Cega security
CEGA Security is a Mexican cryptography and cybersecurity firm specializing in Hardware Security Modules, PKI infrastructure, and NOM-151 compliant electronic signatures, serving PACs, PSCs, financial institutions, and government across Mexico and Latin America.
- Company typePrivate
- Founded2013
- HeadquartersCancún, Mexico
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Cega security does
CEGA Security is a Mexican-headquartered cryptography and cybersecurity firm founded in 2013 in Cancún/Mérida, specializing in Hardware Security Module (HSM) infrastructure, Public Key Infrastructure (PKI), and electronic signature solutions for Mexico and Latin America. The company's footprint spans Mexico, the United States, Colombia, Costa Rica, Guatemala, and Peru, with 11+ years of accumulated regional deployment experience.
The product portfolio is anchored on physical and cloud-based HSMs — HSM Cloud, a subscription service launched June 2018, and on-premise HSMs distributed under partnerships with Utimaco, Futurex, and Engage Black. Adjacent offerings include PKI in a Box (EJBCA-based), the Suite Legal electronic signature platform compliant with NOM-151, Financial HSM (Excrypt Plus), Payment HSM (Atalla AT1000), TimestampServer, Identity Verification, and Mi-Token multi-factor authentication. The technical stack rests on FIPS 140-2 Level 3/4, Common Criteria EAL4+, PCI HSM, and compliance with ANSI X9.24, X9.52, ISO 27001, GDPR, HIPAA, eIDAS, and PSD2. The company has delivered 50+ HSMs across Latin America.
Revenue mechanics combine hardware distribution, subscription-based HSM Cloud services, professional services for PAC/PSC certification, and authorized technology distribution across multiple vendor brands. The customer base is concentrated in Proveedores Autorizados de Certificación (PACs), Prestadores de Servicios de Certificación (PSCs), financial institutions, fintechs, government entities, identity validation providers, and system integrators. CEGA has operated for 11+ years without disclosed external funding, suggesting a self-funded and likely profitable business model.
Cega security firmographics
Firmographics- Name
- Cega security
- Legal name
- CEGA Security
- Website
- https://cegasecurity.com
- Company type
- Private
- Founded year
- 2013
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- CEGA Security is a Mexican cryptography and cybersecurity firm specializing in Hardware Security Modules, PKI infrastructure, and NOM-151 compliant electronic signatures, serving PACs, PSCs, financial institutions, and government across Mexico and Latin America.
- Ownership category
- akta.pro rank
Cega security industry classification
Industry- Product category
- Cybersecurity Hardware and Cryptographic Services
- NAICS
- Security Systems Services (56162), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- akta.pro primary industry
- Confidential Computing & Hardware-backed Protection (TEE/HSM) (HDADAFAJ)
- akta.pro secondary industries
- POS Security, Encryption & Key Management (P2PE, HSM, Key Injection) (FSAMADAK), Digital Asset Custody & Key Management (MPC, HSM, Wallet Infra) (FSAGAMAB)
Keywords
Where Cega security is headquartered
LocationHeadquarters
- HQ city
- Cancún
- HQ country
- Mexico
- HQ region
- Latin America
Offices2 records
Markets served
Cega security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Supply Chain, Marketing or Sales, Infrastructure, Operations
Revenue model
- HSM Cloud Subscription: Usage-based subscription model where charges vary proportionally to HSM transaction volume and number of keys stored per partition. Includes automatic scaling for peak demand with payment only for overages. Custom plans tailored to business transactional needs.
- Physical HSM Hardware Sales: Sale of Hardware Security Modules (HSM) including purpose general HSM (FIPS Level 3 and 4), financial HSMs (Excrypt Plus, Atalla), and payment HSMs. Products available as PCIe cards or network-attached devices.
- Professional Services - PAC/PSC Certification: Consulting and implementation services for SAT PAC certification and NOM 151 PSC certification. Includes HSM integration, documentation preparation, and compliance support.
- Authorized Technology Distributor: CEGA Security distributes HSM brands (Utimaco, Futurex, Engage Black) and related cryptographic solutions as authorized distributor for Mexico and Latin America.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Usage-based | Multi-year contract | Custom plans based on transactional volume and key storage |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels4 records
Cega security product offering
Product offeringCore offering
CEGA Security sells and integrates Hardware Security Module (HSM) solutions, including physical HSM devices and its proprietary HSM Cloud® service for cryptographic key protection, signing and encryption. The portfolio extends to PKI infrastructure, electronic signature platforms (Suite Legal), and consulting services that help organizations in Latin America achieve regulatory compliance for SAT electronic invoicing (PAC) and NOM 151 digital preservation (PSC).
