product

KrakenKey

TLS/SSL certificate automation with a zero-knowledge private key model. Keys are generated and held by an agent in your environment, never by the platform.

Visit krakenkey.io ↗

Why

Certificate expiry is still one of the most common causes of avoidable outages, and most automation tools solve it by taking custody of your private keys. KrakenKey doesn’t.

How it works

Zero-knowledge agent. Private keys are generated and stored inside the customer’s environment. The control plane orchestrates issuance and renewal but never sees key material.
Terraform provider (Go). Certificates are declared as infrastructure, alongside the resources that consume them.
GitHub App / Action. Issuance and rotation in the pipelines teams already run.
Backend. TypeScript / NestJS API with a documented agent protocol and threat model.

Status

In active development.