Side by side
EZCA vs XiPKI
Both stand on public key infrastructure software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free trial AndroidAPIiPhone+5
Choose EZCA if you need cloud CA management with protocol support, Microsoft integrations, and options for connecting an existing CA. Compare the per-CA and per-location plan costs against your deployment needs; there is no free plan.
Visit EZCA Free plan APILinuxMac+1
XiPKI covers CA, registration and OCSP functions, with protocol, database and HSM options. Its listed runtime requirements and operating systems are important considerations before deployment.
Visit XiPKIThe facts
| EZCA | XiPKI | |
|---|---|---|
| Free plan | A free trial | Yes |
| Open source | Not published | Not published |
| Runs on | Android, API, iPhone, Linux, Mac, Self-hosted, Web, Windows | API, Linux, Mac, Self-hosted |
| Lowest paid plan | Basic: $200 a month | Free or on request |
| Plans published | 4 | 1 |
| Maker | Not published | Not published |
| Website | keytos.io | github.com |
| On public key infrastructure software | #13 of 26 | #9 of 26 |
EZCA: what it does well
- Issues certificates through ACME, EST, and SCEP.
- Integrates with Azure, Entra ID, Intune, and Azure Key Vault.
- Supports device certificates through Intune and Jamf.
- Logs CA changes, requests, and approvals for SIEM export.
- Supports revocation checks through CRLs and OCSP.
What to know first
- No free plan is listed.
- Basic and Premium are priced per CA per month.
- Private Infrastructure and Self-Hosted Licensing are priced per location per month.
XiPKI: what it does well
- Supports EST, SCEP, CMP and ACME protocols.
- Manages multiple CAs in one instance.
- PKCS#11 HSM integration covers a range of listed devices.
- Free and licensed under Apache License 2.0.
What to know first
- Requires Java 11 or later.
- Requires Tomcat 10 or 11.
- Supported operating systems are Linux and macOS.