--- title: "Key2XS Deployment Models: Secure, Flexible, and Built for Critical Infrastructure" description: "Key2XS deployment models compared: SaaS, private cloud and on-prem options built for critical infrastructure and OT environments." image: https://key2xs.com/hubfs/ChatGPT%20Image%2023%20sep%202025%2c%2009_55_33.png --- [![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) ![Key2XS](https://key2xs.com/hubfs/img/logo-blue-horizontal.svg)](https://key2xs.com/?hsLang=nl) Why Governance? [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=nl) [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=nl) [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=nl) Analyst recognition [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=nl) Industries [Government](https://key2xs.com/sectors/government?hsLang=nl) [Utilities](https://key2xs.com/sectors/utilities?hsLang=nl) [Water management](https://key2xs.com/sectors/water-management?hsLang=nl) [Transport](https://key2xs.com/sectors/transport?hsLang=nl) [Telecom](https://key2xs.com/sectors/telecom?hsLang=nl) Platform [Product](https://key2xs.com/products?hsLang=nl) [How it works](https://key2xs.com/?hsLang=nl#how-it-works) [Integrations](https://key2xs.com/integrations?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) Partners Technology partners [SailPoint](https://key2xs.com/sailpoint-partnership?hsLang=nl) [One Identity](https://key2xs.com/partners/one-identity?hsLang=nl) [Microsoft Entra ID](https://key2xs.com/partners/entra-id?hsLang=nl) [Okta](https://key2xs.com/partners/okta?hsLang=nl) [OpenText](https://key2xs.com/partners/opentext?hsLang=nl) [iLOQ](https://key2xs.com/partners/iloq?hsLang=nl) [ASSA ABLOY](https://key2xs.com/partners/assa-abloy?hsLang=nl) Resell & Implementation partners [Hanab](https://key2xs.com/partners/hanab?hsLang=nl) Resources [Resource center](https://key2xs.com/resources?hsLang=nl) [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=nl) [Events](https://key2xs.com/events?hsLang=nl) Meet us at Navigate [Navigate Austin · Oct 5-8](https://key2xs.com/events/sailpoint-navigate-austin?hsLang=nl) [Navigate London · Nov 2-4](https://key2xs.com/events/sailpoint-navigate-london?hsLang=nl) [ROI calculator](https://key2xs.com/roi-calculator?hsLang=nl) [FAQ](https://key2xs.com/?hsLang=nl#faq) [News](https://key2xs.com/news-archive?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) [← The Key2XS journal](https://key2xs.com/news-archive?hsLang=nl) Security # Key2XS Deployment Models: Secure, Flexible, and Built for Critical Infrastructure Oct 06, 2025 · 3 min read · by the Key2XS team ![Key2XS Deployment Models](https://key2xs.com/hubfs/ChatGPT%20Image%2023%20sep%202025%2c%2009_55_33.png) **In short:** Key2XS deploys the way critical infrastructure requires: SaaS, private cloud or on-premises, including air-gapped OT environments. The governance model — identity-driven rights, automatic revocation, audit trail — is identical in every deployment. # Key2XS Deployment Models: Secure, Flexible, and Built for Critical Infrastructure Critical infrastructure organizations face a unique challenge when modernizing their security posture. While IT systems increasingly rely on cloud-native architectures, OT (Operational Technology) environments are often air-gapped, heavily regulated, and resistant to rapid change. This creates a tension: how can organizations adopt modern IAM-integrated key management without sacrificing the resilience and security of their OT landscape? The answer lies in **flexible deployment models** and Key2XS, powered by [KubeDNA](http://www.kubedna.com), delivers exactly that. ## Why Deployment Flexibility Matters Physical key systems remain essential for securing critical assets such as substations, refineries, water facilities, and transport hubs. However, integrating these systems with IAM platforms requires a