Overview
About SecureSME
Easily manage your digital certificates and encryption keys with a secure, cost-effective solution designed for small and medium enterprise. Our cloud based services simplifies the complexity of issuing, renewing and revoking certificates - without the need for extensive in-house expertise. SecureSME services are ISO 27001 certified and IRAP compliant, ensuring comprehensive security standards. Additionally, we are honoured to be recognised as the winner in two categories at the ACT iAwards25 by the Australian Information Industry Association (AIIA): Business & Innovation and Technology Platform. This recognition underscores our commitment and capability to protecting all types of businesses with SecureSME.

Features
Equipping Your Organisation With

PKI as a Service
PKIaaS offering allows you to have your PKI run by experts in the field. SecureSME use best practices, along with dedicated software and hardware to provide the best PKIaaS available in the market.

Token Management
Secure provisioning, lifecycle management and revocation of cryptographic tokens used for authentication, encryption and digital signatures.

Key Management
Secure generation, storage, rotation and destruction of cryptographic keys in a compliant HSM environment to ensure data confidentiality, integrity and authenticity.

Certificate Lifecycle Management
A fully automated, secure, and scalable solution to manage digital certificates across your entire organisation.
Proven Results
Data-driven results
SecureSME has real, measurable results and efficiencies for organisations investing in PKIaaS that align with improved security, operational efficiency and compliance outcomes.
Benefits
Maximise Efficiency with SecureSME
Our PKIaaS for SMEs provides seamless security, simplified management, and powerful encryption - without the complexity.
Prevent costly downtime
Eliminate unplanned outages and keep operations running smoothly.
Cost efficiency
Reduce costs with an efficient and scalable solution.
Total visibility & control
Easily manage certificates and key assets in one place.
Effortless & intuitive
A user-friendly experience designed for simplicity.
Enterprise grade security
Robust protection for your data and digital assets. Meet industry regulations with ease. ISO27001 certified and IRAP compliant.
Expert support
Specialist advice at your fingertips.
Scalable Subscription Bundles
Scalable Subscription Bundles
Find the ideal subscription bundle for your team, with optional add-ons that scale up or down as needed - start a pilot, expand to full deployment, or adjust anytime.
14 DAY FREE TRIAL
CLM as a Service (CLMaaS) Starter Bundle
Starting from:
Recommended for better management of your internal and external certificates and keys
INCLUSIONS
Certificate Lifecycle Management (CLM) for Internal and Externally Issued Certificates
Public Key Infrastructure as a Service (PKIaaS) components optional
BENEFITS
Single pane of glass for Jellyfish, On Premises and Cloud Based Certificates and Keys through our CLM tool
Prevent unplanned outages caused by credential expiry with optional automation, detailed reporting & analytics on credential holdings, and impending expiry notifications. Automation is also available
Flexible setup options: DIY or expert assistance available at a cost
Can scale up to CLM & PKIaaS for Small to Medium Enterprise
No credit card required on free trial
14 DAY FREE TRIAL
CLM & PKIaaS for Small to Medium Enterprise
Starting from:
Recommended for better management of your internal and external certificates and keys as well as basic PKI needs.
INCLUSIONS
Certificate Lifecycle Management (CLM) for Internal and Externally Issued Certificates
Root CA Online Software key
2 x Templates
BENEFITS
Single pane of glass for Jellyfish, On Premises and Cloud Based Certificates and Keys through our CLM tool
Prevent unplanned outages caused by credential expiry with optional automation, detailed reporting & analytics on credential holdings, and impending expiry notifications. Automation is also available
Flexible setup options: DIY or expert assistance available at a cost
Can scale up to CLMaaS and PKIaaS for Medium Enterprise
No credit card required on free trial
Contact Us for a Trial
CLMaaS and PKIaaS for Large Enterprise
Starting from:
Recommended for large or more complex environments with full cloud, on premise or hybrid capabilities. A great option for Microsoft Intune.
INCLUSIONS
Custom Commercial Terms such as SLAs and Contracts Available
Custom Technical Solution Possible such as Online or Offline Capability, Hardware Protection of Key Material, etc
Included Support Element and Dedicated Telephone Service for Emergencies
BENEFITS
Single pane of glass for Jellyfish, On Premises and Cloud Based Certificates and Keys through our CLM tool
Higher level of security through FIPS140 Certified Hardware Protection
Option to have offline components for the highest level of security
Prevent unplanned outages caused by credential expiry with optional automation, detailed reporting & analytics on credential holdings, and impending expiry notifications. Automation is also available
Flexible setup options: DIY or expert assistance available at a cost


