What is our primary use case?
SignServer by Keyfactor is our main solution to secure our entire software release lifecycle at Flash. It helps us run automated server-side code signing, container image signing, and hardware backend time stamping across our AI model deployment artifacts and firmware builds. We rely on this to maintain strict zero-time availability for our build, and it assists us with AWS CloudHSM integration, which helps us ensure continuous compliance with modern code signing security standards.
Using SignServer by Keyfactor for code signing and container image signing has changed our release process significantly and improved our workflow. Due to the signing process, we have seen guaranteed rapid intervention of the signing pipeline halts, which would otherwise block all production releases. This has mitigated upcoming risk and provided us dedicated support to maintain zero downtime availability for our build systems. Since server-side code signing is automated, we ensure that the overall code is always potentially ready to ship and be tested in all kinds of environments.
How has it helped my organization?
SignServer by Keyfactor has positively impacted our organization by realizing the full ROI recovered within six months of deployment. This has happened by eliminating build pipeline blockages and avoiding costly PKI deployment misconfigurations. It has helped us streamline processes and cut down on unnecessary costs that were previously spent on mitigation and configurations. We have seen an 80% decrease in release blockers related to code signing failures, which dropped from four hours to just 15 minutes to resolve due to immediate 24/7 PKI specialist support. We have saved at least a billion dollars in developer productivity by offloading PKI management, HSM key rotation, and SignServer by Keyfactor upgrades to the support team. Our internal DevOps engineer has saved at least 25 hours per week, freeing up 2.5 full-time engineers to focus strictly on our AI deployment pipelines. Additionally, we have seen zero security compliance findings, as the architecture provided by SignServer by Keyfactor support ensures we completely follow 100% compliant and strict supply chain security guidelines, preventing any potential audit penalties or delays in client contracts.
Since the team was able to free up at least 25 hours per week, this has helped us pick up on other priority tasks. It has had a positive impact where the DevOps engineers can now focus on other developments rather than configurations and debugging. This time is being used proactively on other features.
What is most valuable?
SignServer by Keyfactor offers multiple valuable functionalities. First, the cryptographic hardware security modules, HSM, are notoriously complex, and the direct engineering help provided to configure SignServer by Keyfactor with AWS CloudHSM for non-exportable private key management is commendable. Second is the 15-minute SLA for severity one outages, which guarantees rapid intervention if the signing pipeline halts, blocking all production releases and sign-offs. Additionally, they provide direct access to support engineers specialized in public key infrastructure and security aspects who understand both the SignServer by Keyfactor backend and AWS infrastructure. Lastly, the streamlined purchasing and renewal process aligned with our AWS Enterprise Discount Program commitments adds significant value.
During our last release, release two, we faced a code issue that almost prevented us from going live. Due to the dedicated support engineer with the SignServer by Keyfactor backend, they provided real-time support and resolved our query within 45 minutes, offering a practical solution to the problem we were facing.
The governance and security of SignServer by Keyfactor are really strong. The data is completely secure and audit-ready, making governance and security a significant strength.
The accuracy and reliability of the AI output provided by SignServer by Keyfactor is great, and I have witnessed 100% accuracy from the AI agents.
Integration with other AWS services is excellent. The connections with Amazon's HSM and AWS HSM have been excellent so far.
What needs improvement?
SignServer by Keyfactor is performing great, and I do not need any improvements at this time. Everything about SignServer by Keyfactor is good.
For how long have I used the solution?
I have been using SignServer by Keyfactor in the organization for the last two years.
What do I think about the stability of the solution?
SignServer by Keyfactor is a very stable solution, and we have not encountered any challenges so far.
What do I think about the scalability of the solution?
SignServer by Keyfactor is definitely a scalable solution; we are handling it for over 1 million users, and the software remains intact without any issues.
How are customer service and support?
The customer support is great; they solved our problem within 45 minutes, so I would give them a 10 out of 10.
Which solution did I use previously and why did I switch?
We did not previously use a different solution; SignServer by Keyfactor was our first choice.
How was the initial setup?
Deployments of SignServer by Keyfactor were not at all challenging, supported by the SignServer by Keyfactor team, with the initial deployment completed within 24 hours of our purchase.
What about the implementation team?
The configuration process was very easy and was done with the help of our internal DevOps team and support SMEs. Configuration was completed within two to three hours, and everything was figured out successfully.
What was our ROI?
I have realized a full ROI recovered within six months of deployment through eliminating build pipeline blockages and avoiding costly PKI deployment misconfigurations. We have seen an 80% decrease in release blockers related to code signing failures, which dropped from four hours to just 15 minutes to resolve. We have saved at least a billion dollars in developer productivity by offloading PKI management, HSM key rotation, and SignServer by Keyfactor upgrades to the support team. Our internal DevOps engineer has saved at least 25 hours per week, freeing up 2.5 full-time engineers to focus strictly on our AI deployment pipelines.
What's my experience with pricing, setup cost, and licensing?
The metering and billing experience is really good, as we are using a pay-as-you-go model. While evaluating other options, we checked the pricing, metering, billing, and licensing, and we found that SignServer by Keyfactor is the best fit for our organization.
What other advice do I have?
I would rate SignServer by Keyfactor a five out of five. I gave it a five because the ROI we have achieved is great, and it was realized within two years, which is impressive. Anyone looking for a great solution should definitely consider SignServer by Keyfactor.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
