Insider Brief
- Keyfactor exceeded $200 million in annual recurring revenue (ARR) in early Q3 2026 as demand for machine identity and digital trust infrastructure grows.
- The company says it manages hundreds of billions of machine identities annually for more than 1,000 customers and has expanded adoption across financial services, retail, technology and government.
- Keyfactor is expanding its digital trust platform alongside a $1 billion-plus investment from Summit Partners, a planned Cofide acquisition and growing demand for crypto-agility and post-quantum readiness.
PRESS RELEASE — Keyfactor, the leader in trust infrastructure for the AI and quantum era, today announced significant business traction as the company exceeded $200 million in annual recurring revenue in the beginning of Q3 2026. This success reflects the increasing strategic demand around machine identity security, reinforcing Keyfactor’s industry leadership at a pivotal moment for enterprise security.
“Surpassing $200 million in ARR is a tremendous milestone for Keyfactor, and what makes it especially meaningful is the trajectory behind it. In 2019, Keyfactor was a sub-$10 million ARR business. It took us roughly five years to grow more than tenfold and surpass $100 million, and then just two years to double the business again. Adding that next $100 million at a much greater scale, and in less than half the time, demonstrates the acceleration of this market, the growing demand for what we do, and our ability to capture that opportunity at scale,” said Jordan Rackie, CEO of Keyfactor. “This milestone is a testament to the entire Keyfactor ecosystem, our employees, partners and, most importantly, our customers. It is worth taking a moment to appreciate how far we have come, but there is a reason the windshield is much larger than the rearview mirror. Our focus remains firmly on what is ahead, and we believe the opportunity to define the trust infrastructure market and continue scaling Keyfactor has never been greater.”
Building on its strong growth and market momentum, Keyfactor’s recent $1 billion-plus investment announcement from Summit Partners and intent to acquire Cofide provide additional fuel to accelerate the company’s global expansion and strengthen its market leadership. Keyfactor continues to see growing adoption among enterprises across industries and key government agencies as organizations face increasing urgency to strengthen digital trust and prepare for the post-quantum era, underscored by the White House’s June 2026 executive orders calling for an accelerated transition to post-quantum cryptography ahead of 2030.
Keyfactor Scales Digital Trust Across the World’s Largest Enterprises
Keyfactor’s accelerating revenue growth has enabled the company to sustain market-leading ARR growth of more than 35% year over year, even as the business has reached significantly greater scale. At the same time, Keyfactor has demonstrated a disciplined and efficient approach to growth, operating profitably while continuing to reinvest meaningfully back into the business. This combination of growth, financial strength and continued investment gives Keyfactor the ability to scale responsibly for the long term while expanding its innovation, capabilities and support for customers and partners worldwide.
Keyfactor issues and manages hundreds of billions of machine identities globally each year, helping more than 1,000 customers worldwide secure and automate trust at scale. The company has a significant foothold across major industries, supporting 50% of the largest banks in the U.S. and Europe, 80% of the leading U.S. retailers, and more than 40% of the Fortune 100. Its customer base spans financial services, banking, technology, healthcare, telecommunications, the U.S. federal government and government organizations across NATO countries and around the world.
Keyfactor’s accelerating growth and market adoption have also earned sustained industry recognition. The company has been named to the Inc. 5000 for seven consecutive years, distinguishing Keyfactor as the fastest-growing company in Trust Infrastructure over that period and demonstrating its ability to sustain exceptional growth as the business continues to scale.
Building the Infrastructure for Trust in an AI-Driven, Post-Quantum World
Keyfactor helps organizations manage digital trust through a unified approach rather than a collection of disconnected tools. The company’s Trust Control Plane provides centralized visibility into the machine identities, cryptographic assets and trust systems that underpin digital operations, while automating critical aspects of lifecycle management and enabling consistent governance across the enterprise.
Machine identities are expanding at an astonishing pace due to the development of AI while governments and enterprises are doubling their efforts to refresh cryptography and prepare for a post-quantum era. Keyfactor is at the intersection of these two movements supporting businesses to identify and manage cryptographic elements of ever-growing environments and at the same time create trusted identities for machines, workloads and AI agents. Using Keyfactor, customers can increase their resilience, tighten their security and lay out the path to quantum-resistant preparation.
Keyfactor’s growth is reflected not only in its financial performance, but also in the scale and adoption of its products worldwide, including:
- Active certificates issued by Keyfactor-managed PKI have increased more than 200% since 2025.
- Certificates issued through EJBCA SaaS have grown 168% since early 2025, underscoring accelerating adoption of cloud-native PKI.
