Is Utimaco profitable in 2026?

Utimaco does not disclose profit as a private company, but it reported over 100 million euros revenue with 34% year over year growth for fiscal year ended March 31, 2022. No post-2022 revenue has been publicly disclosed, so current profitability cannot be confirmed.

Utimaco has been majority owned by SGT Capital since the deal closed in June 2022, financed via Bain Capital Credit. Minority holders include EQT, Tyrus Capital, Capital Dynamics, Commonfund, and management, per a 2026 Bundesanzeiger-sourced corporate structure entry.

Could AI replace Utimaco's hardware security modules?

Unlikely soon: Utimaco's core products are FIPS 140-3, PCI HSM, and Common Criteria certified physical hardware, certifications that require years of regulatory validation AI cannot replicate. As of May 2026 Utimaco claims to be the only vendor with full FIPS 140-3 coverage across its entire HSM portfolio.

Who is Utimaco's biggest competitor?

Thales leads the global HSM market with about 28.2% share as of a June 2026 market report, versus Utimaco's roughly 14.1% share in third place behind Entrust's 18.5%. Thales has also been consolidating the space through its Imperva acquisition.

Did Utimaco sell off part of its business?

Yes. Utimaco carved out and sold its Telecom Solutions lawful interception business to Swiss investor INVISION and German PE firm PINOVA, with the new independent entity beginning operations October 1, 2025.

What is Utimaco's market position in the HSM industry?

Utimaco holds roughly 14.1% of the global hardware security module market as of a June 2026 industry report, ranking third behind Thales (28.2%) and Entrust (18.5%), ahead of IBM (12.4%) and Futurex (7.9%).

Cybersecurity companies · subsidiary of SGT Capital LLC (majority shareholder; PE-backed private company) · Germany

Utimaco

utimaco.com ↗

German maker of hardware security modules that safeguard encryption keys for banks and governments.

Hard to displace

Assessed 21 July 2026 · Evidence as of 21 July 2026

Strong structural protection; the business model survives ai pressure.

On the recordSince 21 July 2026 · Checkable from end of 2026 · Every call on the record Checkpoint: EU quantum safe cryptography transition deadline pushes customers to upgrade HSMs

The call

Utimaco sits inside a regulatory wall that keeps US cloud giants out, while AI's hunger for machine identity keys adds work rather than removing it.

Utimaco makes physical security devices that banks, governments, and companies use to protect their digital encryption keys. It is hard to replace because customers need special government certifications (like FIPS 140-3) before they can switch, manufacturing takes years to build from scratch, and European companies must keep their most sensitive keys inside Europe by law, which blocks Amazon, Microsoft, and Google from competing in that part of the business. The big thing to watch is whether the owners, SGT Capital, decide to sell the company in the next couple of years, since they have owned it since 2022 and typically exit their investments within five to seven years.

Why

AI pressure: None apparent. AI agents need machine identities and keys too, so agentic AI growth adds demand for Utimaco's HSMs rather than replacing them. Could AI do the core job? Unlikely.

Bigger players: Thales (post Imperva acquisition) and Entrust. Both bigger rivals are consolidating the HSM market through acquisitions, squeezing Utimaco's number three spot from above. Could a giant copy it? No, they are blocked.

What protects it. FIPS 140-3 and BSI certifications plus EU data sovereignty rules that keep US cloud giants out of regulated on premise deployments.

What would change this call

AWS, Azure, or GCP announces a BaFin/BSI-certified EU-hosted sovereign HSM service. Would show hyperscalers breaching the regulatory moat protecting Utimaco's core segment.
SGT Capital sells or announces exit from its Utimaco stake, 2026-2029. Ownership change could alter strategy, investment, or trigger a sale to a larger rival.
Utimaco's revenue growth rate through FY2027 filings versus PQC mandate deadlines. Shows whether the 2026-2030 post-quantum upgrade cycle actually lifts sales as predicted.

