护词(HuKey)是面向企业的证书全生命周期自动化平台:自动发现网络中的每一张证书,统一对接 ACME、Microsoft AD CS 与离线 CA 签发,推送到服务器与网络设备并验证生效,彻底告别证书过期事故。同一平台也提供机密与密钥管理能力。HuKey is an enterprise certificate lifecycle automation platform: it discovers every certificate on your network, issues through ACME, Microsoft AD CS and offline CAs, deploys to servers and network devices and verifies the result — ending certificate-expiry outages. Secrets and key management are available on the same platform.
先看见,再签发,再部署,最后验证。每一步都有审批、变更窗口与审计记录。See it, issue it, deploy it, verify it — with approvals, change windows and an audit record at every step.
网络扫描、加密套件扫描、证书透明度(CT)监控与 Nessus 结果导入,四类来源持续发现影子证书、即将过期与弱算法证书,并按严重程度排序。Network scans, cipher scans, Certificate Transparency monitoring and Nessus import — four sources that surface shadow, expiring and weak-algorithm certificates, ranked by severity.
对接 ACME(DigiCert、Let’s Encrypt)、Microsoft AD CS 与离线 CA,也可使用内置 CA;沿用你现有的 PKI,无需推倒重来。Connect ACME (DigiCert, Let’s Encrypt), Microsoft AD CS and offline CAs, or use the built-in CA — keep your existing PKI, no rip-and-replace.
通过设备插件完成预检、备份、安装与重载,并确认设备已使用新证书;失败自动回滚。Device plugins run preflight, backup, install and reload, then confirm the device serves the new certificate — rolling back on failure.
续期前锁定设备、走审批、等变更窗口,再执行,避免证书更换变成一次新的事故。Lock the devices, get approval and wait for the change window before executing — so a renewal never becomes a new incident.
SSH 证书仅 15 分钟有效;代理不开放入站端口;敏感变更需第二位管理员确认;全部操作留痕。SSH certificates last 15 minutes; agents open no inbound ports; sensitive changes need a second admin; every action is logged.
同一平台支持机密存储、加密即服务、身份访问控制,以及动态机密与 AI Agent 身份令牌。The same platform offers secret storage, encryption as a service and identity-based access control, with dynamic secrets and AI-agent identity tokens supported too.
HuKey 把发现、签发、部署和验证串成一条受控的自动化流水线,对接你已有的 CA 与设备,而不是要求你重建 PKI。HuKey chains discovery, issuance, deployment and verification into one controlled automation pipeline that works with the CAs and devices you already have — not a rebuilt PKI.
大模型与自动化 Agent 正在成为新的"特权用户"——它们调用工具、访问数据、与其他 Agent 协作决策。HuKey 作为统一的令牌保险库,为每一个 LLM、Agent 与工具调用颁发并托管身份凭据,无论是 A2A(Agent-to-Agent)协作还是工具调用(Tool Calling)场景,都能做到可信、可控、可审计。LLMs and autonomous agents are becoming a new class of privileged user — calling tools, accessing data, and coordinating with other agents. HuKey acts as a unified token vault, issuing and custodying identity credentials for every LLM, agent, and tool call — so A2A (agent-to-agent) collaboration and tool-calling stay trusted, controlled, and auditable.
从金融到政企、从电信到云原生,HuKey 提供贴合场景的落地方案。From finance to government, telecom to cloud-native — HuKey adapts to how each industry actually operates.
满足金融行业证书与密钥管理的高可用、高合规要求。Meets the high-availability and compliance bar for certificate and key management in finance.
支持信创环境私有化部署,满足数据不出域与国产化要求。On-premises deployment for Xinchuang environments, meeting data-sovereignty and localization requirements.
与 Kubernetes、CI/CD 流水线集成,证书自动签发续期,机密不落盘。Integrates with Kubernetes and CI/CD pipelines — automated certificate issuance and renewal, secrets never written to disk.
大规模终端与网元证书的集中发现、签发、轮换与生命周期管理。Centralized discovery, issuance, rotation, and lifecycle management for certificates across massive device and network-element fleets.
HuKey 通过分销商与经销商,把证书与密钥安全能力带给更多企业客户。HuKey reaches more enterprise customers through its distributor and reseller partners.
全球网络安全专业增值分销商,业务覆盖 50 多个国家,可服务 170 多个国家和地区,拥有 3,000 多名网络安全专业人员;香港办公室位于九龙观塘。A global cybersecurity specialist and value-added distributor with offices in 50+ countries, able to serve customers in 170+ countries, and 3,000+ cybersecurity professionals. Its Hong Kong office is in Kwun Tong, Kowloon.

成立于 2000 年的全球数字化转型咨询公司,在香港、洛杉矶与上海设有枢纽,专注云计算、数据分析、生成式 AI 与网络安全,服务全球企业客户。Founded in 2000, KBQuest is a global digital transformation consulting firm with hubs in Hong Kong, Los Angeles, and Shanghai — focused on cloud, analytics, generative AI, and cybersecurity for enterprise clients worldwide.
加入 HuKey 合作伙伴生态,成为经销商,与我们共同拓展市场、服务更多企业客户。Join the HuKey partner ecosystem as a reseller and grow the market together with us.
"引入 HuKey 后,我们将证书过期引发的生产事故降为零,密钥轮换从人工操作变成了全自动流程。" "After adopting HuKey, certificate-expiry incidents in production dropped to zero, and key rotation went from a manual chore to a fully automated process."
认证与评测事项为规划中,具体进度以官方发布为准。Certifications and evaluations below are on our roadmap — refer to official announcements for current status.
作为一家专注软件与软件支持服务的公司,我们承诺:针对中危(Medium)及以上级别的 CVE 漏洞,为所有客户在一个季度内提供修复方案。As a company focused on software and software support, we commit to delivering a fix for every CVE rated Medium or above, for all clients, within one quarter.
预约一次演示,看看 HuKey 如何发现你网络中的每一张证书,并自动完成续期与部署。Book a demo to see how HuKey finds every certificate on your network and automates renewal and deployment.