EZCA

EZCA is ranked #1 of 25 in public key infrastructure software on The Geeks Club. It runs on Android, API, iOS, Linux, macOS, Self-hosted, Web, Windows. There is no free plan. A free trial is offered. Paid plans start at $200/mo.

EZCA plans and pricing

All plans

Basic $200/mo $200 / CA / month FIPS 140-3 Level 2 HSM backed CAs · 1 certificate created or OCSP response per CA per second · Support within one business day · 99.9% availability keytos.io · 29 Sept 2026

Premium $500/mo $500 / CA / month FIPS 140-3 Level 3 HSM backed CAs · 10 certificates created or OCSP responses per CA per second · 24/7 support within 24 hours · 99.95% availability · Public CA certificate management keytos.io · 29 Sept 2026

Self-Hosted Licensing $3,000/mo $3,000 (with unlimited CAs) / location / month Everything in Private Infrastructure · Self-healing infrastructure with Azure PaaS services keytos.io · 29 Sept 2026

Private Infrastructure $6,000/mo $6,000 / location / month Everything in Premium · 160 certificates created or OCSP responses per CA per second · 24/7 support within 1 hour · Fully isolated infrastructure keytos.io · 29 Sept 2026

Compared on public key infrastructure software

Free plan: No
Paid from: $200/mo
Deployment model: hybrid
ACME support: Yes
SCEP support: Yes
EST support: Yes
HSM integration: Yes
Certificate profiles: Yes

Best EZCA alternatives

See all 12

7.2 KeyTalk CKMS Free trial €5/mo

7.2 step-ca Free plan

7.1 XiPKI Free plan

7.0 Keyfactor Platform Free trial

6.8 Sectigo Certificate Manager Free trial $20.83/mo

6.8 SecureW2 Cloud NAC

EZCA

What it does: EZCA is a cloud PKI service for running and scaling certificate authorities without operating the PKI infrastructure yourself.
Protocols: It issues certificates through ACME, EST, and SCEP, and provides APIs for applications and workflows.
Microsoft integration: EZCA integrates with Azure, Entra ID, Intune, Azure Key Vault, and Azure applications.
MDM integrations: The product supports Intune and Jamf for device certificates.
Existing PKI: EZCA can chain to an existing on-premises CA or bring an existing AD CS CA into the cloud setup.
Certificate use cases: The platform manages certificates for users, devices, applications, Wi-Fi, VPN, web services, and IoT.
IoT: EZCA supports certificate-based device authentication for Azure IoT Hub and Azure IoT Central.
Security: The maker says EZCA uses HSM-backed CAs, with Basic backed by FIPS 140-3 Level 2 HSMs and Premium by Level 3 HSMs.
Audit and SIEM: CA changes, certificate requests, and approvals are logged and can be exported to a preferred SIEM.
Revocation: EZCA supports certificate revocation checking through CRLs and OCSP.
Availability: The pricing page lists 99.9% availability for Basic and 99.95% for Premium.
Certificate limits: The maker says there is no certificate count limit; pricing is based on the number of certificate authorities managed.
Support: Basic includes support within one business day, Premium includes 24/7 support within 24 hours, and Private Infrastructure includes 24/7 support within one hour.
Company: Keytos says it was founded by Marcos and Igal Flegmann, brothers with experience building PKI and identity tools at Microsoft.
Price from: $200/mo

Visit site Alternatives

Where it ranks on The Geeks Club

Best Public Key Infrastructure Software in 2026#1 of 25

Is EZCA yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote EZCA

Sources

keytos.io/azure-pki· checked 29 Sept 2026
keytos.io/ezca_pricing· checked 29 Sept 2026
keytos.io/about· checked 29 Sept 2026