This product was not featured by Product Hunt yet.
It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
Product upvotes vs the next 3
Product comments vs the next 3
Product upvote speed vs the next 3
Product upvotes and comments
Product vs the next 3
BastionXP
Issue TPM/SE hardware-attested X.509 certificates to devices
BastionXP is a cloud-native private PKI CA that performs ACME Device Attestation (hardware attestation + private key in TPM/SE/vTPM/HSM) before signing and issuing short-lived X.509 digital certificates to laptops, mobile devices, IoT, workloads using the ACME protocol. Secures access to your enterprise Wi-Fi, VPN, SaaS apps, MCP gateway/clients in your enterprise network using EAP-TLS and mTLS client authentication. Replaces the legacy SCEP protocol platforms that uses shared credentials.
Top comment
Hey Product Hunt! 👋 I'm Ganesh, founder of BastionXP — and I'm excited to finally share what we've been building. The problem that pushed us to build this: Every small and medium-sized organization we've worked with has the same dirty secret — Wi-Fi passwords written on whiteboards, VPN credentials shared over Slack or email, and SCEP servers running on decade-old configs that nobody wants to touch. When a device gets lost or an employee leaves, nobody really knows what's still authenticated where. The root cause? Legacy protocols like SCEP were designed for a world before cloud, before mobile, and before hardware security chips became standard in every laptop and phone. What BastionXP does: BastionXP is a cloud-native private CA and device identity management platform that issues hardware-attested certificates directly to devices — anchored to the TPM chip on Windows/Linux machines and the Secure Enclave on Macs and iPhones. Secure access to your Wi-Fi, VPN, and SaaS applications in your enterprise network. Replace legacy SCEP with automated ACME Device Attestation. No shared secrets. Zero credential theft. Every access request is cryptographically tied to a physical device you own. It plugs directly into your existing stack — Microsoft Entra ID, Okta, Intune, Jamf Pro — and automates the full certificate lifecycle via the ACME Device Attestation protocol. Your IT team doesn't change workflows; the security posture just becomes airtight. What makes us different: Zero shared secrets — nothing to phish, leak, or rotate manually Hardware-bound identity via TPM + Apple Secure Enclave Drop-in SCEP replacement with automated ACME Device Attestation Works across Wi-Fi (EAP-TLS), ZTNA-VPN, and SaaS apps from one platform We started with a simple belief: identity is only as secure as the hardware it lives on. Software-only credentials can be copied. Silicon can't. Try it free — no credit card, no sales call. https://www.bastionxp.com/trial We'd love your feedback, especially from IT and security folks who've battled SCEP or struggled with certificate management at scale. Happy to answer any questions below!
About BastionXP on Product Hunt
“Issue TPM/SE hardware-attested X.509 certificates to devices”
BastionXP was submitted on Product Hunt and earned 2 upvotes and 1 comments, placing #156 on the daily leaderboard. BastionXP is a cloud-native private PKI CA that performs ACME Device Attestation (hardware attestation + private key in TPM/SE/vTPM/HSM) before signing and issuing short-lived X.509 digital certificates to laptops, mobile devices, IoT, workloads using the ACME protocol. Secures access to your enterprise Wi-Fi, VPN, SaaS apps, MCP gateway/clients in your enterprise network using EAP-TLS and mTLS client authentication. Replaces the legacy SCEP protocol platforms that uses shared credentials.
On the analytics side, BastionXP competes within SaaS, Tech and Security — topics that collectively have 676.6k followers on Product Hunt. The dashboard above tracks how BastionXP performed against the three products that launched closest to it on the same day.
Who hunted BastionXP?
BastionXP was hunted by Ganesh Velrajan. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
For a complete overview of BastionXP including community comment highlights and product details, visit the product overview.