Keyfactor adds Matt Cohen to its board as its $1B-plus investment closes

Why it matters

Keyfactor is pairing a $1B-plus investment and more than $200M in company-reported ARR with board-level operating experience from a cybersecurity executive who led CyberArk. The move puts execution and disciplined scaling at the center of its next phase.

Keyfactor has appointed Matt Cohen, CyberArk's former CEO, to its board and made him a strategic adviser to CEO Jordan Rackie. The appointment lands as Keyfactor says it has closed a $1 billion-plus growth investment led by Summit Partners and passed $200 million in annual recurring revenue.

The choice puts an experienced cybersecurity operator around the table as Keyfactor scales a business built from its founders' early work in public-key infrastructure. Co-founder and CTO Ted Shorter and co-founder Kevin von Keyserling founded Keyfactor in 2001 as Certified Security Solutions, a services business helping large enterprises design and deploy PKI. Keyfactor moved into software in 2014, turning that hands-on infrastructure work into products for managing machine identities, certificates and cryptography.

Cohen's appointment is a board and advisory role, not an operating job. He will advise Rackie, who became CEO in 2019, as Keyfactor invests in its Trust Control Plane and expands its focus on machine identity, cryptography, AI security and post-quantum readiness. Rackie said the next stage will require "ambition, discipline and operational rigor." The hire suggests Keyfactor wants someone who has managed the pressures of scaling a cybersecurity company at substantial size alongside its existing leadership.

A scale operator after CyberArk

Cohen joined CyberArk as chief revenue officer in 2019, became chief operating officer in 2020 and took over as CEO in 2023. Before CyberArk, he spent more than two decades at PTC, including as executive vice president of worldwide field operations. Keyfactor's announcement credits him with helping PTC grow beyond $1 billion in ARR and leading operational and strategic transformations.

Palo Alto Networks completed its acquisition of CyberArk on February 11th, 2026. Cohen's CyberArk experience gives Keyfactor a board member who has led a security company through the growth and strategic inflection points it is now pursuing. Keyfactor and CyberArk operate in related parts of enterprise security: Keyfactor manages machine identities and cryptographic infrastructure, while CyberArk built its business around identity security. That overlap makes Cohen's operating background relevant to Keyfactor's pitch to enterprises facing an expanding number of machines, workloads and AI agents to authenticate.

Keyfactor's revenue milestone is more specific than the investment headline. Keyfactor said on September 9th that it crossed $200 million in ARR at the beginning of the third quarter. Rackie said Keyfactor grew from less than $10 million in ARR in 2019 to more than $100 million over roughly five years, then doubled again in about two years. Those are company-reported figures, rather than audited financial results. Keyfactor also said it remained profitable while growing ARR more than 35% year over year; the September announcement did not provide financial statements or a definition of profitability.

Summit announced its $1 billion-plus investment on July 6th, with existing investors Insight Partners and Sixth Street Growth retaining significant ownership. Keyfactor's October 5th announcement says the investment has now closed. Summit said the capital would support product innovation, geographic expansion, hiring and acquisitions. The size of the investment, the ARR milestone and Cohen's appointment together mark a shift from proving the software's market to managing the demands of a much larger operation. The release does not break out how much of the investment goes to Keyfactor's growth versus other transaction purposes.

The founders' original problem, at a new scale

Keyfactor's early services work gave Shorter and von Keyserling direct exposure to a practical problem: enterprises needed a way to manage the keys and certificates multiplying across their systems. Moving into software in 2014 was a bet that customers needed repeatable tools, not only expert help configuring PKI. The Trust Control Plane extends that premise into a broader platform for discovering cryptographic assets, setting policy and automating machine identity management.

That market is changing as software runs across cloud services, connected devices and AI agents. Each new workload can add identities and credentials for security teams to inventory and govern. Keyfactor is betting that enterprises will want a unified layer to control these assets, and that its existing PKI and certificate-management products can serve as the foundation. Keyfactor says it serves more than 1,000 customers and supports over 40% of Fortune 100 companies, figures that describe its reach but do not show how revenue is distributed across customers or products.

For Rackie, Cohen's arrival adds a board-level operator as Keyfactor deploys capital behind its next stage. For Shorter, whose company began as an engineering-services shop, the challenge is to keep turning expertise in cryptographic infrastructure into software that enterprises can adopt across increasingly complex environments. The appointment gives Keyfactor an experienced adviser for that effort; Keyfactor's growth claims show the scale it has reached, while execution will determine whether the platform can expand with the demands it is built to address.