Topic starter
25/06/2026 5:26 pm
TL;DR: Enterprise demand for secure identity, certificate, and cryptographic trust across humans, machines, and AI systems is driving rising pressure around agentic AI and post-quantum readiness, while 210% three-year revenue growth and a sixth straight Deloitte Fast 500 appearance reflect the trend, according to Keyfactor. The signal for practitioners is that digital trust is moving from infrastructure hygiene to core identity governance.
Editorial analysis by NHI Mgmt Group, based on content published by Keyfactor: “Keyfactor Marks Sixth Consecutive Year on Deloitte’s Fast 500, Continuing as the Fastest-Growing Digital Trust Provider”.
By the numbers:
- Keyfactor reports 210% three-year growth.
- Keyfactor says it earned recognition on Deloitte’s Technology Fast 500 for the sixth consecutive year.
Key questions
Q: What breaks when AI agents are managed like ordinary machine identities?
A: What breaks is the assumption that access scope can be fully understood from provisioning data and quarterly review.
Q: Why does cryptographic identity matter for autonomous systems?
A: Because autonomous systems can make runtime decisions, security teams need more than a login event or application token.
Q: How should regulated enterprises govern certificate lifecycle across machine identities?
A: They should treat certificates for services, APIs, workloads, and devices as governed identity assets with defined owners, renewal rules, revocation procedures, and audit records.
Practitioner guidance
- Map AI agents into the identity inventory Create a distinct class for AI agents, then track their certificates, keys, owners, and permitted actions alongside other non-human identities.
- Bind certificate lifecycle to access governance Require renewal, rotation, and revocation events to flow through identity governance so certificates are not treated as unmanaged infrastructure artefacts.
- Define trust boundaries for autonomous systems Set rules for where cryptographic identity is sufficient, where step-up verification is needed, and where an agent should be blocked from acting.
Bottom line: Digital trust is becoming a core identity governance domain because AI agents and machine identities now need the same assurance discipline as human users.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 5 hours ago by NHI Mgmt Group
25/06/2026 6:06 pm
Cryptographic trust is now an identity governance issue, not a niche infrastructure concern: once AI agents and machines can act at production speed, certificate and key governance become part of the access model itself. The article reflects a broader market shift in which identity assurance is no longer limited to humans. Practitioners should treat digital trust as a core identity discipline, not a tooling add-on.
A few things that frame the scale:
- 69% of security leaders agree identity management must fundamentally shift to address agentic AI systems, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: How do zero trust controls need to change as AI agents become more common?
A: AI agents should be treated as non-human identities with request-level authorization, not as users with special privileges. Their access should be explicit, logged, and revocable, with policy boundaries that limit what they can do if their runtime behavior changes. Otherwise, autonomy turns into unmanaged reach.
👉 Read our full editorial: Keyfactor's AI agent identity push reflects rising trust demand
This post was modified 5 hours ago by NHI Mgmt Group