Entrust Inc. - Experts & Thought Leaders

Entrust, a pioneer in identity-centric security solutions, announces its partnership with The Cyber Helpline, an award-winning nonprofit organization providing free, expert support to victims of cybercrime, digital fraud, and online harm. Entrust will support The Cyber Helpline's mission to help people understand, contain, and recover from cyber incidents by funding more than 3,200 hours of specialist support, which will provide assistance for approximately 1,000 individuals across the US and UK. Knowledge-sharing initiatives Entrust will also connect its identity and cybersecurity experts with The Cyber Helpline specialists through volunteer opportunities, including mentoring and knowledge-sharing initiatives, helping to expand the organization’s services for cybercrime victims. Fighting fraud and cybercrime is central to Entrust’s mission, and the company believes that when people are impacted, they should have access to the expert support they need to recover. Bad actors continue to target individuals through online fraud, scams, identity theft, and other forms of cybercrime. Each year, one in seven adults and one in five young people are affected by cybercrime, yet 98% of those who report cybercrime receive no meaningful support or route to justice, according to The Cyber Helpline. Building digital trust “The Cyber Helpline was created because people experiencing cybercrime, fraud, and online harm need more than information or signposting. They need practical help from people who understand both the technology and the human impact of what has happened,” said Rory Innes, CEO and Founder of The Cyber Helpline. “Entrust understands better than most the importance of protecting identities and building digital trust, which makes them a natural partner. Their support will help us put specialist cybersecurity expertise directly into the hands of more victims, helping people understand what has happened, take action, and regain control.” Trained cybersecurity volunteers “Behind every cybercrime statistic is a person whose life has been disrupted,” said Tony Ball, CEO at Entrust. “We’re proud to partner with The Cyber Helpline to help more people get the expert support they need to recover and move forward with confidence.” The Cyber Helpline is a charity providing free, expert support to individuals affected by cybercrime, digital fraud and online harm, including hacked accounts, scams, cyberstalking, harassment, and other online threats. Combining technology with a community of trained cybersecurity volunteers and specialist staff, The Cyber Helpline provides 24/7 self-help alongside confidential one-to-one support from cybersecurity experts. The service helps people understand what has happened, contain the problem, protect themselves from further harm, and stay safe online. Since 2018, more than two million people have accessed its guidance, with more than 100,000 people receiving direct support.

Entrust announces new capabilities for its Cryptographic Security Platform (CSP) that help organizations turn Cryptographic Bill of Materials (CBOMs) data into action. Government agencies, financial institutions, healthcare organizations, and other critical infrastructure operators are navigating increased cyber threats, shorter certificate lifecycles, the rapid growth of machine and AI identities, evolving compliance requirements, and the transition to post-quantum cryptography. Evolving compliance requirements Managing these changes depends on a comprehensive view of where cryptography resides and how assets and systems depend on it. Growing focus on cryptographic inventory and post-quantum readiness from industry groups, standards bodies, and regulators around the world, including the recent U.S. Executive Order and the EU’s DORA and NIS2 regulations requiring CBOMs-based inventories, reinforces the need for organizations to understand their cryptographic assets, dependencies and risk exposure. Organizations can now connect cryptographic discovery and inventory with governance, automation and post-quantum migration planning, helping them identify and address risks across complex environments. With new CBOM import and export capabilities, the Cryptographic Security Platform helps organizations build more complete cryptographic inventories, understand dependencies, and translate cryptographic visibility into operational action. On-premises deployment options For example, organizations can identify cryptographic assets that may be vulnerable or noncompliant, determine which systems and applications depend on them, assess the associated risk, and prioritise remediation efforts. Additionally, the platform can now be deployed as-a-service or on-premises, giving organizations a faster and more flexible way to access the new CBOM capabilities while retaining on-premises deployment options. “A CBOM is more than a static inventory,” said Michael Klieman, Global Vice President of Product Management at Entrust. “Security teams need to connect CBOM data with the systems and applications that depend on cryptography, understand where risk is concentrated and determine what actions to take next. The addition of CBOM support to the platform helps organizations move from documenting cryptographic assets to actively governing and securing them.” Reducing cryptographic risk Once organizations establish visibility into cryptographic assets and dependencies, they must translate that insight into governance, operational resilience, and readiness for future cryptographic change. CSP helps connect discovery with action across each of these areas: Strengthen governance and reduce cryptographic risk: Organizations cannot manage cryptographic risk without understanding where cryptography exists and how assets, systems and applications depend on it. New CBOM import and export capabilities, combined with cryptographic discovery, compliance, and operational health capabilities, help organizations build more complete inventories, correlate inventory data with discovered assets and dependencies, and strengthen governance across keys, certificates, and secrets across the enterprise. Scale certificate operations across complex environments with new Ansible-based capabilities: As certificate volumes grow across public and private PKI environments, organizations need automation that can keep pace with increasingly complex infrastructure. New Ansible-based capabilities extend certificate lifecycle automation, enabling teams to automate certificate deployment and management across highly customized environments at scale, reduce manual effort, and help minimize service disruptions. Prepare for post-quantum and emerging identity requirements with expanded support for composite algorithms and SPIRE-based capabilities: Preparing for post-quantum cryptography starts with understanding where cryptography exists and which systems depend on it. Expanded support for composite algorithms helps organizations pursue phased post-quantum migration strategies while new SPIRE-based capabilities support trusted identities for AI agents and other non-human workloads. CSP is now available as a service or for on-premises deployment, giving organizations greater flexibility to meet operational, security, and data sovereignty requirements. Data sovereignty requirements By connecting cryptographic inventory, governance, automation, and post-quantum readiness in a unified platform, Entrust helps organizations turn cryptographic visibility into action and build the operational foundation for long-term crypto-agility. "Knowing where cryptography lives isn't enough anymore. The number of certificates and other cryptographic material is growing rapidly. Machine and AI identities are multiplying, and the deadline to transition to post-quantum algorithms is closing in. Security teams cannot treat cryptographic inventory as a static exercise. Organizations that connect cryptographic inventory, governance, automation, and post-quantum readiness will be better positioned to manage crypto-agility as standards evolve," said Jennifer Glenn, Research Director for Information and Data Security, IDC.

