PKI Health Assessment
Comprehensive audit of your existing Public Key Infrastructure - identifying misconfigurations, security vulnerabilities, compliance gaps, and operational risks. Get a clear picture of your PKI's health with a prioritized remediation roadmap.
Request a Quote
Typical engagement: 1-2 weeks
What You Get
PKI architecture review and documentation
Certificate template security audit (ESC1-ESC8 vulnerability check)
CA configuration assessment
Key storage and protection evaluation
CRL/OCSP health verification
Compliance gap analysis (ISO 27001, PCI-DSS, NIST, WebTrust)
Risk-prioritized remediation roadmap
Executive summary for leadership
How It Works
1
Scoping Call
30 minUnderstand PKI size, number of CAs, compliance requirements
2
Access Provisioned
Day 1Admin access to CA servers or remote assessment agent
3
Assessment Execution
5-10 daysFull security and operational review
4
Report Delivery
Day 12-14Full findings + risk register + roadmap
5
Walkthrough Call
1 hourReview findings, prioritize, discuss next steps
Typical Scope & Duration
| Scope | Duration |
|---|---|
| 1-2 CAs, single domain | 1 week |
| 3-5 CAs, multi-domain | 1-2 weeks |
| 5+ CAs, complex hierarchy | 2-3 weeks |
Who This Is For
- Organizations running Microsoft AD CS (most common)
- Companies preparing for compliance audits
- Teams that inherited a PKI they didn't build
- Organizations experiencing certificate-related issues
- Pre-migration assessment before modernizing PKI
What Happens Next
Remediation execution - fix critical findings
PKI modernization - if fundamental redesign needed
CLM platform deployment - ongoing lifecycle automation
Ongoing monitoring via QCecuring platform
Ready to Get Started?
Schedule a free scoping call. We'll understand your environment and provide a clear proposal with scope, timeline, and pricing.