Thryam builds software that takes people out of routine infrastructure operations, starting with the machine identities that keep encrypted connections working. Its Asparz platform is for infrastructure and security teams that still track expiry dates in spreadsheets and rotate keys by hand.
The pressure behind the product is the move to much shorter certificate lifetimes, which makes manual renewal impractical, together with the work organisations must do to prepare for post-quantum cryptography (PQC).
At A Glance
| Vendor | Thryam |
|---|---|
| Category | Machine identity automation |
| Identities covered | TLS certificates, SSH keys, cryptographic assets |
| Deployment | Agentless; on-premises (virtual machine or container) or hybrid |
| Market classification | Workforce IAM; also Identity Security Posture Management, Cloud Security |
What Thryam Does
In April 2025 the CA/Browser Forum voted to shorten TLS certificate validity in phases, reaching 47 days by March 2029. At that cadence, every certificate in an estate has to be renewed several times a year, and a missed one means an outage. Asparz is a “no-touch machine identity automation platform” that lets certificates discover, renew and deploy themselves: teams set policy and keep oversight, while the platform carries out the work, logs it and keeps looking for certificates nobody knew about. The same approach then extends beyond certificates to the other cryptographic material an estate depends on.
Products
Asparz TLS Certificate Lifecycle
The certificate module is for teams that need every certificate renewed on time without a ticket for each one. It discovers known and unknown certificates without agents, raises expiry alerts, renews according to policy and deploys the new certificate to where it is used. It works with any public or private certificate authority, including internal PKI, and ties into IT service management and CMDB tools so changes follow existing processes.
Asparz SSH Key Management
SSH keys tend to multiply and outlive the people and systems they were created for. This module discovers and inventories keys and SSH certificate connections, flags those that are orphaned, stale or overshared, and tracks sprawl over time, with reporting and audit for access reviews.
Asparz Cryptographic Discovery
Cryptographic discovery is for organisations that need to know where cryptography is used before they can secure or replace it. It builds a “compliance-ready bill of materials” covering certificates across public and internal PKI, SSH keys and cryptography embedded in code and configuration, classifies each item for quantum readiness and reports on it.
How It Works
Asparz runs inside the customer’s environment. It can be installed on the customer’s own infrastructure as a virtual machine or as containers, in which case the data never leaves that environment, or deployed across cloud and on-premises footprints in a hybrid model with control over where data resides.
| Component | What it does |
|---|---|
| Agentless analysis | No software is installed on endpoints, yet Asparz analyses each endpoint directly rather than relying only on network scanning. |
| Audit trail | Every action the platform takes is logged and traceable, and the cryptographic inventory can be exported in industry-standard formats. |
| Implementation | A typical rollout takes a reported 4 to 6 weeks, covering discovery, configuration, testing and cutover, and can include migration from an existing certificate management tool. |
| Connectors | Plug-and-play enterprise connectors link Asparz to IT service management, CMDB and observability platforms without custom development. |
Identities And Systems Covered
| TLS certificates | Public and private CA certificates, including internal PKI |
|---|---|
| SSH keys | Keys and SSH certificate connections |
| Cryptographic assets | Cryptography in code and configuration, classified for quantum readiness |
| Environments | Endpoints in cloud and on-premises, Kubernetes and load balancers |
Company Background
| Founders | Sunil Nandamuri, Nitish Nirala and Sreenivasa Pidugu, who have worked together for 15 years in TLS, security and infrastructure. |
|---|---|
| Leadership | Sunil Nandamuri (co-founder and CEO). |
| Research | An AI project called The Horizon, aimed at enterprise security blind spots. |
Note: This overview is compiled from Thryam’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.