Utimaco
“Can Utimaco become the default cryptographic infrastructure layer — HSM, key management, and payment security — for cloud-native financial institutions globally?”
HQAachen, Germany
IndustryInfrastructure / KYC
The story
Utimaco is a long-established German cybersecurity company specialising in Hardware Security Modules (HSMs) and cryptographic infrastructure. Originally focused on on-premises HSM appliances for enterprises, it has progressively moved toward cloud-hosted HSM-as-a-Service offerings. Its Payment HSM as a Service is positioned as a PCI-PIN-certified alternative to on-premises hardware for fintechs, acquirers, PSPs, and issuers. The IBM Cloud partnership in 2025 marks a deliberate push into embedded payment security infrastructure.
Last 12 months
Product timeline
2021
Published PSD2 and HSM as a Service blog series, positioning HSMaaS as infrastructure for open banking and PSD2 compliance.· banking
2025
Launched Payment HSM as a Service (Payment HSMaaS) as a native offering on IBM Cloud for Financial Services.· pivot
2025
Partnered with STS Payments via myHSM by Utimaco to deliver secure payment solutions.· banking
The stack
Accounting gap: none