$1 Billion to Secure the Post-Quantum World

Cleveland-based digital trust infrastructure company Keyfactor has secured a $1 billion strategic growth investment from Summit Partners — one of the largest single investments in the cryptographic security space to date. The capital will fuel accelerated R&D, global expansion, and innovation across Keyfactor's growing platform at a moment when the convergence of artificial intelligence, regulatory pressure, and quantum computing is making digital trust infrastructure one of the most urgent priorities in enterprise cybersecurity.

CEO Jordan Rackie, a former Tricentis global revenue leader who took the helm in May 2019, was direct about the scale of what lies ahead. "The next three to four years are going to be the most transformational, disruptive years in the history of cybersecurity, and in the history of quantum computing," he said. That is the market Keyfactor is positioning itself to lead.

From Certificate Management to Full Trust Infrastructure

Founded in 2001, Keyfactor has evolved significantly from its roots in certificate lifecycle management. The company has systematically expanded its capabilities — adding certificate authority functions, and more recently, cryptographic posture management — to give enterprises a comprehensive platform to discover, issue, manage, and protect digital identities and cryptographic assets at scale.

The acquisition of InfoSec Global was central to this strategic expansion. Since the deal, Keyfactor has more than doubled revenue from that product line, grown the pipeline tenfold, and more than doubled its dedicated R&D team — all within twelve months. The result is a platform that Rackie describes as capable of turning the lights on across an enterprise's entire cryptographic estate, surfacing weaknesses and vulnerabilities that have gone undetected for years.

The core insight driving this expansion is straightforward but profound: for decades, cryptography was simply accepted as secure because the underlying algorithms had not changed materially. Quantum computing dismantles that assumption entirely. Legacy cryptographic algorithms that have remained stable for a generation will be vulnerable to quantum-capable adversaries — and the window to prepare is measured in years, not decades.

Why Visibility Without Remediation Is Not Enough

Rackie is emphatic that awareness alone cannot protect an enterprise in the post-quantum era. Organisations need two capabilities operating together: the ability to see every cryptographic asset and its relative strength across the entire enterprise, and the ability to remediate weaknesses without breaking the interconnected systems that depend on them.

"What customers are naturally going to want to do is be able to see everything, see their vulnerabilities, see their cryptography strength, see where to focus," Rackie said. But visibility without action is insufficient. The question that follows immediately is whether the platform can actually solve the problem — remediating cryptographic weaknesses safely, with full awareness of enterprise-wide interdependencies, and without creating new operational risks in the process.

This is precisely where Keyfactor's control plane is differentiated. By mapping interdependencies across the enterprise before remediation begins, the platform allows organisations to migrate toward post-quantum cryptography in a controlled, sequenced manner rather than a disruptive one.

Who Faces the Most Urgent Risk

Rackie identified government agencies, financial institutions, telecom providers, transportation firms, and critical infrastructure operators as the sectors facing the most acute pressure. These organisations sit squarely in the crosshairs of advanced threat actors, are subject to the most demanding regulatory requirements, and simply cannot afford cryptographic vulnerabilities as quantum computing moves from research into operational reality.

White House executive orders on quantum security, expanding AI-driven digital identity sprawl, and accelerating cryptographic refresh requirements are all adding urgency and specificity to what was, until recently, a somewhat abstract future concern. Regulation, in particular, is proving to be a powerful demand accelerant — turning what might otherwise have been a voluntary upgrade cycle into a compliance-driven imperative with hard deadlines.

The Signal This Investment Sends

Keyfactor's previous capital milestones — more than $200 million from Insight Partners in 2019 and 2021, a minority stake from Sixth Street Group at a $1.3 billion valuation in October 2023 — established it as a credible mid-market leader. The Summit Partners investment at this scale is something different. It is a signal to the enterprise market that Keyfactor has the capital, the platform depth, and the partner backing to be a long-term strategic partner through the post-quantum transition — not simply a vendor.

"As CISOs think about who the right partner is for them through this quantum transformational journey, this investment is the clearest of signals that Keyfactor can be that partner for the enterprise, not just today, but for the future," Rackie said.

For the broader cybersecurity market, the message is equally clear: the post-quantum cryptographic transition is no longer a future planning exercise. It is an active investment category — and the organisations that build their trust infrastructure now will be significantly better positioned than those that wait for the quantum threat to fully materialise before acting.