Crypto agility, the ability to replace keys, certificates and cryptographic algorithms quickly and without disruption, has become a board-level requirement. Regulators demand it, certificate lifespans are collapsing, and the migration to post-quantum cryptography is already underway. Yet most organisations still run these changes by hand, through spreadsheets, tickets and scheduled maintenance windows.
DuoKey Agentic Crypto Agility Platform removes that bottleneck. Its agents discover cryptographic assets across cloud and on-premises environments, score quantum exposure, rotate keys, renew and revoke certificates, remediate expirations, and plan and execute algorithm migrations. Every action is bounded by policy the customer defines and evidenced in a complete audit trail. Consequential operations remain subject to human approval, a requirement of DuoKey’s MPC architecture, in which a customer-held share is required before any key can be used.
“Every organisation we talk to faces the same trap: the more sovereignty they want over their encryption, the more operational burden they take on,” said Nagib Aouini, CEO of DuoKey. “We built this platform to break that trade-off. You keep absolute control over your keys, and the system does the work of exercising that control. When an algorithm is deprecated or a certificate policy changes, your cryptography adapts, inside the limits you set, with the evidence your auditor needs.”
What the platform delivers
Fewer outages and audit findings. Agents handle key rotation, certificate lifecycle and expiry remediation end to end, eliminating the missed renewals behind most cryptography-related incidents. Post-quantum migration as a continuous process. Sovereignty without the staffing cost. Key material is never held in full by any single party and never leaves the customer’s control, whichever cloud or jurisdiction it runs in. The platform works with existing HSMs (Securosys, Thales, Entrust, Fortanix, HashiCorp Vault) and cloud key stores (AWS XKS, Azure Key Vault, GCP EKMS), across 54 shipped integrations.
Sovereign by design, for the Kingdom and beyond
For organisations operating under national data-sovereignty requirements, the platform’s architecture keeps citizens’ and customers’ data under their own nation’s law, even when the underlying infrastructure is operated by a foreign cloud provider. As a Swiss company, DuoKey is subject to neither the US CLOUD Act nor US export-control regimes.
Attendees at LEAP 2026 can see the platform running live throughout the event at DuoKey’s stand, H1A.P251.
Source: DuoKey SA
Follow the full story here: https://przen.com/pr/33622334
Media gallery
