Futurex VirtuCrypt
Overview
VirtuCrypt is a cloud-based cryptographic platform delivering HSM-as-a-service alongside key management and PKI functions. Deployable across regions, it integrates with on-premises Futurex HSMs to create hybrid cryptographic environments and supports Bring Your Own Key (BYOK) and cloud key management use cases. VirtuCrypt shares the Base Architecture Model with CryptoHub, ensuring consistent capabilities and configuration across cloud and on-premises deployments.
Unsung implements VirtuCrypt for UK customers that need cloud-hosted cryptographic services, hybrid HSM environments spanning cloud and on-premises infrastructure, or a cloud-first approach to HSM and key management.
The Challenge
Organisations moving workloads to the cloud need HSM and key management services that operate in cloud environments, but many are not prepared to move their entire cryptographic infrastructure to the cloud at once. They need a cloud HSM service that integrates with their existing on-premises HSMs, maintaining consistent key management policies and enabling keys to be managed across both environments.
Cloud-native key management services provided by cloud providers offer convenience but limit organisations to a single provider’s key management approach. Organisations operating across multiple cloud providers, or those with regulatory requirements for independent key control, need a cloud HSM service that maintains operational independence from the underlying cloud platform.
What It Does
VirtuCrypt provides HSM-as-a-service that organisations can consume without procuring, racking, and managing physical HSM hardware. It delivers the same cryptographic capabilities as on-premises Futurex HSMs through the shared Base Architecture Model, enabling organisations to extend their cryptographic infrastructure to the cloud with consistent configuration and key management policies.
The platform supports hybrid deployments where cloud-hosted and on-premises HSMs operate as a unified cryptographic estate. BYOK capabilities enable organisations to maintain control of encryption keys used in cloud services, whilst key management functions provide full lifecycle management for keys across cloud and on-premises environments. VirtuCrypt supports PKI, digital signing, tokenisation, and payment cryptography use cases from the cloud.
How Unsung Helps
Unsung helps clients evaluate cloud HSM options, design hybrid cryptographic architectures, and implement VirtuCrypt integrated with their existing on-premises HSM infrastructure. Our Hardware Security Modules service provides guidance on HSM strategy across cloud and on-premises environments, ensuring consistent cryptographic standards regardless of deployment model.
Related Unsung Services
Hardware Security Modules — HSM strategy across cloud and on-premises environments.
PKI Management & Hosting — Managed PKI services including cloud-hosted certificate operations.
PKI Consultancy — Advisory on cloud cryptographic strategy and hybrid HSM architectures.
