DigiCert’s acquisition of Vercara is complete: DigiCert announced the agreement on August 14, 2024, and closed the deal on September 23, 2024. Vercara was sold by Golden Gate Capital and GIC. The companies did not disclose the purchase price. Strategically, the deal added managed DNS, DDoS mitigation and application-security services to DigiCert’s established certificate and public-key infrastructure business.
What happened, and when?
DigiCert announced a definitive agreement to acquire Vercara on August 14, 2024. The announcement said the transaction was expected to close later that year, subject to customary closing conditions. DigiCert subsequently confirmed that it completed the acquisition on September 23, 2024. Vercara is now a DigiCert company, and its products continue to be presented under Vercara branding.
The announcement named Golden Gate Capital and GIC as the sellers. It did not disclose financial terms. DigiCert’s announcement and completion notice establish the transaction timeline and status.
What Vercara added to DigiCert
DigiCert’s core business includes digital certificates, public-key infrastructure (PKI) and certificate lifecycle management. Those tools help organizations establish identity and encrypt connections for websites, devices, users and software. Vercara brought services focused on domain resolution, network availability and application protection.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- UltraDNS: Managed authoritative DNS, which provides the records that direct a domain’s traffic to the relevant services.
- UltraDDoS Protect: DDoS mitigation intended to absorb or divert malicious traffic that could overwhelm online services.
- UltraWAF and UltraAPI: Web application firewall and API-protection capabilities. A WAF helps defend web applications against application-layer attacks; API protection addresses risks involving software interfaces and their use.
- UltraEdge: Edge and application-delivery and security capabilities.
- UltraDDR: Protective or recursive DNS security referenced in later Vercara materials. Unlike authoritative DNS, recursive DNS helps users or devices look up domains and can block access to malicious destinations.
The distinction matters: DNS, certificates, DDoS mitigation and application security solve related but different problems. Together, they span domain control, identity and encryption, traffic availability and protection for applications—not a single interchangeable security function.
Why certificates and DNS fit together
A certificate authority needs to verify that an applicant controls a domain before issuing certain certificates. One way to demonstrate control is to publish a verification token in DNS. When one provider manages both the certificate workflow and authoritative DNS, that verification can potentially involve fewer manual handoffs.
DigiCert described the acquisition as an opportunity to make DNS and certificate-management workflows more unified, including easier domain-control validation and DNS configuration. Vercara’s post-closing explanation described the potential for customers to introduce a domain, verify ownership and obtain a certificate with fewer steps. That is an integration opportunity, not evidence that every workflow became automatic when the deal closed.
Rank #2
- HARDWARE 2FA AND MFA: FIDO Alliance Certified FIDO2 v2.1 with CTAP2 plus legacy U2F and CTAP1 for strong two-factor login and passwordless sign-in on services that support security keys
- BUILDING ACCESS ON ONE CARD: MIFARE DESFire EV2 4K applet with AES encryption adds office door and physical access control alongside digital authentication
- CERTIFIED SECURE ELEMENT: An NXP Common Criteria EAL6+ certified secure controller and Java Card platform protects your keys on a tamper-resistant chip
- DUAL INTERFACE SMART CARD: Contactless NFC ISO 14443 plus ISO 7816 contact reader support in an ISO 7810 ID-1 format that is passive and needs no battery
- SWISS ENGINEERED DESIGN: Built by Cryptnox as a single card for authentication and access control and backed by a 2 year warranty
The fit also has limits. The potential is strongest when the same organization controls both the domain’s authoritative DNS and certificate issuance. It may be less direct when a hosting company, managed service provider or separate internal team controls DNS, or when changes require lengthy approval.
How the deal changes DigiCert’s position
The acquisition broadened DigiCert’s portfolio from digital identity and trust toward online availability and application protection. DigiCert gained Vercara’s DNS, DDoS and web and API security capabilities while retaining its established focus on certificates and PKI. DigiCert later described the acquisition as part of its broader platform strategy and identified UltraDNS as an expansion of its capabilities in a FY2025 update.
That expansion gives DigiCert more opportunities to sell across adjacent needs: certificate customers may also need managed DNS or DDoS mitigation, while Vercara customers may need certificates or PKI. It also puts the company in a broader competitive field that includes DNS specialists, cloud and edge-security providers, and vendors offering combinations of CDN, WAF and DDoS services.
