MenuOur Vision
Language
Products
CLM OrchestratorPKIFactorCommand and automate every certificate authority from a single governance layer.
Explore PKIFactor
View Editions
Certificate AuthorityZetaCAPost-quantum certificate authority. Universal HSM support. Zero compromise.
Explore ZetaCA
View Editions

ZetaCA Editions

A CA built for your scale.

Classical, enterprise or post-quantum. One foundation. Three power levels.

Available for proof of concept and integration projects.

Starter

Full classical PKI. Zero license, zero compromise.

Certificate Authorities

Multi-CA hierarchy (Root, Sub-CA, import)
Classical cryptography (RSA, ECDSA)
28 built-in templates (7 EKU x 4 families)
Full CRL, Delta CRL and OCSP Responder
Users(10 max)
Certificate authorities(3 max)

Administration

Admin UI + Sysadmin UI
Full REST API
RBAC 3 roles (Admin, Operator, Auditor)
mTLS Authentication
Encrypted Backup / Restore
Audit logging and Prometheus

Infrastructure

Post-Quantum

Contact Us
Recommended

Enterprise

Hardware HSM, HA and LDAP. The CA your CISO has been waiting for.

Certificate Authorities

Multi-CA hierarchy (Root, Sub-CA, import)
Classical cryptography (RSA, ECDSA)
28 built-in templates (7 EKU x 4 families)
Full CRL, Delta CRL and OCSP Responder
Users
Certificate authorities

Administration

Admin UI + Sysadmin UI
Full REST API
RBAC 3 roles (Admin, Operator, Auditor)
mTLS Authentication
Encrypted Backup / Restore
Audit logging and Prometheus

Infrastructure

HSM / PKCS#11 (tested Utimaco, any PKCS#11 compatible)
High availability (Patroni + HAProxy)
LDAP / Active Directory
SIEM (Syslog)

Post-Quantum

Contact Us

Free 30-day trial included

Quantum

ML-DSA, Composite, Dual-Cert. The only natively post-quantum CA.

Certificate Authorities

Multi-CA hierarchy (Root, Sub-CA, import)
Classical cryptography (RSA, ECDSA)
28 built-in templates (7 EKU x 4 families)
Full CRL, Delta CRL and OCSP Responder
Users
Certificate authorities

Administration

Admin UI + Sysadmin UI
Full REST API
RBAC 3 roles (Admin, Operator, Auditor)
mTLS Authentication
Encrypted Backup / Restore
Audit logging and Prometheus

Infrastructure

HSM / PKCS#11 (tested Utimaco, any PKCS#11 compatible)
High availability (Patroni + HAProxy)
LDAP / Active Directory
SIEM (Syslog)

Post-Quantum

ML-DSA (Dilithium), SLH-DSA (SPHINCS+)
IETF Composite (P256+ML-DSA, RSA3072+ML-DSA...)
Dual-Cert (RFC 9763) and Hybrid AltSig
Cryptographic family segregation
PQC HSM (Utimaco QuantumProtect, hardware ML-DSA)
Contact Us

Free 30-day trial included