Custody boundaries
Keep sensitive key material and operations closer to the customer environment.
Customer-side PKI execution
Keep sensitive key operations closer to your infrastructure.
A SecuriTLS satellite is a customer-side component for key generation, signing, deployment, validation, and other custody-sensitive workflows.
The platform coordinates jobs and records results while sensitive operations can remain closer to the environment that owns the keys and services.
LocalKey operations
OutboundConnectivity
CentralVisibility
Why satellites exist
Central management does not have to mean central key custody.
Some organizations want the visibility and workflow benefits of a SaaS platform while keeping private-key operations inside infrastructure they control.
Restricted networks
Use an outbound connection model for environments that should not expose inbound management services.
Operational consistency
Coordinate local execution through the same certificate, deployment, validation, and audit workflows.
Satellite workflows
Run sensitive operations locally while keeping the platform informed.
Local key generation
Generate private keys in the satellite environment and return certificate requests or encrypted results.
CSR signing workflows
Coordinate signing through the satellite that holds or can access the relevant CA key material.
Credential protection
Encrypt deployment credentials for use by the intended satellite.
Certificate deployment
Write certificate, key, and CA materials to configured paths and run service reload commands.
Explore deployment automation →File validation
Inspect deployed certificate and key files in the customer environment.
TLS validation
Test live endpoints from the environment that can reach the target service.
Explore validation →Control plane and execution plane
Separate central coordination from local execution.
SecuriTLS platform
Stores workflow state, certificate records, job status, deployment intent, and audit history.
Customer satellite
Performs authorized local operations using customer-controlled access and encrypted material.
Target infrastructure
Receives certificate deployments and is validated from the appropriate network location.
Get started
Bring your certificate workflows into one place.
Start with a private CA and a few certificates, then expand into automation, deployment validation, audit history, and satellite workflows.