Versasec is a credential management software company for organisations that issue smart cards, USB tokens, virtual smart cards and FIDO2 security keys to their people. Its software handles the full life of these credentials, from issuing and personalising them to replacing and revoking them, so that phishing-resistant authentication can be rolled out and run at scale.
Its buyers range from small and medium businesses to global enterprises and government bodies.
At A Glance
| Vendor | Versasec |
|---|---|
| Category | Credential management for smart cards, tokens and FIDO2 keys |
| Identities covered | Human users holding physical and virtual credentials, and the PKI certificates on them |
| Deployment | On premises, private cloud, vSEC:CLOUD managed service, Azure and AWS Marketplace |
| Customers | Sandia National Laboratories, Brookshire Brothers, Poštanska Štedionica, Mobiliar, Cleveland Clinic Abu Dhabi |
| Market classification | Identity Verification |
What Versasec Does
Hardware credentials are only as strong as the process around them. Someone has to enrol each card or key, load the right certificates, reset forgotten PINs, replace lost devices and keep an audit trail for compliance. Versasec puts that whole lifecycle in one system, so the people who issue and support credentials work from a single record and policy, and every step is logged for auditors.
Phishing-resistant credentials also help organisations meet US Executive Order 14028, FIPS 201, NIST guidance, NIS2 and HSPD-12.
Products
VSEC:CMS
vSEC:CMS is the flagship product and the base for everything else. It works with minidriver-enabled credentials such as smart cards, USB tokens and virtual smart cards, as well as Windows Hello for Business. Employees can set up their own authentication devices through self-service without calling IT, help desk staff can act on a user’s behalf when needed, and audit trails and reports support compliance. Load balancing lets a deployment grow without a fixed upper limit.
VSEC:CLOUD
vSEC:CLOUD is for teams that want credential management without running the servers. It includes all core features of vSEC:CMS, including connections to third-party products and services. Versasec applies managed quarterly releases, provides premium support by chat, video call or phone, and keeps geo-redundant daily backups for 14 days and monthly backups for 12 months.
VSEC:CMS Identity
vSEC:CMS Identity is an add-on MFA authentication server for vSEC:CMS and vSEC:CLOUD, built for organisations that want their managed credentials to log users in to applications directly. It supports FIDO2 device-bound passkeys on devices managed by vSEC:CMS, as well as smart cards and security keys, and it speaks OpenID Connect to relying parties.
Migration From Legacy Systems
For organisations moving off older smart card and identity management platforms, Versasec offers documented migration paths into vSEC:CMS. Sandia National Laboratories used this route to replace a legacy PKI system.
How It Works
| Component | What it does |
|---|---|
| Self-managed | vSEC:CMS runs on the customer’s premises or in a private cloud, and it is also available from the Azure and AWS marketplaces. |
| vSEC:CLOUD hosting | Each customer gets a virtual private cloud with full separation from other tenants, in a region of their choice, linked to the corporate network by a site-to-site VPN. Versasec reports uptime of 99.5%, and credentials already issued keep working during any downtime. |
| vSEC:CMS Identity | The authentication server can run on premises, air-gapped or in a private cloud, alongside an existing vSEC:CMS deployment. |
Identities And Systems Covered
| Credentials | Smart cards, USB tokens, virtual smart cards, PIV cards, FIDO2 security keys and device-bound passkeys |
|---|---|
| Identities | Employees and other people who hold these credentials, and the PKI certificates written to them |
| Directories | Microsoft Active Directory, IBM, Microsoft and OpenLDAP directories |
| Identity providers | Microsoft Entra ID, Okta and Ping Identity |
Integrations
| Area | Integrations |
|---|---|
| Certificate authorities | Microsoft, Entrust, Keyfactor, DigiCert |
| Hardware security modules | Utimaco, Futurex, Thales |
| Credential vendors | Thales, Yubico |
Company Background
| Founded | 2007 |
|---|---|
| Headquarters | Stockholm, Sweden |
| Other offices | Austin, United States; Waterlooville, United Kingdom; Cairo, Egypt; Kuala Lumpur, Malaysia; and Merseburg, Germany, for research and development |
| Founders and leadership | Joakim Thorén, founder and CEO; Joerg Dettmann, founder and CTO; Paul Foley, founder and Chief Service Officer; Per-Anders Fjärdsäter, founder and CFO; Torvald Bohlin, Chair |
| Ownership | In 2023 founders, managers and board members increased their holdings and Blixx AB became a shareholder |
Note: This overview is compiled from Versasec’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.