Sold by: Ksmartech
Deployed on AWS
Free Trial
AWS Free Tier
Cloud-optimized. Easy deployment. Secure DEK encryption over trusted channels. HSM-based key protection. Compliant with ISMS-P, GDPR, and global security standards.
> Free Trial: Generate up to 1,000 K8s keys over 90 days at no cost.
Overview
Lightweight Agent Integration for Minimized DEK Exposure and Enhanced Security (Secrets are encrypted using DEKs secured by KEKs generated within an HSM. DEK usage is minimized to reduce memory exposure and attack surfaces.)
Key Features:
- Certificate-Based Secure Communication
- Mutual authentication between Agent and KEY4C using HSM-issued certificates.
- Automatically establishes a secure channel to prevent MITM and tampering.
- DEKs remain within the HSM; all cryptographic operations are executed internally.
- Encrypted secrets are stored in etcd; decrypted only upon authorized request and delivered securely to Worker Nodes.
- HSM-Backed KEK for Stronger DEK Protection
- KEKs are generated and stored inside the HSM, never exposed externally.
- All DEK encryption and decryption operations are handled within the HSM.
- DEKs are immediately disposed of after use.
- Only encrypted DEKs are stored; compromised data is unusable without the HSM.
- Compliant with ISMS-P, CSAP, and other regulatory standards.
Highlights
- Secure DEK encryption with KEK generated and managed entirely in HSM
- Minimized DEK usage to reduce attack surfaces and prevent in-memory exposure
- HSM-backed KEK for enhanced DEK security and protection against memory exposure
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free according to the free trial terms set by the vendor.
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month | Overage cost |
|---|---|---|---|
k8s service | Access to k8s key generation service | $200.00 |
Dimensions summary
This listing bills through a single contract dimension tied to the k8s key generation service, measured in Requests. You commit to a contract term and pay for access to key generation activity rather than servers or storage. There are no separate tiers or instance sizes to choose between. Pricing scales with the number of key generation requests you make against the service. You use the service to protect Kubernetes Secrets through HSM-based key management, delivered as a cloud SaaS model without buying separate security hardware.
Top-of-mind questions for buyers
A request is a single call to the service to generate or process a key. When you create a KEK through the web console or when the agent triggers encryption or decryption, each verified operation counts as one request. Your cost scales with how many such requests you make.
No. The service runs as a cloud SaaS model, so you do not purchase or maintain your own HSM equipment. Key generation and encryption operations happen inside a certified HSM managed by the vendor. You connect through a lightweight web console and an agent installed in your Kubernetes environment.
Both storing and using a Secret can trigger service activity. Storing encrypts the DEK inside the HSM; using it decrypts the DEK for the worker node. Each verified encryption or decryption call is a request. More Secret operations mean more requests, which is what your bill scales with.
key4c.gitbook.io+1
Helpful?
Vendor refund policy
You can cancel your Key4C service at any time. For monthly plans, we are going to refund the remaining amount after deducting the fee based on the number of days used.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Support contact: email: key4c_cuscenter@ksmartech.com phone: +82 70-7510-1001 Support hours: Monday to Friday, 9AM to 6PM (KST) Response time: Within 1 business day Languages supported: English, Korean
We provide assistance with installation, integration, and product usage. Enterprise support plans are available upon request.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
KEY4C V3.0 JWT HTTP REST API Service is a cloud-based security platform designed to simplify and strengthen JWT authentication for your applications.
With KEY4C, no need to manage cryptographic keys on your own servers.
Enjoy secure signing, rigorous token validation, improved performance, and a scalable architecture with all in one solution.
Start today and build a secure, efficient authentication system with ease.
> Free Trial: Generate up to 1,000 JWT tokens over 90 days at no cost.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.