LAAVAT PKI and Signing Platform
The facts below are what the maker publishes about LAAVAT PKI and Signing Platform, checked and dated. Our editors have not written about it yet.
Plans and prices
From LAAVAT PKI and Signing Platform's own pricing page, checked 1 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Custom quote | Priced on request | Pricing on request · 14-day evaluation · no free plan |
The facts
Each one read from LAAVAT PKI and Signing Platform's own pages, with the date it was checked.
What it does
- Compliance
- LAAVAT’s information security management system is certified to ISO/IEC 27001:2022, certificate 244147.checked 1 Oct 2026
- CRA scope limit
- LAAVAT states that using the platform alone does not make a product CRA compliant because compliance also covers the whole product and process.checked 1 Oct 2026
- Deployment models
- Customers can use a shared HSM, a dedicated LAAVAT-managed HSM, a customer-managed HSM in their AWS account, or on-premises deployment.checked 1 Oct 2026
- Encryption
- It supports AES-GCM-256 image encryption, manufacturing key delivery, key escrow and key export.checked 1 Oct 2026
- Governance
- The platform offers RBAC, group-based signing policies, quorum approvals and immutable exportable audit trails.checked 1 Oct 2026
- Integrations
- Integrations include REST, EST, Microsoft Entra ID, Google SSO, Yocto, CI/CD clients and provisioning-station clients.checked 1 Oct 2026
- Key protection
- Signing keys are generated inside AWS CloudHSM and never exist in plaintext outside the HSM.checked 1 Oct 2026
- Managed service
- It runs customers’ PKI, signs firmware and issues device identities as a managed service.checked 1 Oct 2026
- PKI capabilities
- The platform provides CA hierarchies, certificate lifecycle management, EST and REST enrollment, and CRL lifecycle functions.checked 1 Oct 2026
- Product purpose
- LAAVAT is a cloud PKI and code-signing platform for embedded and IoT device manufacturers.checked 1 Oct 2026
- Signing formats
- Supported signing targets include NXP HAB/AHAB, AMD/Xilinx Bootgen, TI, MCUboot, FIT, RAUC, SWUpdate, Mender, OP-TEE, OCI/Cosign, Windows, Java, JWT and detached signatures.checked 1 Oct 2026
- Support
- The documentation directs users to contact [email protected] for unanswered questions.checked 1 Oct 2026
- Target users
- The platform is aimed at engineering, security, product and manufacturing teams building connected devices and managing firmware signing across pipelines and production lines.checked 1 Oct 2026
Where it runs
- Device security
- LAAVAT provides secure boot, signed firmware updates and tamper-resistant per-device certificates for mutual TLS, attestation and factory onboarding.checked 1 Oct 2026
The company
- Headquarters
- Tampere, Finlandchecked 28 Sep 2026
Alternatives to LAAVAT PKI and Signing Platform
- 1
Sigstore
Free planOpen sourceWebAPILinuxmacOS7.6Free plan - 2
SignPath
Free planWebAPILinuxmacOS7.2Free plan - 3
AWS Signer
Free planWebAPILinuxmacOS7.1Free plan - 4
Cosign
Free planLinuxmacOSSelf-hostedWindows6.6Free plan - 5
OpenPubkey
Free planAPILinuxmacOSSelf-hosted6.6Free plan - 6
SignServer
Free planWebAPILinuxmacOS6.5Free plan