Product overview
Cega Security offers a comprehensive cybersecurity portfolio centered on Hardware Security Modules (HSM) for cryptographic key protection and PKI-based digital identity solutions. The core product line includes physical HSMs (FIPS 140-2 Level 3 and Level 4 certified) available as PCIe cards or network-attached devices, and HSM Cloud—a revolutionary cloud-based HSM as a service launched in 2018. The portfolio extends to PKI infrastructure solutions (including PKI in a Box with integrated EJBCA), the Suite Legal electronic signature platform compliant with Mexican NOM-151, specialized financial and payment HSMs (Excrypt Plus, Atalla AT1000), timestamp servers, and multi-factor authentication (Mi-Token). Supporting services include PAC and PSC certification consulting for Mexican regulatory compliance, identity verification services, and IoT security solutions. The products serve sectors including banking, fintech, government, electronic invoicing, and general enterprise across Latin America.
Differentiator
Problem solved
Functional benefit
Brands
- HSM Cloud®: A cloud-based Hardware Security Module (HSM) service launched in June 2018, providing cryptographic key protection and management in the cloud with FIPS 140-2 Level 3 certified infrastructure.
- Suite Legal
- PKI in a Box
Products and services
- HSM Cloud® Cloud-based Hardware Security Module (HSM) service delivering cryptographic key protection, signing and encryption as a managed service for enterprises and certification providers needing FIPS 140-2 Level 3 security without owning physical hardware.
- General Purpose HSM Physical Hardware Security Modules for general-purpose cryptographic operations including key generation, encryption/decryption, digital signatures and key management, available as PCIe cards or network-attached devices with FIPS 140-2 Level 3 and Level 4 certifications.
- HSM Simulator Standalone 100% functional virtual HSM simulator for Windows and Linux that supports PKCS#11, CSP/CNG/SQLEKM and JCE interfaces, used by prospects and integrators for evaluation, integration testing and disaster recovery planning.
- PKI (Public Key Infrastructure) Public Key Infrastructure solutions for digital identity, certificate management and secure communications, comprising Certificate Authorities, Registration Authorities, HSM-backed key protection, CRL/OCSP validation and certificate repositories for enterprise customers.
- PKI in a Box Pre-configured turnkey PKI solution built on EJBCA Hardware Appliance with integrated HSM for instant deployment of automated certificate issuance, renewal and revocation, compliant with FIPS 140-2 Level 3, Common Criteria EAL4+, eIDAS, PSD2, HIPAA and GDPR.
- Suite Legal Electronic signature platform compliant with NOM-151-SCFI-2016, C\u00f3digo de Comercio and Ley de Firma Electr\u00f3nica Avanzada, supporting FIEL, PSC certificates, simple electronic signatures and digital autograph signatures with document management, video/image signing and API integration for legal firms, notaries and corporate legal departments.
- TimestampServer Hardware Security Module for secure timestamp creation and authentication that guarantees existence and authenticity of data and documents at specific points in time, supporting the RFC 3161 timestamp protocol over HTTP/TCP with IPv4/IPv6 and FIPS 140-2 Level 3/4 certification.
- Financial HSM (Excrypt Plus) Enterprise Financial Hardware Security Module from Futurex for payment processing and financial transactions, supporting up to 5,000 TPS expandable to 20,000 TPS with TR-31 key blocks, DUKPT, 3DES, RSA, AES and ECC algorithms and certified to FIPS 140-2 Level 3, PCI-HSM and ANSI X9.24 Part 1/2.
- Payment HSM (Utimaco Atalla AT1000) PCI-DSS compliant payment HSM from Utimaco Atalla that protects sensitive payment data and cryptographic keys for retail non-cash transactions, cardholder authentication, PIN processing, EFTPOS/ATM, EMV card processing and key generation/injection, with FIPS 140-2 Level 3 and PCI-HSM certification.
- PAC Certification Services Consulting and implementation services that help organizations become SAT Authorized Certification Providers (PAC) for electronic invoicing in Mexico, including HSM implementation (FIPS 140-2 Level 3 required), compliance documentation for the 80 technological controls review and hybrid cloud/on-premise deployment options.
- PSC Certification Services Consulting services for Certification Service Providers (PSC) seeking NOM 151-SCFI-2016 accreditation for digital document preservation, including technical requirements consultation, HSM implementation (minimum two FIPS 140-2 Level 3 devices) and end-to-end support through the certification process.
- Identity Verification Service INE (Instituto Nacional Electoral) voter credential verification service that uses HSM-based encryption and signing to validate citizen identity for banking, credit unions, political parties and government institutions.
- Multi-Factor Authentication (Mi-Token) Enterprise multi-factor authentication solution (Mi-Token) supporting 2FA for VPN access, local/application access, SSO for cloud applications and RADIUS infrastructure, designed for high availability through distributed AD LDS databases.
- IoT Security Solutions IoT security solutions using HSM for device authentication, cryptographic key generation and secure communication between connected devices and central servers in sectors such as banking, healthcare, gas stations and aviation.
Quantifiable outcome
- 50+ HSMs delivered across Latin America in 6+ years
- +1 more outcomes
Companies that use Cega security
Customer profileNamed customers4 records
Segments6 records
Ideal customer profiles5 records
Cega security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration8 records
Feature5 records
Cega security partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered minor and core.