deployment strategy that fits both IT and OT realities: - **Air-gapped OT environments** where external connectivity is tightly restricted. - **Cloud-first strategies** driven by IT teams seeking scalability and cost efficiency. - **Hybrid environments** where cloud and on-prem coexist, with specific workloads distributed according to security, compliance, or operational needs. A “one size fits all” approach does not work in this context. That’s why Key2XS offers multiple deployment models, ensuring organisations can choose the architecture that best aligns with their resilience, compliance, and operational objectives. ## ![bluckey_container_trans](https://key2xs.com/hs-fs/hubfs/bluckey_container_trans.png?width=110&height=165&name=bluckey_container_trans.png) ## Powered by KubeDNA: Kubernetes at the Core At the heart of this flexibility is **KubeDNA**, a Kubernetes management platform that provides secure, automated, and standardized container orchestration. By building on Kubernetes, Key2XS ensures: - **Consistency** across on-prem, hybrid, and multi-cloud deployments. - **Security by design**, with hardened images and controlled access policies. - **Scalability**, allowing organizations to expand their Key2XS footprint as new assets or geographies are added. - **Resilience**, with self-healing clusters and disaster-recovery capabilities. KubeDNA enables Key2XS to deliver the same functionality regardless of the deployment model, simplifying operations while maintaining compliance with strict OT and regulatory requirements.   ## ![ChatGPT Image 23 sep 2025, 09_55_33](https://key2xs.com/hs-fs/hubfs/ChatGPT%20Image%2023%20sep%202025%2c%2009_55_33.png?width=1024&height=1024&name=ChatGPT%20Image%2023%20sep%202025%2c%2009_55_33.png) ## Deployment Models for Every Environment ### 1. **Cloud-Native Deployment** For organizations embracing cloud adoption, Key2XS can be fully deployed in a secure cloud environment. This model provides: - Rapid provisioning and scaling. - Cost-efficient infrastructure management. - Seamless integration with cloud-hosted IAM solutions like [One Identity](http://www.oneidentity.com), [Microsoft](http://www.microsoft.com) [Entra ID](https://key2xs.com/integrations/entra-id-iloq?hsLang=nl), [Okta](http://www.okta.com), or [SailPoint](http://www.sailpoint.com). ### 2. **On-Premises Deployment** For air-gapped OT systems, Key2XS can be installed entirely on-premises. This model provides: - Full control within the organization’s own data centers or industrial networks. - Strict compliance with data sovereignty requirements. - Operation without any dependency on external connectivity. ### 3. **Hybrid Deployment** In reality, many organizations operate in **hybrid** mode. With Key2XS, workloads can be distributed flexibly: - Cloud for IAM integration, analytics, and AI-driven key planning. - On-premises for real-time key system operations in OT networks. - A seamless bridge between IT and OT, without exposing sensitive environments. ## Built for Critical Infrastructure By leveraging KubeDNA’s Kubernetes management capabilities, Key2XS is not just a SaaS solution, it is a **deployment-agnostic platform** designed for the realities of critical infrastructure. Whether you are a DSO managing thousands of transformer houses, a refinery operator balancing IT and OT priorities, or a government entity bound by sovereignty rules, Key2XS can adapt to your architecture without compromise. ### Conclusion In a world where OT and IT must increasingly converge under frameworks like **CER** and **[NIS2](https://key2xs.com/nis2-directive?hsLang=nl)**, deployment flexibility is no longer optional, it is mission-critical. With Key2XS, powered by KubeDNA, organisations gain the confidence to deploy where they need, how they need, without sacrificing security, compliance, or performance. **Key2XS: Bridging the digital and physical access world, securely and flexibly.