Keyfactor just printed a rare private-company ARR milestone. Machine identity is no longer a niche line item.
On September 9 Keyfactor announced it exceeded $200 million in annual recurring revenue in the beginning of Q3 2026. CEO Jordan Rackie’s trajectory, from the PR Newswire release: in 2019 Keyfactor was a sub-$10 million ARR business; it took roughly five years to grow more than tenfold past $100 million, then about two years to double again to $200 million — “adding that next $100 million at a much greater scale, and in less than half the time.” The company also says it has sustained ARR growth of more than 35% year over year even at this scale, and that it is operating profitably while reinvesting. Those are company statements. The release did not print a valuation or a margin bridge.
Scale claims worth citing carefully: Keyfactor issues and manages hundreds of billions of machine identities globally each year for more than 1,000 customers; supports 50% of the largest banks in the U.S. and Europe, 80% of leading U.S. retailers, and more than 40% of the Fortune 100. Product adoption metrics in the same release: active certificates from Keyfactor-managed PKI up more than 200% since 2025; certificates via EJBCA SaaS up 168% since early 2025; certificates automated through Keyfactor Command up 207% since 2024. Inc. 5000 for seven consecutive years as fastest-growing in Trust Infrastructure, per the company. FedRAMP certification status earlier this year for cloud certificate lifecycle automation.
Balance-sheet and M&A context — sourced, not guessed: the release points to a recent $1 billion-plus investment announcement from Summit Partners and an intent to acquire Cofide to extend the Trust Control Plane to workloads and AI agents (Cofide intent dated July 27, 2026; price Undisclosed). Policy backdrop cited by Keyfactor: White House June 2026 executive orders pushing accelerated post-quantum cryptography transition ahead of 2030. The Trust Control Plane pitch is unified machine identity + cryptographic asset visibility + lifecycle automation — not a pile of point PKI tools. That is the category claim.
POV: $200M ARR at >35% growth with profitability claimed is a serious private underwrite in identity infrastructure. It sits next to the agent-identity Series A tape (Cymphony) and the NHI mega-stitches (Cyera/Oasis) as proof the industry is re-pricing non-human trust. Keyfactor’s post-money does not follow from the Summit “$1 billion-plus investment” headline: investment size ≠ equity valuation unless the filing says so. Underwrite ARR, growth, customer concentration anecdotes, and the Cofide intent as the AI-agent extension. Question whether PQC deadlines pull budget forward or just inflate the slideware. Sources: PR Newswire Sep 9 and the July Cofide intent release.
Underwrite sheet — sourced only: >$200M ARR early Q3 2026; sub-$10M ARR in 2019 → >$100M in ~5 years → $200M in ~2 more; >35% YoY ARR growth; profitable (company); >1,000 customers; hundreds of billions of machine identities/year; 50% largest U.S./Europe banks; 80% leading U.S. retailers; >40% Fortune 100; PKI certs +200% since 2025; EJBCA SaaS +168% since early 2025; Keyfactor Command +207% since 2024; Summit Partners $1B+ investment announcement; Cofide intent (price Undisclosed); WH PQC ahead of 2030 (Keyfactor PR Newswire Sep 9, 2026; Cofide intent Jul 27, 2026). Machine identity crossed the $200M ARR line. Valuation still Undisclosed. Underwrite the print.