Entrust has added new cryptographic inventory and automation capabilities to its Cryptographic Security Platform, aiming to help organizations identify vulnerable encryption and prepare for the transition to post-quantum cryptography.
According to a company news release, the updated platform can import and export Cryptographic Bill of Materials data, known as CBOMs. A CBOM records the encryption algorithms, certificates, keys and other cryptographic components used within an organization’s systems and applications.
Entrust said the capabilities allow security teams to connect those records with information about the systems that depend on them. Organizations can then identify outdated or noncompliant cryptography, assess which operations could be affected and prioritize corrective work.
The additions come as organizations face growing pressure to gain control over their cryptographic assets. Certificate volumes are rising as companies connect more devices, cloud services, automated processes and artificial intelligence agents to their networks. At the same time, shorter certificate lifespans are increasing the frequency with which security teams must renew and replace them.
Governments and regulators are also placing greater emphasis on cryptographic risk management. A June 2026 U.S. executive order directed federal agencies to accelerate preparations for post-quantum cryptography, which is designed to withstand attacks from future quantum computers. European Union rules, including the Digital Operational Resilience Act and NIS2, impose broader cybersecurity, resilience and cryptography-related obligations on covered organizations.
“A CBOM is more than a static inventory,” said Michael Klieman, global vice president of product management at Entrust. “Security teams need to connect CBOM data with the systems and applications that depend on cryptography, understand where risk is concentrated and determine what actions to take next.”
Entrust said the platform combines CBOM data with information gathered through its own cryptographic discovery tools. This can give customers a more complete inventory of their keys, certificates and secrets while showing how those assets relate to applications and infrastructure.
The company also introduced Ansible-based capabilities for automating certificate deployment and management. Ansible is an open-source automation system commonly used to configure and manage information technology environments. Entrust said its integration can reduce manual work and lower the risk of outages caused by expired or incorrectly deployed certificates.
Expanded support for composite algorithms is intended to help organizations manage a gradual post-quantum transition. Composite approaches combine conventional cryptography with newer post-quantum algorithms, allowing organizations to retain existing protections while testing and introducing replacements.
Entrust also added capabilities based on SPIRE, an open-source system for assigning and verifying identities for software workloads. The company said the technology can support trusted identities for AI agents and other automated systems that interact without direct human involvement.
Customers can deploy the updated platform on their own infrastructure or access it as a service. The on-premises option is aimed in part at organizations with strict security, operational or data-sovereignty requirements.
“Knowing where cryptography lives isn’t enough anymore,” said Jennifer Glenn, research director for information and data security at IDC. “Organizations that connect cryptographic inventory, governance, automation, and post-quantum readiness will be better positioned to manage crypto-agility as standards evolve.”
