity states from onboarding to offboarding for organizations needing visibility into identity changes.
• Audit Dashboard

Quantifiable outcome

• Previder drastically reduced audit preparation time using KeyHub's Audit Dashboard
• +1 more outcomes

Named customers4 records

Segments3 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

Feature20 records

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Emerging players

• JumpCloud: JumpCloud offers a cloud directory platform with SSO, MFA, and device management targeting SMB and mid-market. It is an emerging alternative for the same on-premise-fatigued buyers KeyHub serves, but with a SaaS delivery model.
• Saviynt: Saviynt is a cloud-native identity governance and IGA platform. As KeyHub moves toward full IGA, Saviynt represents a comparable emerging player in modern identity governance, particularly for cloud-first enterprises.

Broad incumbents

• Microsoft Entra ID (Azure Active Directory): Microsoft Entra ID is the dominant enterprise identity platform bundled into Microsoft 365. It directly competes with KeyHub's IAM, SSO, MFA, and conditional access capabilities, and is typically the default choice in Microsoft-centric environments.
• ManageEngine (ADManager Plus / Identity Manager Plus): ManageEngine offers a broad suite of IT management tools including IAM, AD management, and SSO. It competes with KeyHub in the SMB and mid-market segment with a wider portfolio at lower price points.

Direct peers

• One Identity (OneLogin): One Identity offers unified identity governance, AD management, and PAM. It overlaps with KeyHub's combined IAM/PAM positioning and competes for mid-market and enterprise identity consolidation budgets.
• CyberArk: CyberArk is a market leader in Privileged Access Management with least-privilege and JIT access capabilities. It directly competes with KeyHub's PAM module for security-conscious enterprise and government buyers.
• Okta: Okta is a leading cloud-native workforce identity and SSO/MFA platform. It is directly comparable to KeyHub's IAM/SSO/MFA functionality but delivered as multi-tenant SaaS rather than on-premise, competing for the same enterprise buyer.
• BeyondTrust: BeyondTrust is a Privileged Access Management and identity security vendor. It competes with KeyHub's PAM and vault features, particularly for customers prioritizing privileged account and credential protection.
• SailPoint: SailPoint is a leading Identity Governance and Administration (IGA) platform. KeyHub's roadmap toward full IGA (Identity Lifecycle Management module, segregation of duties) directly positions it against SailPoint's governance and lifecycle suite.

Others

• HashiCorp Vault: HashiCorp Vault provides secrets management and credential storage. While not a direct IAM competitor, it overlaps with KeyHub's password manager, TOTP secret storage, and vault capabilities for DevOps-centric buyers.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/topicus-keyhub
• LinkedInlinkedin.com/company/keyhub
• Xx.com/TopicusKeyHub

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about KeyHub