Rank #3
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
The deal did not, by itself, prove that the products became one technically unified platform or that customers had to adopt a particular product. DigiCert already had DNS-related offerings, including Constellix and DNS Made Easy, so buyers may reasonably ask how those services relate to UltraDNS and which products are intended for which use cases. The acquisition expands the portfolio; it does not establish a universal product roadmap or eliminate the case for a multi-vendor architecture.
What customers should consider
Customers should distinguish ownership changes and strategic plans from specific contractual or technical changes. The acquisition alone does not show that a customer must migrate DNS, receives Vercara services automatically, or has an integrated certificate workflow available for every setup. Before consolidating services, ask DigiCert or the relevant account team for product-specific answers.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Which DNS product is appropriate for the use case, and how do UltraDNS, Constellix and DNS Made Easy differ?
- Are existing contracts, service-level commitments, support contacts and renewal terms unchanged?
- Which certificate-validation steps are integrated today, and which still require customer action?
- Is a DNS or traffic-routing migration required, or is it optional?
- How are charges calculated for DNS queries, web traffic, applications and protected bandwidth?
- What deployment options, APIs and automation integrations are supported for the customer’s cloud, on-premises or hybrid environment?
- How are DNS logs and security telemetry handled, and what service-level commitments apply to the specific products being purchased?
- Can the organization continue using a different DNS, certificate, WAF or DDoS provider if it prefers a multi-vendor setup?
Plan DNS changes as infrastructure migrations
Changing authoritative DNS is not necessarily a simple nameserver update. A migration plan may need to account for TTLs, DNSSEC and registrar DS records, mail and verification records, health checks, traffic steering, delegated zones and integrations that depend on exact DNS responses. Poor coordination can disrupt certificate validation, email, APIs or SaaS connections. Buyers should confirm the scope and rollback plan with their technical teams before changing production DNS.
Rank #4
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
Match DDoS protection to the assets and routing design
Vercara describes UltraDDoS Protect as offering always-on or on-demand deployment, with DNS- and BGP-based traffic-diversion options and 24/7/365 SOC support. The appropriate design depends on what is being protected—such as websites, APIs, data centers or cloud workloads—and how traffic can be diverted. A purchase should specify covered assets, onboarding, routing, bandwidth and response commitments; buying a service does not automatically protect every system.
Evaluate WAF and API protection separately
Web application firewall capabilities and API security are related but not identical. API requirements can include discovery, schema validation, authentication and authorization analysis, rate limits, and detection of bots or abuse. Buyers should verify which of these functions a selected product provides rather than assuming that a WAF or a broader acquisition covers every API-security need.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the financial terms do—and do not—tell us
DigiCert and the sellers did not disclose the purchase price, valuation, revenue multiple or payment structure in the announcement. A secondary report mentioned an estimate of roughly $200 million, but DigiCert did not confirm that figure; it should not be treated as the transaction’s verified value. No disclosed price means investors and customers cannot calculate a confirmed valuation multiple from the companies’ announcement.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteBest Value
- SECURITY KEY FOR ENTERPRISE ACCESS: Supports FIDO2 passkeys and U2F for secure authentication across enterprise IT systems.
- PHISHING-RESISTANT AUTHENTICATION: Enables passwordless login with secure on-device credential storage and PIN-based user verification.
- COMPATIBLE WITH ENTERPRISE SYSTEMS: Works with FIDO2, WebAuthn, and U2F across enterprise, cloud, and modern IT environments.
- DRIVERLESS FIDO2 AUTHENTICATION: FIDO2 works natively with modern browsers and platforms. No drivers required.
- USB AND NFC CONNECTIVITY: Supports authentication via USB-C and NFC. No batteries required.
Pricing signals for buyers
The acquisition does not establish that DigiCert’s combined services are cheaper than alternatives. DigiCert’s purchase page lists an entry-level DNS Essentials offering with a $300 annual subscription signal, 10 million queries per month, 20 or more domains and 6,000 or more records; additional queries are listed at $5 per million. Those are page-listed figures, not a like-for-like comparison of enterprise services. The same page presents enterprise UltraDNS pricing as tailored rather than transparent self-service pricing.
Vercara lists Standard, Plus and Premium UltraSecure packages, with pricing dependent on applications, DNS queries and web traffic, and positions UltraDDoS Protect as quote-based. See the UltraSecure and UltraDDoS Protect pages for the service descriptions. A useful price comparison must match traffic, query volume, protected bandwidth, support, deployment model and contract term.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
