IoT Security Suite

Products

IoT Security Suite

Sixscape IoT Security Suite is a PKI based product which enables millions or billions of IoT/IIoT devices and users to be issued with a digital identity. Sixscape’s IDCentral Platform allows security at-scale to be distributed across various domains, avoiding the traditional PKI bottleneck of centralized digital certificate issuance and management.

Sixscape IoT Security Suite enables IoT administrators to securely register, manage, and provision digital certificates for IoT devices. Sixscape IoT Security Suite also supports integration with various IoT cloud platforms to automatically publish the issued certificates, thus avoiding all the manual registration procedures and delivering SDKs to extend integration for your future and exponential growth of IoT security requirements.

Why IoT Identity Is the Foundation of IoT Security

Connected devices now outnumber human users on the internet, and every unmanaged endpoint — a sensor, gateway, controller, camera, medical device, or industrial robot — is a potential entry point for attackers. Traditional perimeter defenses cannot protect environments where devices speak directly to cloud platforms, to one another, and across third-party networks. Strong IoT device security therefore begins with cryptographic identity: each device must be uniquely identifiable, mutually authenticable, and revocable. Without that foundation, encryption, authorization, and audit trails have nothing trustworthy to attach to.

The Sixscape IoT Security Suite is a PKI-based IoT security platform engineered to deliver that identity foundation at internet scale. Built on Sixscape’s IDCentral platform and Identity Registration Protocol (IRP), it issues, provisions, and manages X.509 digital certificates for billions of devices — distributing certificate authority workload across domains so issuance keeps pace with deployment growth rather than becoming the bottleneck.

Multi-IoT Platform Support

Using SDK’s from the already lightweight design of IRP allows integration with any IoT platform with minimal effort ensuring faster turn around time and guaranteed integration

Low Encryption Overhead

Support for ECC algorithm for lesser computational overhead compared to traditional algorithms, a mandate in IoT deployments where message size and overhead are governed

Public/Private Hierarchy Deployments

Deploy certificates issued by publicly trusted hierarchies or generate private hierarchy certificates from  IRP for closed IoT networks

Deploy key material and certificates to IoT nodes at scale in seconds and prevent rogue devices joining the IoT network and protect message integrity across NBIoT, UNB and CellularIoT deployments

How the IoT Security Suite Works

Administrators register device groups through an intuitive console or via the RESTful API, then onboard fleets using Sixscape’s lightweight SDKs. Each device receives a unique certificate from either a publicly trusted hierarchy or a private CA generated inside IRP — the right choice for closed industrial and operational technology (OT) networks. Certificates can be automatically published to AWS IoT, Azure IoT Hub, IBM Watson IoT, and other supported platforms, eliminating manual enrollment. Lifecycle events such as renewal, rotation, and revocation are policy-driven and centrally auditable, while ECC algorithm support keeps cryptographic overhead within the strict size and power constraints of low-resource devices.

Value: For my business

  • Multi-IoT platform and multi-CA support
  • Integration with IRP (Identity Registration Platform) for cross company certificate management
  • Ensure integrity of all IoT nodes and traffic across any size deployment
  • Seamless management of new and existing certificates including auto renewal
  • Support multiple IoT deployments with one easy to use interface
  • Scale to billions of IoT devices, on premise or cloud based across AWS, Azure or IBM Bluemix

Benefits: For the deployment

  • Ease of installation and setup
  • Centralised and de-centralised deployment options
  • Deploy news nodes in seconds, fully secured and at scale
  • Choose private or public hierarchy deployment at no additional cost
  • Control certificate revocation of redundant nodes
  • Intuitive administrator console to register, provision  and manage devices

Industries and Use Cases for Secure IoT Devices

The Sixscape IoT Security Suite is deployed across sectors where device trust is non-negotiable and represents a complete IoT security solution for enterprises managing high-value or safety-critical fleets:

  • Manufacturing IoT security — authenticating PLCs, robots, and edge gateways on the plant floor and across distributed factories.
  • Energy and utilities — securing smart meters, SCADA endpoints, and grid sensors against spoofing and command injection.
  • Healthcare — issuing identities to connected medical devices, infusion pumps, and remote-monitoring equipment.
  • Smart cities and transportation — protecting traffic systems, surveillance cameras, and connected-vehicle infrastructure.
  • Telecommunications and 5G — providing certificate-based identity to subscriber units, base stations, and network functions.
  • Building management and facilities — securing HVAC, access control, lighting, and energy-management devices.

Compliance and Standards Alignment

The Suite supports IoT identity management programs operating under NIST SP 800-213 (IoT Device Cybersecurity Capability), IEC 62443 (industrial automation and control system security), ETSI EN 303 645 (consumer IoT baseline), the EU Cyber Resilience Act (CRA), and ISO/IEC 27001. ECC and post-quantum-ready cryptography keep the platform aligned with emerging NIST PQC guidance — important for long-lived devices that must remain trustworthy across multi-decade deployment lifecycles.

Key Features

  • Built-in private hierarchy CA
  • Integration to various IoT Cloud Platforms
  • Custom integration using RESTful API
  • Software Development Kit for popular platforms
  • Supports secure storage of device key element
  • IPv4, dual-stack and IPv6-only support

“Sixscape IoT Security Suite helped us deploy certificates to control our mobility devices for casual public use – Operations Manager, mobility company

Download data sheet

Frequently Asked Questions

What is an IoT security platform, and why is PKI the right foundation?

An IoT security platform delivers identity, authentication, and trusted communication for connected devices. PKI is the proven foundation because it provides cryptographically unique, non-repudiable identities that can be issued, validated, and revoked across heterogeneous networks and operating systems.

How does Sixscape scale to billions of devices?

IDCentral distributes certificate issuance across regional or domain-specific nodes rather than relying on a single CA, removing the throughput bottleneck of traditional centralized PKI. Lightweight SDKs and the IRP protocol enable rapid onboarding without re-engineering device firmware.

Can certificates be issued from a private CA?

Yes. The Suite includes a built-in private hierarchy CA for closed IoT networks and also supports publicly trusted hierarchies — at no additional cost — so the choice can be made per deployment.

Does the platform support constrained devices?

Yes. ECC (Elliptic Curve Cryptography) support minimizes computational overhead and message size, making the Suite suitable for low-power microcontrollers and bandwidth-limited radio links.

Which IoT cloud platforms are supported?

The Suite integrates with AWS IoT, Microsoft Azure IoT Hub, and IBM Cloud (formerly Bluemix), and can be extended to any other platform through the SDKs or RESTful API.