Best Encryption & Key Management Tools

Cloud-Native SaaS platform built to secure and manage every identity through a single pane of glass.

AppViewX is an automated Certificate Lifecycle Management (CLM) and Public Key Infrastructure (PKI) platform designed to prevent service outages caused by expired certificates.

Apricorn offers an extensive line of keypad-authenticated, 256-bit XTS hardware-encrypted USB external storage devices that protect your data at the highest levels.

Atsign is a cryptographic identity and secure communications platform built around the atProtocol, with keys generated at the edge and encrypted data exchanged only between authorized Atsigns.

AWS Key Management Service (AWS KMS) is AWS’s managed encryption key service for creating, storing, and controlling cryptographic keys used to protect data in AWS workloads and applications.

Cavero: community-submitted tool.

CertiNext is eMudhra’s managed PKI and KMS platform for certificate lifecycle management and cryptographic key control.

VaultDB is a proprietary encrypted Rust database engine you link into your own process (no network, no hosted service). AES-256-GCM per record, node-scoped ACL, hash-chained audit, and blind search. Version 1.3.1.

Confidencial is a data-centric security platform focused on protecting unstructured information such as documents and emails across multi-cloud and internal environments.

Atomic-Level Encryption for the modern enterprise. Your data, protected at every layer.

Trust built for the AI age

enQase provides a quantum-safe security platform designed to transition organizations from classical to post-quantum cryptography (PQC).

Identity-Centric Security Protecting People, Devices, and Data in the AI Era

Building Digital Trust, and More

Fortaegis Technologies appears to be a deep-tech semiconductor vendor rather than a conventional software key-management provider, with its security model built into silicon.

Fortanix is a data-first security company and a pioneer in Confidential Computing.

For over 40 years, Futurex has been a trusted provider of hardened, enterprise-class data security solutions.

HashiCorp Vault is a secrets and cryptographic key management system used to store, distribute, rotate, and control access to encryption keys, certificates, tokens, and other sensitive material.

ID Quantique (IDQ) provides quantum-safe security solutions centered on Quantum Key Distribution (QKD) and Quantum Random Number Generators (QRNG).

Together, we provide innovative platforms designed to reduce the complexity and risks of managing and protecting more applications, data, and identities than any other company can.

IronKey by Kingston is Kingston Digital’s line of encrypted USB flash drives for protecting data at rest through hardware-based encryption and device-side key handling.

iStorage | Kanguru is a global leader in government-validated, PIN-authenticated, hardware-encrypted data storage and cloud encryption solutions, delivering cutting-edge data security solutions to governments and corporations

Mirror Security provides a privacy-preserving AI inference platform utilizing Fully Homomorphic Encryption (FHE) to secure Large Language Model (LLM) operations.

Msafe provides encrypted file transfer and document exchange for organisations sharing sensitive files with external parties, hosted in ISO 27001 certified data centres in the Netherlands.

Netskope provides Netskope One Data Loss Prevention (DLP), a cloud-delivered solution integrated into its Security Service Edge (SSE) platform for zero trust data protection.

Polymonial is infrastructure that lets organisations integrate, process and share data across systems while keeping the underlying information private. It provides products for proving, computing, combining and disclosing over data without moving or decrypting it. The product family covers data sharing, compliance proofs, confidential AI, cryptographic migration and sealing of proprietary code.

PQShield provides post-quantum cryptography (PQC) solutions designed to secure hardware and software against future quantum computing threats.

We started PreVeil to bring radically better security to ordinary business and personal communication and information storage.

Protegrity provides encryption and key management for protecting sensitive data across databases, cloud services, and SaaS environments.

ProvenHSM combines hardware-rooted security, cloud-scale operations, programmable trust, and post-quantum readiness to secure the most critical digital infrastructures.

Replace every algorithmically generated random number in critical infrastructure with quantum-sourced entropy that is provably, physically, and absolutely unpredictable.

QIZ Security provides a cryptography management platform that helps organizations discover, prioritize and remediate cryptographic risk while preparing for the transition to post-quantum cryptography.

QSafe Technologies Ltd's homepage describes quantum-safe encryption for modern data security. The page text available for this record did not describe specific features, delivery model or customers.

In a world where data is too important to be compromised, QuintessenceLabs delivers powerful data protection, enhanced by the quantum power of nature.

SafeLogic's proven and validated cryptographic software solutions enable enduring privacy and trust in the ever-changing digital world.

Founded in 2014 and headquartered in Zurich, Switzerland, Securosys is a leading technology company committed to securing digital assets, identities, and communications.

Smallstep provides a Device Identity Platform that enables high-assurance Zero Trust security through automated, short-lived PKI certificates and device-bound authentication.

SpaceComputer provides secure compute and cryptographic services that run in orbit, delivered through its Space Fabric hardware and software architecture. Its security services include key management (KMS), post-quantum cryptography and randomness (cTRNG), and are accessed through API plugins that integrate with existing enterprise systems. The page says enterprise, cybersecurity, defense, AI and space operators can build on the platform.

SpamTitan by TitanHQ is a cloud-based or on-premises email security gateway that filters inbound and outbound emails, blocking spam, phishing, malware, ransomware, and APTs with a 99.99% spam catch rate and 0.003% false positive

Stormshield Network Security (SNS) is the company’s firewall and NGFW line, aimed at organizations that want perimeter and segmentation controls with integrated inspection, IPS, VPN, and application control.

Swissbit is a leading provider of storage and security solutions for industrial and IoT applications.

Tessian was a human-layer email security vendor that used machine learning to stop data loss, BEC, phishing, and accidental disclosure in email workflows.

Thales SafeNet is an enterprise MFA and access management platform combining authentication, SSO, and policy enforcement across on-premises, cloud, and virtual environments.

Ubiq Security is an identity-driven encryption and key management platform focused on client-side protection of sensitive data before it reaches storage or downstream services.

Utimaco provides high-performance cryptographic hardware and software solutions, including Hardware Security Modules (HSMs) and Key Management Systems (KMS).

Powered by the Trusted Data Format, Virtru's Data Security Platform, and the products built on top of it, make it easy to share information without sacrificing security, privacy, and control.

Vormetric, now part of Thales, is a data-at-rest encryption and key management product centered on the Data Security Manager (DSM) for centralized policy and key administration.

wolfSSL is an embedded cryptography vendor best known for its wolfCrypt engine, wolfSSL TLS library, and wolfHSM key-management framework.

Yubico sells hardware security keys for multi-factor authentication and passwordless sign-in.

zerothird specializes in quantum-safe security through Quantum Key Distribution (QKD) and science-backed cryptographic solutions.