Device Authority
Device Authority's KeyScaler platform automates identity, PKI, and lifecycle management for enterprise IoT and industrial device fleets.
Visit Website ↗ + Add to CompareOverview
Device Authority builds KeyScaler, an identity and access management platform purpose-built for machines and IoT devices rather than human users. The core problem it addresses is provisioning, authenticating, and managing cryptographic identity (via PKI) across large, heterogeneous fleets of connected devices at scale — automating certificate issuance, credential rotation, and secure firmware/code-signing workflows that are impractical to handle manually once a device fleet reaches enterprise scale.
Founded in 2016 and headquartered in Reading, UK, Device Authority has raised roughly $32 million in total funding, including Series A rounds backed by Ten Eleven Ventures and Prelude/Mercato Partners. KeyScaler is listed in the Microsoft Azure Marketplace and integrates with AWS, DigiCert, HID Global, Thales, and Venafi, among other ecosystem partners, and the company was named Microsoft’s Rising Azure Technology Partner of the Year in 2023.
The company has picked up consistent third-party analyst recognition over multiple years — a Gartner Cool Vendor designation in 2015-2016, SPARK Matrix leader rankings for IoT identity and access management from 2019 through 2022, and an ABI Research "Leader" designation in Device Identity Lifecycle Management in 2022 — giving it a longer analyst track record than many newer entrants in the machine-identity space, even as larger PKI/machine-identity platforms like Keyfactor and DigiCert continue to expand into the same territory.
Innovation Matrix Assessment
Consistent SPARK Matrix leader rankings from 2019 through 2022 and continued platform integrations (Azure Key Vault, Azure Sphere, Trusted Objects root-of-trust) show steady, sustained product development rather than a recent surge.
Marketplace listing on Microsoft Azure and named ecosystem integrations with AWS, DigiCert, HID Global, Thales, and Venafi indicate a working enterprise distribution model, though we could not find named end-customer deployments at scale.
Total disclosed funding of roughly $32M with no major round since 2021, and continued small employee count, suggest modest, steady-state momentum rather than rapid scaling.
Automating machine identity and PKI lifecycle specifically for IoT/OT fleets addresses a real operational gap, but the approach is now well established and Device Authority competes directly with larger, better-resourced machine-identity platforms.
Multiple independent analyst validations across several years (Gartner Cool Vendor, ABI Research Leader, SPARK Matrix Leader, Microsoft's own partner-of-the-year award) constitute real third-party evidence of platform effectiveness beyond vendor self-reporting.
Machine and IoT identity management is growing in urgency as device fleets scale and regulations like the EU Cyber Resilience Act push device manufacturers toward stronger built-in identity and update security.
Why CISOs Should Care
CISOs managing large IoT or OT device fleets get automated certificate issuance and credential rotation instead of manual PKI management, closing a gap that otherwise leaves devices running on expired or default credentials indefinitely.
What Makes It Different
Its specific focus on device-centric (rather than human-centric) identity lifecycle, paired with a multi-year run of independent analyst recognition, differentiates it from broader IAM vendors that have only recently bolted on IoT support.
The Matrix Verdict
62/100 — INCREMENTAL INNOVATOR
A durable, analyst-validated specialist in machine identity for IoT, with genuine third-party recognition offsetting its small size; it faces increasing competitive pressure from larger machine-identity platforms consolidating the space.
Editorial Note: Claims vs. Verified Findings
Independently verifiable: the Gartner Cool Vendor, ABI Research, SPARK Matrix, and Microsoft partner-of-the-year recognitions are documented by the respective third parties, not just self-reported. Vendor-sourced and unverified: specific product capability claims (e.g., exact scale of devices supported) come from company materials and were not independently benchmarked by us.
Sources
Alternatives to Device Authority
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Silverfort
Agentless unified identity protection platform that extends MFA, ITDR, and access policy to legacy and unmanaged systems traditional…