LAAVAT PKI and Signing Platform

Web · Self-hosted · API

Freedom report

One barScore 5.0

Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

LAAVAT PKI and Signing Platform is ranked #26 of 27 in code signing software on Freedom251. It runs on API, Self-hosted, Web. A free trial is offered.

LAAVAT PKI and Signing Platform plans and pricing

All plans

Custom quote Pricing on request · 14-day evaluation · no free plan itechguides.com · 1 Oct 2026

Compared on code signing software

Free plan: No
Supported targets: NXP HAB/AHAB, AMD/Xilinx Bootgen, TI, MCUboot, FIT, RAUC, SWUpdate, Mender, OP-TEE, OCI/Cosign, Windows, Java, JWT, detached signatures
Certificate provided: Yes
Cloud signing: Yes
HSM key protection: Yes
Trusted timestamping: Yes
CI/CD signing: Yes
Approval workflows: Yes

Best LAAVAT PKI and Signing Platform alternatives

See all 20

Two bars AWS Signer Free tier No. 1Free6.6 Two bars Cosign Free tier No. 2Free6.6 Two bars OpenPubkey Free tier No. 3Free6.6 Two bars SignPath Free tier No. 4Free6.6 Two bars SignServer Free tier No. 5Free6.6 Two bars Notation Free tier No. 6Free6.5

The record

Product purpose: LAAVAT is a cloud PKI and code-signing platform for embedded and IoT device manufacturers.
Managed service: It runs customers’ PKI, signs firmware and issues device identities as a managed service.
PKI capabilities: The platform provides CA hierarchies, certificate lifecycle management, EST and REST enrollment, and CRL lifecycle functions.
Signing formats: Supported signing targets include NXP HAB/AHAB, AMD/Xilinx Bootgen, TI, MCUboot, FIT, RAUC, SWUpdate, Mender, OP-TEE, OCI/Cosign, Windows, Java, JWT and detached signatures.
Encryption: It supports AES-GCM-256 image encryption, manufacturing key delivery, key escrow and key export.
Device security: LAAVAT provides secure boot, signed firmware updates and tamper-resistant per-device certificates for mutual TLS, attestation and factory onboarding.
Integrations: Integrations include REST, EST, Microsoft Entra ID, Google SSO, Yocto, CI/CD clients and provisioning-station clients.
Key protection: Signing keys are generated inside AWS CloudHSM and never exist in plaintext outside the HSM.
Governance: The platform offers RBAC, group-based signing policies, quorum approvals and immutable exportable audit trails.
Deployment models: Customers can use a shared HSM, a dedicated LAAVAT-managed HSM, a customer-managed HSM in their AWS account, or on-premises deployment.
Compliance: LAAVAT’s information security management system is certified to ISO/IEC 27001:2022, certificate 244147.
Support: The documentation directs users to contact [email protected] for unanswered questions.
Target users: The platform is aimed at engineering, security, product and manufacturing teams building connected devices and managing firmware signing across pipelines and production lines.
CRA scope limit: LAAVAT states that using the platform alone does not make a product CRA compliant because compliance also covers the whole product and process.

Where it ranks on Freedom251

Best Code Signing Software in 2026#26 of 27

Is LAAVAT PKI and Signing Platform yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote LAAVAT PKI and Signing Platform

Sources

docs.laavat.io/faq/· checked 1 Oct 2026
laavat.io· checked 1 Oct 2026
laavat.io/platform· checked 1 Oct 2026
docs.laavat.io/security/· checked 1 Oct 2026
itechguides.com/products/laavat-pki-and-signing-platfor· checked 1 Oct 2026