# NextPKI

> Multi-CA Certificate Lifecycle Management (CLM) with automated renewal. Every certificate, every CA, one inventory - found by discovery agents whose source will be published. Private PKI optional.

NextPKI is operated by Datargo GmbH (Frankfurt am Main, Germany) and built by the founder of CertCenter AG, the European TLS lifecycle-management provider DigiCert acquired in 2020. The product is in pilot phase; pricing is intentionally not yet published.

Core stance: your CA is a commodity. NextPKI sits above it. The platform discovers every certificate across your estate (sensor, cloud connectors, CA APIs, Certificate Transparency logs), renews through whichever public or private CA you already use (ACME-native, switchable by config), and can optionally back you with an audited private CA on HSM for internal certificates, mTLS, device identity, and code signing.

This site is published in two languages on two domains:
- English: https://www.nextpki.com/
- German: https://www.nextpki.de/

## Product

- [Discovery](https://www.nextpki.com/discovery/): How NextPKI finds every certificate across your estate via the sensor, cloud connectors, CA APIs, and Certificate Transparency logs.
- [Renewals](https://www.nextpki.com/renewals/): CA-agnostic, ACME-native renewals through your existing CAs. Switchable with a config change - no CA lock-in.
- [Private PKI](https://www.nextpki.com/private-pki/): Audited private CA with HSM backing for internal certificates, mTLS, device identity, and code signing.
- [Pricing](https://www.nextpki.com/pricing/): Pilot phase. Pricing is set after the first deployments give real signal - no published grid yet.

## Company

- [About](https://www.nextpki.com/about/): Background on the team, the CertCenter/DigiCert lineage, and why we're building NextPKI now.
- [Contact](https://www.nextpki.com/contact/): Pilot enquiries, partnership, press. Email is the fastest channel during pilot phase.
- [Security and Vulnerability Disclosure](https://www.nextpki.com/security/): How to report security issues, scope, safe harbour, and response targets. Coordinated disclosure, 90-day default window.
- [security.txt](https://www.nextpki.com/.well-known/security.txt): Machine-readable security contact per RFC 9116.

## Legal

- [Imprint](https://www.nextpki.com/legal/imprint/): Legal information pursuant to § 5 TMG and § 18 MStV. Operator: Datargo GmbH.
- [Privacy policy](https://www.nextpki.com/legal/privacy/): How NextPKI handles personal data on this website (GDPR).
- [Data Processing Agreement](https://www.nextpki.com/legal/dpa/): DPA template per Art. 28 GDPR - part of every NextPKI customer contract.

## Optional

- [Sitemap](https://www.nextpki.com/sitemap.xml): XML sitemap for the English site.
- [robots.txt](https://www.nextpki.com/robots.txt): Crawler policy.
- [German site (nextpki.de)](https://www.nextpki.de/): Same content, German language, separate domain.