Entrust today announced new capabilities for its Cryptographic Security Platform (CSP) that help organizations turn Cryptographic Bill of Materials (CBOMs) data into action. Newest capabilities help security teams build complete cryptographic inventories, understand dependencies, and act on risk as they prepare for crypto-agility.
Government agencies, financial institutions, healthcare organizations, and other critical infrastructure operators are navigating increased cyber threats, shorter certificate lifecycles, rapid growth of machine and AI identities, evolving compliance requirements, and transition to post-quantum cryptography. Managing changes depends on comprehensive view of where cryptography resides and how assets and systems depend on it. Growing focus on cryptographic inventory and post-quantum readiness from industry groups, standards bodies, and regulators including recent U.S. Executive Order and EU's DORA and NIS2 regulations requiring CBOMs-based inventories reinforces need.
Organizations can now connect cryptographic discovery and inventory with governance, automation and post-quantum migration planning, helping identify and address risks across complex environments. With new CBOM import and export capabilities, Cryptographic Security Platform helps build more complete cryptographic inventories, understand dependencies, and translate visibility into operational action. For example, organizations can identify cryptographic assets that may be vulnerable or noncompliant, determine which systems and applications depend on them, assess associated risk, and prioritize remediation.
"A CBOM is more than a static inventory," said Michael Klieman, Global Vice President of Product Management at Entrust. "Security teams need to connect CBOM data with the systems and applications that depend on cryptography, understand where risk is concentrated and determine what actions to take next."
Strengthen governance and reduce cryptographic risk: new CBOM import and export combined with discovery, compliance, operational health help build complete inventories, correlate data with discovered assets and dependencies, and strengthen governance across keys, certificates, secrets.
Scale certificate operations with new Ansible-based capabilities extending certificate lifecycle automation, enabling teams to automate deployment and management across highly customized environments at scale.
Prepare for post-quantum and emerging identity requirements with expanded support for composite algorithms helping phased migration strategies while new SPIRE-based capabilities support trusted identities for AI agents and other non-human workloads.
"Knowing where cryptography lives isn't enough anymore. The number of certificates and other cryptographic material is growing rapidly. Machine and AI identities are multiplying, and deadline to transition to post-quantum algorithms is closing in," said Jennifer Glenn, Research Director for Information and Data Security, IDC.
About Entrust
Entrust fights fraud and cyber threats with identity-centric security that protects people, devices, and data. Comprehensive solutions help organizations secure every step of identity lifecycle. Supports customers in over 150 countries.
