LAAVAT PKI and Signing Platform

6.7easy start · #13of 27
in Code Signing Software

Free trialyes
Well documentedyes
Runs where you workno

Runs on api, self-hosted, Web.

LAAVAT PKI and Signing Platform is ranked #13 of 27 in code signing software on The Geeks Club. It runs on API, Self-hosted, Web. A free trial is offered.

LAAVAT PKI and Signing Platform plans and pricing

All plans

Custom quote Pricing on request · 14-day evaluation · no free plan itechguides.com · 1 Oct 2026

Compared on code signing software

Free plan: No
Supported targets: NXP HAB/AHAB, AMD/Xilinx Bootgen, TI, MCUboot, FIT, RAUC, SWUpdate, Mender, OP-TEE, OCI/Cosign, Windows, Java, JWT, detached signatures
Certificate provided: Yes
Cloud signing: Yes
HSM key protection: Yes
Trusted timestamping: Yes
CI/CD signing: Yes
Approval workflows: Yes

Best LAAVAT PKI and Signing Platform alternatives

See all 20

SignServer Lesson 17.9 OpenPubkey Lesson 27.3 SignPath Lesson 37.3 AWS Signer Lesson 47.2 Notation Lesson 57.2 Cosign Lesson 67.1

The record

Product purpose: LAAVAT is a cloud PKI and code-signing platform for embedded and IoT device manufacturers.
Managed service: It runs customers’ PKI, signs firmware and issues device identities as a managed service.
PKI capabilities: The platform provides CA hierarchies, certificate lifecycle management, EST and REST enrollment, and CRL lifecycle functions.
Signing formats: Supported signing targets include NXP HAB/AHAB, AMD/Xilinx Bootgen, TI, MCUboot, FIT, RAUC, SWUpdate, Mender, OP-TEE, OCI/Cosign, Windows, Java, JWT and detached signatures.
Encryption: It supports AES-GCM-256 image encryption, manufacturing key delivery, key escrow and key export.
Device security: LAAVAT provides secure boot, signed firmware updates and tamper-resistant per-device certificates for mutual TLS, attestation and factory onboarding.
Integrations: Integrations include REST, EST, Microsoft Entra ID, Google SSO, Yocto, CI/CD clients and provisioning-station clients.
Key protection: Signing keys are generated inside AWS CloudHSM and never exist in plaintext outside the HSM.
Governance: The platform offers RBAC, group-based signing policies, quorum approvals and immutable exportable audit trails.
Deployment models: Customers can use a shared HSM, a dedicated LAAVAT-managed HSM, a customer-managed HSM in their AWS account, or on-premises deployment.
Compliance: LAAVAT’s information security management system is certified to ISO/IEC 27001:2022, certificate 244147.
Support: The documentation directs users to contact [email protected] for unanswered questions.
Target users: The platform is aimed at engineering, security, product and manufacturing teams building connected devices and managing firmware signing across pipelines and production lines.
CRA scope limit: LAAVAT states that using the platform alone does not make a product CRA compliant because compliance also covers the whole product and process.

Where it ranks on The Geeks Club

Best Code Signing Software in 2026#13 of 27

Is LAAVAT PKI and Signing Platform yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote LAAVAT PKI and Signing Platform

Sources

docs.laavat.io/faq/· checked 1 Oct 2026
laavat.io· checked 1 Oct 2026
laavat.io/platform· checked 1 Oct 2026
docs.laavat.io/security/· checked 1 Oct 2026
itechguides.com/products/laavat-pki-and-signing-platfor· checked 1 Oct 2026