- Array NetworksminorCEGA Security named 'Value-Added Distributor' for Array Networks Network Functions Platform in Latin America. Array addresses performance and complexity challenges for enterprises migrating to virtual networks, security, and application delivery.
- UtimacocoreGerman brand with 25+ years developing HSM solutions. Provider of German Government ePassport and eID platform for EU. First HSM implementation in Mexico was in 2011. CEGA Security is authorized distributor for Mexico and Latin America.
- Futurexcore40+ years of experience in enterprise data security and encryption solutions. Over 16,000 global clients. Provides hardware and cloud-based HSM solutions including financial HSM. CEGA Security distributes Futurex products.
- KeyfactorcoreLeader in crypto-agility and cloud PKI solutions. Platform enables security teams to orchestrate keys and certificates across the enterprise. Serves 500+ companies globally with expertise from modern multi-cloud enterprises to complex IoT supply chains.
Scale indicators4 records
Recent moves6 records
Expansion highlights4 records
Cega security competitors and assessment
Company assessmentDirect peers
- Entrust: Entrust is an established HSM and PKI vendor with broad enterprise and government offerings that compete with CEGA's PKI in a Box and Suite Legal electronic signature products.
- Securosys: Securosys is a Swiss HSM specialist (Primus HSM family) competing in financial and government markets with a cloud HSM service (CloudHSM) similar to CEGA's HSM Cloud.
- Thales: Thales (Luna HSM product line) is the global HSM leader and directly competes with CEGA's general-purpose and payment HSM offerings for enterprise and banking customers in regulated industries.
- Futurex: Futurex supplies enterprise and financial HSM hardware (including Excrypt Plus, which CEGA distributes) and directly competes with CEGA in payment and financial HSM deployments across Latin America.
- Utimaco: Utimaco is a core HSM vendor partner and a direct competitor; CEGA distributes Utimaco products in LATAM but also competes against Utimaco's own regional push into Mexican financial and government accounts.
Broad incumbents
- Microsoft Azure Dedicated HSM: Azure Dedicated HSM provides FIPS 140-2 Level 3 HSMs on Microsoft's cloud and competes with HSM Cloud for LATAM enterprises standardizing on Azure.
- AWS CloudHSM: AWS CloudHSM is a hyperscaler-managed FIPS 140-2 Level 3 HSM service that competes with HSM Cloud as part of the broader AWS cloud platform offering.
- Atos (Eviden): Atos/Eviden offers the Trustway family of HSMs and payment security products that directly compete with CEGA's payment and financial HSM portfolio for banking customers.
Emerging players
- Keyfactor: Keyfactor is a CEGA alliance partner and a crypto-agility/PKI orchestration vendor whose EJBCA-adjacent platform competes with CEGA's PKI in a Box for enterprise digital certificate management.
- Cryptomathic: Cryptomathic provides cryptographic key management, PKI, and electronic signature solutions overlapping with CEGA's PKI in a Box and Suite Legal offerings, primarily in Europe but expanding globally.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Cega security social profiles
Digital presenceCega security compliance and trust
Trust signalCompliance23 records
Cega security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cega security leadership team
Management profileNumber of profiles
Profiles1 record
Cega security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cega security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cega security
What does Cega security do?
CEGA Security sells and integrates Hardware Security Module (HSM) solutions, including physical HSM devices and its proprietary HSM Cloud® service for cryptographic key protection, signing and encryption. The portfolio extends to PKI infrastructure, electronic signature platforms (Suite Legal), and consulting services that help organizations in Latin America achieve regulatory compliance for SAT electronic invoicing (PAC) and NOM 151 digital preservation (PSC).
Is Cega security a public or private company?
Cega security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Cega security founded?
Cega security was founded in 2013. It employs 11 to 50 people.
Where is Cega security based?
Cega security is headquartered in Cancún, Mexico, in the Latin America region.
How does Cega security make money?
Four revenue lines are on record. HSM Cloud Subscription is the primary driver. The others are physical HSM Hardware Sales, professional Services - PAC/PSC Certification and authorized Technology Distributor.
Who are Cega security's main competitors?
Direct peers on record are Entrust, Securosys, Thales, Futurex and Utimaco. Broad incumbents are Microsoft Azure Dedicated HSM, AWS CloudHSM and Atos (Eviden). Emerging players are Keyfactor and Cryptomathic.
Does Cega security have an API?
No public API is recorded for Cega security.
What industry is Cega security in?
Cega security's product category is Cybersecurity Hardware and Cryptographic Services. Its primary akta.pro industry code is HDADAFAJ, Confidential Computing & Hardware-backed Protection (TEE/HSM), with a secondary code of FSAMADAK, POS Security, Encryption & Key Management (P2PE, HSM, Key Injection). Its NAICS code is 56162.