Information on the target
Vista Equity Partners has reached an agreement to acquire the public key infrastructure (PKI) business of HID, the identity technology division of Swedish lock and access group ASSA ABLOY. The PKI unit specializes in selling digital certificates that enable computers, websites, and individuals to authenticate their identities online. Utilizing paired digital keys and certificates, public key infrastructure supports secure connections, encrypted communications, and digital signatures. A trusted issuer, known as a certificate authority, verifies the relationship between an identity and a key, allowing software to ascertain the trustworthiness of connections or signatures.
The PKI business being sold includes IdenTrust, HydrantID, and ZeroSSL, which collectively generated approximately $58 million in sales in 2025, boasting a strong operating margin as described by parent company ASSA ABLOY. This business was formed through a series of acquisitions, starting with ASSA ABLOY's purchase of IdenTrust in January 2014. IdenTrust, founded in 1999 and based in San Francisco, had 63 employees and projected annual sales of $14 million at the time of acquisition. The PKI unit also encompasses an on-premise credential and smart card lifecycle management business.
Industry overview in the target’s specific country
The Financial Technology (Fintech) industry in the United States is experiencing rapid growth, particularly in the realm of public key infrastructure (PKI) services. As organizations increasingly prioritize cybersecurity and digital identity verification, the demand for PKI solutions has surged. The global PKI market is projected to grow from $6.4 billion in 2024 to $19.7 billion by 2030, reflecting an impressive annual growth rate of 21.1%. Within this landscape, the U.S. market is expected to expand from $1.8 billion to $4.9 billion, indicating a robust appetite for secure digital identity solutions.
Several factors are driving this growth, including the increasing frequency of certificate renewals mandated by evolving standards set by the CA/Browser Forum. As of April 2025, the maximum validity period for website security certificates will be reduced from 398 days to 47 days, necessitating more frequent renewals and creating a heightened demand for automated PKI services such as those offered by HydrantID and ZeroSSL. This shift underscores the need for organizations to adopt efficient certificate management solutions to navigate the complexities of compliance and security.
Moreover, the impending transition to quantum-resistant encryption is prompting organizations to reevaluate their cryptographic systems. As businesses prepare for potential vulnerabilities posed by quantum computing, the need to update keys and certificates will further stimulate demand for comprehensive PKI management services. This evolving landscape presents significant opportunities for established players in the Fintech sector, particularly those specializing in identity verification and security solutions.
Private equity activity in the Fintech space has been robust, with notable transactions highlighting the sector's attractiveness. Recent acquisitions, such as Clearlake Capital's purchase of DigiCert and CyberArk's acquisition of Venafi, underscore the…