Device Authority has been recognised as a Sample Vendor for IoT Authentication   in both the Gartner® Hype Cycle™ for Digital Identity, 2026 and the Gartner® Hype Cycle™ for Zero-Trust Technology, 2026. 

Phil Englert recently highlighted an uncomfortable reality facing healthcare organizations: legacy medical devices remain one of the most significant cybersecurity risks in modern healthcare environments. Unsupported operating systems, limited security capabilities, patching challenges, and increasing cyber threats create a perfect storm for hospitals attempting to balance patient care, operational continuity, and cybersecurity.

The challenge is not new, but it is becoming more urgent.

Device Authority, a global leader in identity and access management (IAM) for IoT and OT devices, today announced a new strategic partnership with Xalient, a leading provider of identity‑led cybersecurity services and managed solutions.

The collaboration will strengthen Xalient’s IoT security offering through the integration of Device Authority’s KeyScaler platform, enabling scalable, automated protection for connected devices across complex enterprise environments.

This year marks a pivotal shift in global cybersecurity regulation. Mandatory cyber incident reporting is no longer a recommendation—it is a legal obligation.

Across major jurisdictions, regulations such as the EU’s Cyber Resilience Act (CRA), the NIS2 Directive, and the U.S. Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) are introducing strict reporting timelines, expanded scope, and significant penalties for non-compliance. For many organizations, particularly those operating connected devices at scale, this represents a fundamental change in how cyber risk must be managed.

A  global leader in point-of-care ultrasound and medical imaging solutions has transitioned to a dedicated KeyScaler-as-a-Service (KSaaS) environment, marking a significant step forward in its ability to scale securely, optimise performance, and gain deeper operational insight across its connected device ecosystem.

This move reflects a growing demand from enterprise customers for greater flexibility, control, and customisation in how IoT and OT security platforms are deployed and managed—particularly as device estates expand and regulatory expectations continue to evolve.

In automotive and manufacturing, digital transformation is no longer a future ambition—it’s operational reality.

Connected vehicles, smart factories, and increasingly complex supply chains have introduced a new dependency: trusted device identity and secure key management at scale.

And yet, many organisations are still:

• Operating without a formal PKI/KMS strategy
• Relying on legacy systems not designed for IoT ecosystems
• Struggling to scale securely across production environments

This gap is no longer just a technical issue—it’s a business risk.

The latest European Commission guidance on the Cyber Resilience Act sends a clear message to manufacturers of connected products: cybersecurity must be designed in from the start, maintained throughout the product lifecycle, and supported by demonstrable processes for risk management, vulnerability handling and ongoing support.

For organizations building, deploying and managing connected devices, this is a significant shift. The CRA is not simply another compliance exercise. It reflects a broader market reality that connected products can no longer rely on fragmented security controls, manual processes or assumptions of trust. Security has to be continuous, operational and scalable.

That matters especially in IoT and OT environments, where products often have long lifespans, depend on complex supply chains, rely on third-party components and remote services, and may remain in use for many years after deployment.

RSAC remains the cybersecurity event. It is where the industry gathers to compare notes, pressure-test assumptions, spot the next wave of market change and, just as importantly, build the partnerships that will shape what comes next.

This year in San Francisco, that energy was unmistakable.

There was real buzz across the city, from the show floor and executive meetings to the side events and industry gatherings that increasingly define RSAC week. For Device Authority, it was another valuable opportunity to meet new contacts, deepen existing relationships and explore partnerships that can help us move faster in a market that is changing rapidly.

One thing is yet again clear after this year’s event: cybersecurity is not standing still. It is consolidating, converging and accelerating.

by Darron Antill, CEO Device Authority

Across the automotive industry, conversations around PKI and key management have moved from technical design discussions to board-level priorities.

Regulatory frameworks such as UNECE WP.29, ISO 21434, and the emerging EU Cyber Resilience Act are fundamentally reshaping how OEMs and supply chain partners must think about cryptographic control. At the same time, vehicle architectures are becoming increasingly software-defined, connected, and supply-chain dependent.