Training Centre
Check out our demonstration videos and learn how easy it is to operate Cogito’s Jellyfish.
Visit Jellyfish Training Centre
FAQs
Help & Support
Start with our 14-day free trial—no credit card required. Our self-service portal lets you deploy standard configurations in hours, with guided setup for simplicity. For high-assurance environments, opt for expert-assisted onboarding.
Extensive automation in our platform allows for simple self-service deployment. Standard configurations are also offered and these can be live in minutes. This means you can get into production faster than any other solution we are aware of. It also supports, while complex setups benefit from expert support to meet compliance needs, ensuring a balance of speed and security.
SecureSME provides fully automated workflows for issuing, renewing, revoking, and auditing certificates, reducing significant manual tasks. Our upgraded APIs support seamless integration with DevOps pipelines, Azure AD, OpenID, and SCIM, making automation effortless for dynamic environments.
Yes! SecureSME can scale to a size that exceeds any current PKI use case. It can also scale effortlessly for businesses of all sizes, including fast-paced DevOps environments. Our platform uses modern APIs to automate certificate and key management, supporting high-volume tasks and short-lived certificates common in DevOps. The Jellyfish platform keeps teams or projects securely separated with multi-tenancy, and Role-Based Access Control (RBAC) ensures only authorised users manage sensitive operations. With these features, SecureSME grows with your organisation while maintaining top-tier security and simplicity.
SecureSME supports virtually any envionment. We have automations and integrations with services such as AWS, ACM, Azure, Azure Key Vault, GCP, Service Now, SalesForce and even on premsises solutions. SecureSME through agents can even support disconnected networks for semi automated workflows! It also supports not just PKI uses but broader encryption key management services as well.
Yes. The service is only offered as a highly available service spread across multiple sites. The service has redundancy and capacity built into each site, and then this is fully redundant across other sites within the offering.
Yes, offline roots are support as well as customer signing ceremonies with witnesses.
Yes, SecureSME integrates seamlessly with Azure AD, B2C, OpenID, SCIM, and more, simplifying identity management and enabling automated workflows for certificate and key management.
Our intuitive Jellyfish platform offers a single pane of glass for managing certificates, keys, and tokens, reducing training needs. Automated expiry notifications, detailed analytics, and a user-friendly interface ensure effortless operation.
We offer flexible pricing with subscription-based plans for predictable costs and new usage-based options for cost-effective scaling. Starting at $299 USD/month for the CLMaaS Starter Bundle, plans can be tailored to your needs. Contact us for large enterprise pricing.
- You can log a support ticket using the Jellyfish Ticketing system in the portal. Go to the “left-hand side menu” > Go to “Support” > “Add Ticket” and fill out the details and click “Submit”.
- Alternatively, you can send an email for support at help@securesme.com
- You can edit or remove their payment method by going to “Subscriptions” > “Payment Methods” in the “left-hand side menu” of the portal.
- You need to log in a support ticket help@securesme.com if you want to remove CA’s and delete accounts or tenancies.
With SecureSME, you start by choosing a subscription bundle that suits your needs—and then tailor it further. On top of your base plan, you can easily add features and services to match your requirements. Check out our optional add-ons and its associated cost here.
At SecureSME, we invite all Managed Service Providers, System Integrators, Identity Solutions Experts, and Technology Innovators to join our community and deliver secure, scalable credential and authentication solutions leveraging our proven PKI and Certificate Lifecycle Management expertise.
Read more on our Partner page and submit an enquiry form if you’re interested in becoming a partner.
ISO 27001 is an international standard for information security management systems (ISMS). Certification means our product and services meet this globally recognised standard, ensuring robust data protection.
Cogito Group has ISO 27001:2022 accreditation. This accreditation covers all operational services and development processes. Find out more on Cogito Group’s certifications here.
IRAP (Information Security Registered Assessors Program) is an Australian government security assessment. It confirms our product & services meet their high security standards, especially for handling sensitive data. For more information please visit Australian Cyber Security Centre (ACSC).
ISO 27001 shows global security best practices, while IRAP validates compliance with specific Australian government security requirements.
Achieving both ISO 27001 certification and IRAP compliance demonstrates Cogito Group’s commitment to the highest levels of data security.
We are committed to the highest standards of security, demonstrated by our adherence to several Australian and international frameworks including:
- ISO 27001 This is an international standard for information security management systems (ISMS).
- IRAP (Information Security Registered Assessors Program):This Australian government program assesses our systems against stringent security requirements, especially for handling sensitive data.
- ASD Essential 8:This Australian Signals Directorate framework outlines essential mitigation strategies to protect against common cyber threats.
- NIST 800-171:This US standard, specifically for protecting Controlled Unclassified Information (CUI), is equivalent to the ASD Essential 8.
- DEF STAN 05-138:This UK Ministry of Defence standard outlines security requirements for suppliers handling sensitive information.
Contact Us
Get In Touch with SecureSME