Entrust, a global pioneer in identity-centric security solutions, announces the Agentic AI Trust Accelerator, a co-development program that will bring together enterprises and integration partners to build the identity and trust infrastructure needed to move autonomous AI projects from pilot to production. Enterprises want to deploy AI agents to do real work, but they lack the trust infrastructure needed to govern autonomous actions across systems, partners, and business processes. Organizations need to know who authorized an agent, what it is allowed to do, and how its actions can be proven after the fact. Strong AI agent governance The need is urgent: 77% of CIOs and CISOs say AI adoption is already outpacing governance capabilities, and 59% cite security and compliance as top barriers to deployment, according to an IBM study. Deloitte has also emphasized that the shift to “human on the loop” is a form of automation that requires strong AI agent governance and oversight. This underscores the broader enterprise need for stronger governance, accountability, and trust controls. “AI agents are advancing faster than the trust infrastructure needed to govern them,” said Anudeep Parhar, Entrust COO for digital infrastructure who is leading the Accelerator. Developing practical approaches “Enterprises need to be able to trust autonomous actions across business processes, partners, and systems. Whether organizations are experimenting with AI agents, deploying initial use cases, or preparing for broader adoption, they need a trust foundation that can scale with them. The Agentic AI Trust Accelerator brings together customers and partners to develop practical approaches for identity, authorization, cryptographic trust, and accountability that work with their existing platforms. We call this the trust plane for autonomous AI.” The Accelerator Program builds on the company’s deep expertise in identity and cryptographic security to help enterprises take on the challenge of AI agents operating with trust in real-world workflows. Entrust capabilities in identity verification, cryptographic identity, and lifecycle management for keys, certificates, and secrets are fundamental to extending trust and governance for autonomous agents acting across applications, systems, and organizational boundaries. Cryptographically verifiable identity Enterprises need cryptographically verifiable identity and proof of action that can travel across systems, partners, and workflows to complement platform- or policy-driven controls – particularly in regulated sectors. The Entrust Agentic AI Trust Accelerator will help enterprises close that gap with reference architectures, customer-validated use cases, and practical controls for identity, authorization, and accountability. “As agentic AI becomes embedded in enterprise operations, governance is evolving from a point-in-time exercise to a continuous discipline. While AI agents increasingly perform tasks traditionally associated with human workers, their autonomy introduces new challenges for oversight, accountability, and risk management. Organizations therefore need more than static controls; they need continuous verification throughout the agent lifecycle. The goal is not simply to control AI agents, but to operate with confidence that they are appropriately authorized, governed, and acting within established business, security, and regulatory boundaries," said Emanuel Figueroa, Senior Research Analyst, Identity Security, Worldwide, IDC. Compliance-driven environments Initial work with the Accelerator program will focus on four areas of importance to workflows in regulated and compliance-driven environments: Identity – verifiable human and agent identity, so that every agent action can be traced back to a confirmed human principal and unique agent Authorization – real-time authorization, so agents act only within approved policies, roles, and delegated authority, with a "human in the loop" for critical decisions Cryptographic Trust – cryptographic assurance for agent operations, protecting the keys, certificates, and secrets, and signing capabilities agents use to authenticate and transact securely Accountability – proof of action, a cryptographically verifiable record for regulators, customers, and internal risk teams Agentic AI architectures “Agentic AI will reshape how enterprises operate, but trust will determine how quickly organizations can move from experimentation to production,” said Tony Ball, CEO of Entrust. “Entrust is helping customers build the identity, authorization, and cryptographic foundations required for autonomous systems operating in real-world environments.” Entrust is opening the Accelerator to a limited number of select enterprise customers, financial institutions, cloud and SaaS providers, systems integrators, and other technology partners interested in co-developing trusted agentic AI architectures.

In the simplest terms, technology modernization accelerates when older systems become too expensive to maintain or fail to support modern standards. Market competition pushes businesses to update their technologies to meet rising customer demands. Additionally, the rapid shift toward cloud-based infrastructures and artificial intelligence creates a fear of missing out, forcing companies to adapt or risk irrelevance. Focusing on the physical security market, we asked our Expert Panel Roundtable: What factors are accelerating technology modernisation in security?

Traditional security models protected a perimeter like a castle moat, assuming anyone inside was safe. Zero trust removes that implicit trust entirely, recognizing that threats can exist both outside and inside a facility. Zero trust is a routine and accepted concept in cybersecurity. Given the importance of information technology and the increasing convergence of physical and logical security, the tenet is becoming a dominant principle in physical security, too. We asked our Expert Panel Roundtable: Briefly define zero trust and explain how it impacts physical security.

Emphasizing proactive rather than reactive security shifts the focus from dealing with crises and damage control to prevention. Advantages of a proactive approach include cost efficiency, better business continuity, and fewer crises that draw attention away from strategic improvements. Staying ahead of threats is a core mission of the security department, and technology has evolved to enable security professionals to deliver on that mission better than ever. We asked our Expert Panel Roundtable: How are security systems transitioning from reactive to proactive, and what is the benefit?