shouldiuse.io

Categories

VERDICT

Entrust Review

Depends

Should I use Entrust?

Comprehensive identity-centric security solutions - entrust.com

· 5 days ago

A fit for regulated enterprises needing high-assurance identity, PKI, or HSMs at scale. Wrong for small teams wanting basic MFA, and avoid its TLS certificates now that major browsers distrust the Entrust CA.

Confidence

Medium. Based on 30+ public sources; vendor page blocked (JS required) and many review snippets truncated, so ratings/pricing numbers unavailable.

Ratings

  • Value for moneyNo public pricing found
  • Ease of useReview snippets truncated, no usable signal
  • Feature depth
  • Support qualityNo substantive support evidence in snippets
  • Security posture

Pricing

Not disclosed

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed

Best for

  • Regulated enterprises (banking, government)
  • High-assurance MFA and PKI at scale
  • HSM and key-management buyers
  • Fintech onboarding needing IDV

Not for

  • Small teams wanting simple 2FA, massively overkill
  • Anyone buying TLS/SSL certificates, browsers distrust Entrust's CA
  • Startups wanting self-serve signup and transparent pricing
  • Buyers needing a simple contact/CRM tool, wrong category entirely

Gotchas - check before you buy

high

Since late 2024, major browsers distrust Entrust's certificate authority for new TLS certs

high

Running nShield HSMs? Patch immediately: 2025 auth-bypass and privilege-escalation CVEs

medium

Entrust itself breached by LockBit (2022) and Clop (2025) ransomware groups

medium

Quote-based enterprise pricing; contract reinstatement fees apply on lapsed agreements

Pros and cons

Pros

  • Gartner Magic Quadrant Leader for Identity Verification (2024)
  • Broad portfolio: MFA, SSO, IDV, PKI, HSMs, digital signing
  • Available via GSA Advantage and AWS Marketplace
  • Acquired Onfido and WorldReach, strengthening identity verification
  • Long-established vendor with global partner network

Cons

  • 2025 nShield HSM CVEs: authentication bypass and privilege escalation
  • Ransomware hit Entrust twice: LockBit 2022, Clop 2025
  • Major browsers distrusted Entrust-issued TLS certificates
  • Pushy marketing emails; sysadmins report no unsubscribe option

Sources & method

- 15 sources - Patch urgently: three 2025 nShield CVEs, two ransomware incidents against Entrust itself, and browser distrust of its TLS CA.

official x4review x5security x4news x2
  • CVE-2025-59704: nShield 5c authentication bypass, Authentication bypass in Entrust nShield 5c HSMs, disclosed September 2025.
  • CVE-2025-59699 and CVE-2025-59703: nShield privilege escalation, Privilege escalation and related flaws in nShield HSMs, 2025.
  • Ransomware attacks on Entrust (LockBit 2022, Clop 2025), LockBit and later Clop claimed breaches of Entrust; data-leak threats and DDoS followed.
  • Browser distrust of Entrust CA, Chrome and other browsers stopped trusting Entrust-issued TLS certificates after repeated mis-issuance.

Key stats

  • Feature depth: 4/5

    Rating

  • Not disclosed

    Starting price

  • 15

    Sources

  • Analyzed

  • Value for money. No public pricing found
  • Ease of use. Review snippets truncated, no usable signal
  • Feature depth: 4/5. Gartner MQ Leader; huge identity portfolio
  • Support quality. No substantive support evidence in snippets
  • Security posture: 2/5. NShield CVEs, two ransomware breaches, CA distrust
  • 197 G2 reviews Entrust Inc. Seller-wide
  • Leader Gartner MQ Identity Verification, 2024
  • 3 2025 CVEs NShield HSM flaws
  • 2 Ransomware hits LockBit 2022, Clop 2025

Pricing

Not disclosed

Security

Patch urgently: three 2025 nShield CVEs, two ransomware incidents against Entrust itself, and browser distrust of its TLS CA.

  • CVE-2025-59704: nShield 5c authentication bypassAuthentication bypass in Entrust nShield 5c HSMs, disclosed September 2025.⁷
  • CVE-2025-59699 and CVE-2025-59703: nShield privilege escalationPrivilege escalation and related flaws in nShield HSMs, 2025.⁸
  • Ransomware attacks on Entrust (LockBit 2022, Clop 2025)LockBit and later Clop claimed breaches of Entrust; data-leak threats and DDoS followed.10
  • Browser distrust of Entrust CAChrome and other browsers stopped trusting Entrust-issued TLS certificates after repeated mis-issuance.⁶

What users say

Review volume is substantial but snippets are truncated; visible themes include certificate trust problems and aggressive sales emails.

“No Unsubscribe for YOU!!!!”
Reddit, r/sysadmin

Alternatives

Compare Entrust with each alternative.

  • Okta

    The default enterprise SSO/MFA standard with a bigger ecosystem.

  • Duo Security

    Simpler MFA with a free tier for small teams.

  • DigiCert

    Safer pick for TLS certificates after Entrust's browser distrust.

    Entrust vs DigiCert
Full analysis

Based on 30+ public sources; vendor page blocked (JS required) and many review snippets truncated, so ratings/pricing numbers unavailable.

Enterprise identity security: MFA, PKI, IDV, HSMs. Overkill for small teams; avoid Entrust TLS certs (browser distrust).

Methodology

Based on 30+ public sources; vendor page blocked (JS required) and many review snippets truncated, so ratings/pricing numbers unavailable.

Read how a report is made.

Sources

  1. Entrust Reviews, Ratings & Features 2026 — Gartnergartner.com
    review
  2. Entrust, Inc. Products — 197 G2 Reviewsg2.com
    review
  3. Entrust Identity as a Service Review — SoftwareAdvicesoftwareadvice.com
    review
  4. Entrust SSL Certificate Reviews — SSLShoppersslshopper.com
    review
  5. Entrust 'No Unsubscribe for YOU!!!!' — Reddit r/sysadminreddit.com
    review
  6. Sustaining Digital Certificate Security — Entrust — Reddit r/netsecreddit.com
    news
  7. CVE-2025-59704: Entrust nShield 5c Authentication Bypasssentinelone.com
    security
  8. CVE-2025-59703 Detail — NVDnvd.nist.gov
    security
  9. nShield Connect XC — Multiple Vulnerabilities (Google)github.com
    security
  10. Victim: ENTRUST.COM — ransomware.liveransomware.live
    security
  11. LockBit gang hit by DDoS after threatening Entrust leakgridware.com.au
    news
  12. All Products — Entrustentrust.com
    official
  13. Entrust Contract Reinstatement Fee Policyentrust.com
    official
  14. Entrust Corporation — GSA Advantagegsaadvantage.gov
    official
  15. Entrust Identity as a Service Pricing 2026 — G2g2.com
    official

Add this review to your site

This check for Entrust says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Entrust Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.