>_ Skip to main content
Menu
Search
Post-Quantum Security

Keyfactor Reports $200M ARR as PQC Demand Grows

Keyfactor announced on September 9 that its annual recurring revenue (ARR) surpassed $200 million at the beginning of Q3 2026. This self-reported, unaudited figure was released alongside promotions for two separate company developments: a $1 billion-plus investment from Summit Partners and the planned acquisition of Cofide. Keyfactor’s product line focuses on classical certificate and machine-identity software, unrelated to quantum computing milestones.

Company’s Reported Highlights

Keyfactor specializes in certificate lifecycle and public-key infrastructure. The company claims to manage hundreds of billions of machine identities annually for over 1,000 clients. It reports significant market penetration, stating that it serves half of the largest banks in the US and Europe, 80% of leading US retailers, and more than 40% of the Fortune 100.

CEO Jordan Rackie highlighted the company’s growth trajectory, noting that ARR was below $10 million in 2019, reached $100 million in approximately five years, and then doubled to $200 million in just two years. Keyfactor also asserts year-over-year ARR growth exceeding 35% and claims to operate profitably. However, the release does not include financial statements to substantiate these claims.

The company also reported increased product usage: active certificates from its managed PKI rose by over 200% since 2025, EJBCA SaaS certificates by 168% since early 2025, and certificates automated through Keyfactor Command by 207% since 2024.

Quantum Computing Connection

Keyfactor’s relevance to quantum technology lies in post-quantum cryptography (PQC). Its software helps organizations inventory cryptographic assets and transition to algorithms designed to withstand future quantum computers. Currently, no cryptographically relevant quantum computer exists. The release references the White House’s June 2026 executive orders on accelerating PQC adoption before 2030 as a demand driver, emphasizing policy over technical advancements.

The company’s release does not specify which PQC standards its migration path targets. It discusses PQC and crypto-agility in general terms, without mentioning implementation of NIST-standardized algorithms like FIPS 203, 204, or 205. Matt Hartman, Chief Strategy Officer at Merlin Group, a Keyfactor partner, is quoted in the release:

“Keyfactor’s approach to discovering and modernizing cryptographic assets reflects exactly the kind of practical innovation the government needs right now: not just preparing agencies for the quantum era, but showing what effective PQC migration looks like in practice.”

The Summit Partners investment and the Cofide purchase are announced intentions, not completed and integrated transactions.