EZCA

Name: EZCA
Price: 200 USD

Visit site Alternatives

Score6.8

Rank#4 of 25

From$200/mo

Free planNo

Free trialYes

Runs onAndroid, API, iOS, Linux, macOS, Self-hosted, Web, Windows

Summary

EZCA is a cloud PKI service for operating certificate authorities without managing the PKI infrastructure yourself. It issues certificates through ACME, EST, and SCEP, and offers APIs for applications and workflows. Certificate use cases include users, devices, applications, Wi-Fi, VPN, web services, and IoT, including device authentication for Azure IoT Hub and Azure IoT Central. Integrations include Azure, Entra ID, Intune, Azure Key Vault, and Azure applications; Intune and Jamf are supported for device certificates. EZCA can connect to an existing on-premises CA or bring an AD CS CA into a cloud setup. The maker says its CAs use HSMs: Basic uses FIPS 140-3 Level 2 and Premium Level 3. CA changes, requests, and approvals are logged for export to a preferred SIEM, and revocation checking uses CRLs and OCSP. There is no free plan, but a 30-day trial is listed. Basic starts at $200 / CA / month; higher tiers add capacity, support, and infrastructure options.

Who it is for

EZCA suits organizations managing certificates for users, devices, applications, or IoT, especially those using the listed Azure and MDM integrations. It may also fit teams connecting an existing CA to a cloud setup.

What is good

Issues certificates through ACME, EST, and SCEP
Integrates with Azure, Entra ID, and Intune
Supports CRL and OCSP revocation checking
No certificate count limit is listed

What to know first

No free plan is available
Basic is $200 / CA / month
Pricing is based on managed certificate authorities

Verdict

EZCA centralizes certificate authority operations and supports several certificate protocols and use cases. Its paid tiers vary by CA capacity, support, availability, and deployment model.

EZCA plans and pricing

All plans

Basic $200/mo $200 / CA / month FIPS 140-3 Level 2 HSM backed CAs · 1 certificate created or OCSP response per CA per second · Support within one business day · 99.9% availability keytos.io · 29 Sept 2026

Premium $500/mo $500 / CA / month FIPS 140-3 Level 3 HSM backed CAs · 10 certificates created or OCSP responses per CA per second · 24/7 support within 24 hours · 99.95% availability · Public CA certificate management keytos.io · 29 Sept 2026

Self-Hosted Licensing $3,000/mo $3,000 (with unlimited CAs) / location / month Everything in Private Infrastructure · Self-healing infrastructure with Azure PaaS services keytos.io · 29 Sept 2026

Private Infrastructure $6,000/mo $6,000 / location / month Everything in Premium · 160 certificates created or OCSP responses per CA per second · 24/7 support within 1 hour · Fully isolated infrastructure keytos.io · 29 Sept 2026

Compared on public key infrastructure software

Free plan: Nokeytos.io
Paid from: $200/mokeytos.io
Deployment model: hybridkeytos.io
ACME support: Yeskeytos.io
SCEP support: Yeskeytos.io
EST support: Yeskeytos.io
HSM integration: Yeskeytos.io
Certificate profiles: Yeskeytos.io

Facts

What it does: EZCA is a cloud PKI service for running and scaling certificate authorities without operating the PKI infrastructure yourself.keytos.io · 29 Sept 2026
Protocols: It issues certificates through ACME, EST, and SCEP, and provides APIs for applications and workflows.keytos.io · 29 Sept 2026
Microsoft integration: EZCA integrates with Azure, Entra ID, Intune, Azure Key Vault, and Azure applications.keytos.io · 29 Sept 2026
MDM integrations: The product supports Intune and Jamf for device certificates.keytos.io · 29 Sept 2026
Existing PKI: EZCA can chain to an existing on-premises CA or bring an existing AD CS CA into the cloud setup.keytos.io · 29 Sept 2026
Certificate use cases: The platform manages certificates for users, devices, applications, Wi-Fi, VPN, web services, and IoT.keytos.io · 29 Sept 2026
IoT: EZCA supports certificate-based device authentication for Azure IoT Hub and Azure IoT Central.keytos.io · 29 Sept 2026
Security: The maker says EZCA uses HSM-backed CAs, with Basic backed by FIPS 140-3 Level 2 HSMs and Premium by Level 3 HSMs.keytos.io · 29 Sept 2026
Audit and SIEM: CA changes, certificate requests, and approvals are logged and can be exported to a preferred SIEM.keytos.io · 29 Sept 2026
Revocation: EZCA supports certificate revocation checking through CRLs and OCSP.keytos.io · 29 Sept 2026
Availability: The pricing page lists 99.9% availability for Basic and 99.95% for Premium.keytos.io · 29 Sept 2026
Certificate limits: The maker says there is no certificate count limit; pricing is based on the number of certificate authorities managed.keytos.io · 29 Sept 2026
Support: Basic includes support within one business day, Premium includes 24/7 support within 24 hours, and Private Infrastructure includes 24/7 support within one hour.keytos.io · 29 Sept 2026
Company: Keytos says it was founded by Marcos and Igal Flegmann, brothers with experience building PKI and identity tools at Microsoft.keytos.io · 29 Sept 2026