- Certificates automated through Keyfactor Command have grown 207% since 2024, reflecting the rapid expansion of machine identities across enterprise environments.
The Future of Digital Trust
The company’s momentum is extending across Keyfactor’s global partner ecosystem, which the company expanded earlier this year to help partners capitalize on one of the largest security transformations in decades. The enhanced program enables partners to develop advisory, implementation and managed services around digital trust, including crypto-agility and quantum readiness services, Post-Quantum Cryptography (PQC) Centers of Excellence, and solutions that help customers modernize digital trust across increasingly complex, multi-technology environments.
Keyfactor’s traction in the public sector continues to grow, having achieved FedRAMP certification status earlier this year. The authorization provides federal agencies and other government customers with a cloud-based option for certificate lifecycle automation, supporting secure modernization efforts.
“The White House’s 2030 PQC deadline is fast approaching, and federal agencies need proven tools that make crypto-agility achievable, not just aspirational,” said Matt Hartman, Chief Strategy Officer at Merlin Group. “Keyfactor’s approach to discovering and modernizing cryptographic assets reflects exactly the kind of practical innovation the government needs right now: not just preparing agencies for the quantum era, but showing what effective PQC migration looks like in practice.”
To learn more about the company’s $200 Million ARR, please visit:
Facts Only
Keyfactor exceeded $200 million in annual recurring revenue (ARR) in early Q3 2026.
The company had sub-$10 million ARR in 2019.
Keyfactor manages hundreds of billions of machine identities for over 1,000 customers.
The customer base includes 50% of the largest U.S. and European banks and 80% of leading U.S. retailers.
Summit Partners provided an investment of over $1 billion.
Keyfactor intends to acquire Cofide.
The White House issued executive orders in June 2026 regarding post-quantum cryptography transitions by 2030.
Keyfactor achieved FedRAMP certification.
Active certificates issued by Keyfactor-managed PKI increased more than 200% since 2025.
Certificates issued through EJBCA SaaS grew 168% since early 2025.
Certificates automated through Keyfactor Command grew 207% since 2024.
Executive Summary
Keyfactor has exceeded $200 million in annual recurring revenue (ARR) as of early Q3 2026, marking a significant growth trajectory from sub-$10 million in 2019. The company focuses on trust infrastructure, specifically machine identity security and digital trust, serving over 1,000 customers including 50% of the largest banks in the U.S. and Europe and 40% of the Fortune 100. This growth is supported by a $1 billion-plus investment from Summit Partners and the planned acquisition of Cofide.
The company's expansion is driven by the proliferation of machine identities in AI environments and the urgent need for post-quantum cryptography (PQC) readiness. This is further accelerated by a June 2026 White House executive order mandating a transition to PQC by 2030. While the company reports profitable growth and substantial increases in certificate issuance across its PKI and SaaS offerings, the precise mechanisms of its profitability and the specific terms of its acquisition strategies remain internal corporate details.
Full Take
The strongest version of this narrative is that Keyfactor is successfully scaling a critical piece of security infrastructure just as the intersection of AI and quantum computing creates a systemic vulnerability in digital trust. By positioning itself as the "Trust Control Plane," the company is moving from a tool provider to an essential utility for the modern enterprise.
However, this is a classic vendor-driven narrative. The primary persuasion vector is the alignment of corporate growth with an existential technical threat. By tethering its revenue milestones to the "quantum era" and White House mandates, the narrative transforms a product sales pitch into a matter of national and organizational survival. The use of high-percentage growth figures for certificate issuance serves as a proxy for market dominance, though these numbers lack external verification or a baseline of total market volume.
The underlying paradigm is "Security as Compliance." The narrative assumes that the only path to quantum readiness is through centralized, commercial trust infrastructure. This benefits the vendor and the investor while potentially creating a new point of systemic failure: a centralized "control plane" for global machine identities.
Patterns detected: ARC-0045 Authority Game, ARC-0012 Fear Appeal
If this were a coordinated influence campaign, the playbook would involve creating a sense of inevitable crisis (the "Quantum Deadline") and then presenting a single, pre-validated solution as the only viable exit strategy. While the facts regarding the White House order are external, the structural framing—linking that fear directly to the company's ARR growth—aligns with this pattern.
Bridge Questions:
1. Are there decentralized or open-source alternatives to a commercial "Trust Control Plane" for PQC migration?
2. How does the centralization of hundreds of billions of identities within one vendor's infrastructure affect systemic risk?
3. To what extent is the "quantum threat" being used to drive current procurement cycles before the actual technology is mature?