Key numbers

Number 3 global HSM vendor at about 14% share (2026-06-30)
Revenue reached e100.4m, up from e34.8m in 2017 (2022-03-31)
Headcount grew to 597 employees, up 7.5% (2025-12-31)

Named risks

SGT Capital exit or change-of-control event could disrupt strategy after PE hold since June 2022. Severity: medium
Thales bundling deals (post-Imperva) could pull regulated enterprise customers from Utimaco. Severity: medium
Failure to convert EU PQC transition mandates (2026-2030) into revenue lift by end-2027. Severity: medium
Multiple 2025-2026 C-suite changes (new CFO, new Chief Innovation Officer) create leadership continuity risk. Severity: low
Headcount and revenue impact from October 2025 Telecom Solutions carve-out not fully quantified. Severity: low

Rivals, as read in July 2026

Rival	Direction	Evidence
Thales	gaining on	Market leader at ~28.2% share vs Utimaco's ~14.1%, consolidating via Imperva acquisition, as of June 2026
Entrust	contesting	Holds ~18.5% HSM market share, second-place rival ahead of Utimaco's ~14.1% as of June 2026
AWS/Azure/GCP cloud KMS	contesting	Compete in commodity cloud key management tier but structurally barred from EU sovereign/regulated HSM segment
IBM	losing to	Utimaco outranks IBM at ~14.1% vs IBM's ~12.4% HSM share as of June 2026

Questions people ask

Is Utimaco profitable in 2026?: Utimaco does not disclose profit as a private company, but it reported over 100 million euros revenue with 34% year over year growth for fiscal year ended March 31, 2022. No post-2022 revenue has been publicly disclosed, so current profitability cannot be confirmed.
Who owns Utimaco?: Utimaco has been majority owned by SGT Capital since the deal closed in June 2022, financed via Bain Capital Credit. Minority holders include EQT, Tyrus Capital, Capital Dynamics, Commonfund, and management, per a 2026 Bundesanzeiger-sourced corporate structure entry.
Could AI replace Utimaco's hardware security modules?: Unlikely soon: Utimaco's core products are FIPS 140-3, PCI HSM, and Common Criteria certified physical hardware, certifications that require years of regulatory validation AI cannot replicate. As of May 2026 Utimaco claims to be the only vendor with full FIPS 140-3 coverage across its entire HSM portfolio.
Who is Utimaco's biggest competitor?: Thales leads the global HSM market with about 28.2% share as of a June 2026 market report, versus Utimaco's roughly 14.1% share in third place behind Entrust's 18.5%. Thales has also been consolidating the space through its Imperva acquisition.
Did Utimaco sell off part of its business?: Yes. Utimaco carved out and sold its Telecom Solutions lawful interception business to Swiss investor INVISION and German PE firm PINOVA, with the new independent entity beginning operations October 1, 2025.
What is Utimaco's market position in the HSM industry?: Utimaco holds roughly 14.1% of the global hardware security module market as of a June 2026 industry report, ranking third behind Thales (28.2%) and Entrust (18.5%), ahead of IBM (12.4%) and Futurex (7.9%).

Timeline

2026-05-28Axel Deininger, former secunet CEO, appointed Utimaco Chief Innovation Officer
2026-05-28Utimaco joins VAST Data's Cosmos AI platform for AI infrastructure key management
2025-12-18Utimaco launches u.trust General Purpose HSM CSe-Series with PQC readiness
2025-10-01Telecom Solutions lawful interception unit sold to INVISION and PINOVA, begins independent operation
2025-10Quantum Protect PQC algorithms pass NIST CAVP testing
2025-06Atalla AT1000 Payment HSM receives FIPS 140-3 certification, claimed industry first
2025-04-02Utimaco launches Quantum Protect PQC solution and free PQC simulator, NXP an early customer
2025-04-01Heino Erdmann appointed CFO, succeeding Martin Stamm
2022-06SGT Capital completes majority acquisition of Utimaco after regulatory clearances
2021-08-13EQT agrees to sell majority stake in Utimaco to SGT Capital

Revision history

21 July 2026

First assessed. Hard to displace. The text above is fixed as of this date and is not edited afterwards.

In the same band

Palo Alto Networks AhnLab Moxa