Entrust

Entrust
Name	Entrust
Type	Private
Industry	Cybersecurity, Identity Management, Public Key Infrastructure
Founded	1994
Headquarters	Minnesota, United States

Entrust

Entrust is a company specializing in digital identity, encryption, and certificate management. It provides public key infrastructure, secure transaction solutions, and identity verification services used across finance, healthcare, government, and technology sectors. The organization competes and collaborates with major technology firms and standards bodies to deliver cryptographic and authentication platforms.

History

Founded in the mid-1990s, the company emerged during the early commercial adoption of Secure Sockets Layer technologies and the expansion of Internet Explorer and Netscape Navigator into mainstream use. Early growth was shaped by interactions with standards organizations such as the Internet Engineering Task Force and regulatory influences from entities like the Federal Reserve System and national certificate authorities in countries including the United Kingdom and Canada. The firm underwent ownership changes and private equity transactions reminiscent of deals involving Thoma Bravo, KKR, and other investment firms in the cybersecurity sector. Its development paralleled milestones involving X.509 standards, the Payment Card Industry Data Security Standard, and high-profile incidents that elevated demand for digital trust solutions, including breaches that affected major institutions such as Equifax and Target Corporation.

Products and Services

The product portfolio spans certificate issuance similar to services offered by DigiCert and Let's Encrypt, identity proofing akin to offerings from Okta and Auth0, and hardware security modules comparable to products from Thales Group and Yubico. Offerings include enterprise PKI platforms used by financial incumbents like JPMorgan Chase, authentication tokens employed by telecommunications companies such as Verizon Communications, and mobile credentialing solutions adopted by airlines including Delta Air Lines. Additional services mirror managed PKI operations relied upon by government agencies such as the United States Department of Defense and healthcare providers like Mayo Clinic.

Technology and Security

Technologies leverage asymmetric cryptography based on algorithms standardized by organizations like the National Institute of Standards and Technology and protocols from the IETF. Solutions interoperate with operating systems and platforms including Microsoft Windows Server, Linux, Android, and iOS, as well as cloud providers such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform. Security posture and product roadmaps respond to challenges highlighted by incidents involving Heartbleed, ROCA, and certificate transparency discussions associated with companies like Google. The company integrates hardware-backed key storage consistent with standards from the FIPS and collaborates with standards-setting bodies including the CA/Browser Forum.

Corporate Structure and Ownership

The corporate structure reflects private ownership following acquisitions and investment rounds similar to transactions in the cybersecurity industry involving firms like Symantec and McAfee. Executive leadership has connections to industry veterans who previously worked at companies such as RSA Security, Cisco Systems, and IBM. Board members and investors have included individuals and firms active in mergers and acquisitions alongside advisors from Bain Capital-style private equity networks. Global operations maintain regional offices mirroring footprints established by multinational technology firms including Accenture and Capgemini.

Legal and Compliance Issues

Legal and compliance engagements involve interactions with regulatory frameworks such as the General Data Protection Regulation and sector-specific rules like the Health Insurance Portability and Accountability Act for healthcare clients. The company has navigated litigation and regulatory scrutiny common to providers of trust services, paralleling cases that have affected vendors like Symantec and prompting industry-wide reforms advocated by bodies such as the European Commission. Compliance activities include audit engagements with firms similar to Deloitte, PwC, and KPMG and certifications aligned with standards from ISO.

Market Presence and Clients

Market presence spans continents with deployments in North America, Europe, Asia-Pacific, and the Middle East. Major client categories include banking and payments institutions such as Bank of America and Visa, technology platforms including Salesforce and SAP, and public sector entities comparable to U.S. General Services Administration and national identity programs in countries like Estonia. Partnerships and reseller channels mirror alliances common between cybersecurity vendors and systems integrators such as DXC Technology and Capita.

Category:Cybersecurity companies