Machine identity management just became the security category investors are willing to write a ten-figure check for. Keyfactor announced on July 6 that it closed a strategic growth investment of more than $1 billion led by Summit Partners, with existing backers Insight Partners and Sixth Street Growth retaining significant stakes, to expand its platform for issuing and managing certificates and cryptographic trust at enterprise scale.
Keyfactor’s pitch is that every AI agent, workload, container and API connection now needs its own verifiable identity, and that volume is outpacing what most enterprises’ certificate infrastructure was built to handle. The company says it issues and manages billions of machine identities annually for more than 2,500 customers. The capital is earmarked for product development, geographic expansion and acquisitions rather than a single headline product.
The timing lines up with a policy push, not just a market one. Keyfactor points to the White House’s June 2026 executive actions accelerating the federal transition to post-quantum cryptography ahead of a 2030 target, putting a compliance clock on top of the existing case for enterprises to modernize certificate lifecycle management now.
The original insight for security leaders is that this signals machine identity and PKI infrastructure are consolidating from a background hygiene task into board-level budget territory, on par with how zero trust access platforms scaled over the past several years. CyberTech has covered that adjacent shift in identity-centric security investment before, including Zscaler’s extension of zero trust controls to autonomous AI agents. Together, the two moves point to the same underlying pressure: AI-driven machine-to-machine traffic is forcing identity and access vendors, not just perimeter vendors, to rebuild for a world where the majority of “users” on a network are non-human.
For CISOs evaluating budget for 2027, the practical takeaway is to treat certificate lifecycle automation and post-quantum readiness as a near-term line item rather than a future-state initiative, particularly for organizations in regulated sectors that will face the same federal transition timeline indirectly through vendor and contractor requirements.
Source: Keyfactor
