Published on
October 5, 2026
French Tech 2030 laureate and Hexatrust member Evertrust introduces Cryptographic Posture Management. It helps CISO and GRC teams assess their organization's cryptographic compliance and produce the evidence that auditors (NIS2, DORA, PCI-DSS, ANSSI) and executive leadership expect.
Paris, October 5, 2026. Evertrust, a French cybersecurity software vendor specializing in digital trust, today announced the release of Evertrust CPM. The solution continuously assesses an organization's cryptographic assets, including certificates, keys, algorithms, protocols and their dependencies. It evaluates each compliance gap in context, assigns it to an owner and helps teams fix it. With Evertrust CPM, cryptographic posture becomes a metric that organizations can measure, track and defend.
Cryptography: the compliance blind spot
Cryptography runs through every IT environment, yet few organizations have a full inventory of it. Two developments are making that gap impossible to ignore:
Stricter regulation. NIS2, DORA and PCI-DSS 4.0 move from declarations of compliance to proof of compliance. Saying that cryptography is under control is no longer enough. Organizations must be able to show it on demand.
The post-quantum transition. The coordinated European roadmap calls for migration to start by the end of 2026 and for high-risk systems to be protected by 2030. NIST plans to deprecate RSA and ECC from 2030. A significant share of the algorithms in production will need to be replaced, and you cannot migrate what you cannot see.
From certificate inventory to cryptographic control
Evertrust comes to this challenge with a unique perspective. For nearly ten years, it has managed the lifecycle of millions of digital certificates for organizations running critical operations. Its customers have already completed the first step: inventorying and automating their certificates. Now they face the next one:
extending that control to all cryptographic assets;
assessing those assets against the frameworks that apply to them;
proving compliance.
What Evertrust CPM delivers
Discovery and mapping of cryptographic assets across the whole IT environment, far beyond certificates.
Context and dependencies. Each asset is enriched with business and technical context, and linked to what depends on it.
Continuous assessment against NIS2, DORA, PCI-DSS and ANSSI recommendations, with replacements prioritized by risk.
Remediation workflows that assign each gap to an owner and track it through to resolution.
Audit-ready reporting for auditors, regulators and boards, with no manual rework.
"Our customers already know where their certificates are. What they need now is to show an auditor, with evidence, what they know, what remediation is under way and what is left to do to improve their cryptographic posture. Evertrust CPM turns cryptography into a metric you can defend, whether you are facing a regulator or a board." said Kamel Ferchouche, CEO and co-founder of Evertrust.
Learn more: https://evertrust.io/cpm/
About Evertrust
Founded in 2017, Evertrust is a French Tech 2030 laureate and a member of Hexatrust. The French software vendor brings cryptographic posture management, PKI and certificate lifecycle management together on a single sovereign platform. Evertrust raised €10M in Series A funding from Elephant in December 2025 and manages more than 50 million cryptographic assets for over 25% of CAC 40 companies.