← All platforms
TThales CipherTrust
The incumbent for regulated enterprises — the vendor auditors already recognise, with the hardware to match.
Enterprise KMSKeys, encryption, tokenisationBy ThalesSince 2019
- Type
- Enterprise KMS
- How it works
- A manager plus a family of connectors covering database, file and application encryption, backed by Luna HSMs. It descends from Gemalto and SafeNet, which is precisely why it appears in compliance checklists — the pedigree is the product as much as the software is.
- Scope
- Keys, encryption, tokenisation
- Deployment
- On-premise + cloud
- Hardware / key custody
- Luna HSMs; FIPS 140-3 Level 3, Common Criteria
- Pricing*
- Enterprise quote
- Free tier
- No
- Licence
- —
- Best for
- Regulated estates with auditors to satisfy
- Notable
- Luna HSMs are a compliance default
* Published list pricing at August 2026 (vendor pricing pages, August 2026), not a quote.
Strengths
- Recognised by auditors without argument
- Deepest hardware lineage on this list
- Broad connector coverage for legacy systems
- Strong post-quantum roadmap
Trade-offs
- Expensive and sold enterprise-first
- Heavier to deploy than cloud-native options
- Licensing model is complicated
- Developer experience is not the priority
Visit Thales CipherTrust → Documentation
Listed for comparison as of August 2026 — not an endorsement, and Thales CipherTrust did not pay for placement. See disclosure.
Compare Thales CipherTrust with…