PKI Trust Manager fully automates issuance, renewal, and monitoring for the entire certificate lifecycle. Give visibility into expiring certificates, discover vulnerabilities across your enterprise, and let the platform run itself - no manual renewal queues, no expiry outages.

Highlights

Automated issuance, renewal, and monitoring for every certificate
Expiring-certificate visibility with proactive alerting
Vulnerability discovery across your enterprise
Action plans to close gaps and harden your PKI
Single pane of glass across your entire estate

Discovery

See the unseen across your infrastructure

Continuous discovery maps endpoints, services, and certificate stores across cloud and on-prem - with Boltron-AI turning every discovered workload into a living application inventory. What used to take weeks of consultant time now happens automatically.

Highlights

AI-driven discovery of endpoints, services, and certificate stores
Complete application inventory - your single source of truth
Asset and configuration identification, continuously
No spreadsheets, no manual audits, no blind spots

Enrolment

ACME, SCEP & EST - every enrolment path automated

A built-in RFC 8555 ACME server with External Account Binding works with certbot, acme.sh, and win-acme out of the box. SCEP covers network devices and MDM, EST covers TLS and basic-auth enrolment, and REST APIs open every custom integration.

Highlights

RFC 8555 ACME server with EAB - acme.sh, certbot, win-acme ready
SCEP enrolment for network devices and MDM
EST with TLS and basic-auth client authentication
REST APIs and SDKs for custom integrations
RSA 2048 and ECDSA support matched to your CA templates

Boltron-AI

The world's first AI-based automation for PKI

Boltron-AI discovers your infrastructure, inventories every application and service, and profiles their certificate configurations - certbot, acme.sh, sscep, IIS, Apache, Tomcat, and more. For each one it generates a step-by-step onboarding runbook into PKI Trust Manager.

Highlights

Deep configuration intelligence for every major platform
Automated runbook generation - no guesswork
AI-driven onboarding into PKI Trust Manager
From discovery to fully automated certificate lifecycle

Notification

Expiry alerts that reach you first

Certificate notification monitors every certificate you manage and alerts your team before expiry - with configurable lead times, per-team routing, webhooks, and SIEM integration. Outages caused by expired certificates disappear.

Highlights

Proactive expiry alerting with configurable lead times
Email, webhook, and SIEM integration
Per-team and per-owner notification routing
Full audit trail of every alert

Compliance

Governed, auditable PKI

Support for Active Directory Certificate Services (ADCS, MSCA), Let's Encrypt, DigiCert, ACME, and more - unified in one console. Every action is audited, every policy is enforced, and reporting is effortless for compliance.

Highlights

ADCS, MSCA, Let's Encrypt, DigiCert, and ACME support
Unified console for on-prem and cloud certificate estates
Full audit trails for every action
Effortless compliance reporting