BastionXP
Cloud-native private PKI CA and device identity platform issuing hardware-attested certificates to replace passwords.
Open productWhat it does
About BastionXP
BastionXP, developed by Ampas Labs Inc., is a cloud-native private PKI certificate authority and device identity management platform. It automates device enrollment and certificate lifecycles via the ACME protocol with attestation extensions, eliminating passwords and legacy SCEP shared secrets. By checking hardware integrity through TPM or Apple Secure Enclave upon enrollment and every renewal, BastionXP automatically revokes compromised devices while securing enterprise access to VPNs, ZTNA, Wi-Fi, and SaaS applications.
- Availability:
- launched
- Access:
- free trial
- Format:
- software
Pricing at launch: Enterprise free trial version is available as a self-hosted or cloud-hosted solution upon request.
Core capabilities
Automated ACME Device Enrollment
Automates device onboarding and certificate lifecycle management using the ACME protocol with attestation extensions.
Hardware Attestation & Continuous Verification
Verifies device identity via TPM or Apple Secure Enclave during initial issuance and every renewal, revoking access automatically if posture is compromised.
Keep discovering
Related debuts
Continue with products that solve a similar problem or serve the same kind of maker.