** ![](https://key2xs.com/hubfs/1587550138006.jpeg)![](https://key2xs.com/hubfs/img/niels-bakker.png)![](https://key2xs.com/hubfs/1746630921693.jpeg)![](https://key2xs.com/hubfs/1696359051569.jpeg) **Written by the Key2XS team** Key2XS is founder-run. Questions about this piece land with the people who built the platform. [Talk to us](https://key2xs.com/contact?hsLang=nl). ## Keep reading [![](https://key2xs.com/hubfs/186300922_m.png) **SoftBank’s third-party data breach: what happened, what was exposed, and how Key2XS would have changed the story**Dec 01, 2025](https://key2xs.com/news/softbanks-third-party-data-breach-what-happened-what-was-exposed-and-how-key2xs-would-have-changed-the-story?hsLang=nl) [![](https://key2xs.com/hubfs/Transparant-Apr-16-2025-07-15-14-3488-AM.png) **Key2XS and CER Compliance: Smarter Access for Critical Infrastructure**May 15, 2025](https://key2xs.com/news/key2xs-and-cer-compliance-smarter-access-for-critical-infrastructure?hsLang=nl) [![](https://key2xs.com/hubfs/Key2XSKubeDNA.jpg) **Key2XS partners with KubeDNA to deliver compliant, secure, and scalable access management infrastructure**Apr 23, 2025](https://key2xs.com/news/key2xs-partners-with-kubedna-to-deliver-compliant-secure-and-scalable-access-management-infrastructure?hsLang=nl) ## Govern the keys you already have See identity, policy and physical keys in one 30-minute demo, scoped to your estate. [Book a demo](https://key2xs.com/contact?hsLang=nl) [More in the journal](https://key2xs.com/news-archive?hsLang=nl) ### Contact us [Wilhelmina van Pruisenweg 104, 2595 AN Den Haag](https://maps.google.com/?q=Wilhelmina+van+Pruisenweg+104+Den+Haag) Kraanspoor 50, 1033 SE Amsterdam, The Netherlands [info@key2xs.com](mailto:info@key2xs.com) [+31(0)70 2045180](tel:+31(0)702045180) ### Platform - [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=nl) - [Product](https://key2xs.com/products?hsLang=nl) - [Integrations](https://key2xs.com/integrations?hsLang=nl) - [ROI calculator](https://key2xs.com/roi-calculator?hsLang=nl) ### Compliance - [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) - [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=nl) - [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=nl) ### Company - [SailPoint partnership](https://key2xs.com/sailpoint-partnership?hsLang=nl) - [Resource center](https://key2xs.com/resources?hsLang=nl) - [Events](https://key2xs.com/events?hsLang=nl) - [News](https://key2xs.com/news-archive?hsLang=nl) - [Contact](https://key2xs.com/contact?hsLang=nl) [![Penetration tested and verified by Sekurno](https://key2xs.com/hubfs/img/badges/sekurno-pentest-badge-white.svg)](https://www.sekurno.com/verified/key2xs) [![KuppingerCole Analysts Rising Star 2026 badge for Key2XS](https://key2xs.com/hubfs/img/badges/kuppingercole-rising-star-2026-key2xs.svg)](https://key2xs.com/analyst-recognition?hsLang=nl) --- ![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) Key2XS, pronounced “key to access” © 2026 Key2XS B.V. All rights reserved [Privacy](https://key2xs.com/privacy-statement?hsLang=nl) Cookie Preferences Patent Pending Nr: 2040721 & 2041284 Key2XS & ActiveAuth are registered trademarks of Key2XS Assets B.V. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Key2XS", "url" : "https://key2xs.com/news/author/key2xs-2" }, "dateModified" : "2025-10-07T08:06:55.197Z", "datePublished" : "2025-10-06T07:00:00.000Z", "headline" : "Key2XS Deployment Models: Secure, Flexible, and Built for Critical Infrastructure", "image" : [ "https://key2xs.com/hubfs/ChatGPT%20Image%2023%20sep%202025%2c%2009_55_33.png" ], "mainEntityOfPage" : { "@id" : "https://key2xs.com/news/key2xs-deployment-models-secure-flexible-and-built-for-critical-infrastructure", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://key2xs.com/hubfs/logo%20blue.svg" }, "name" : "Key2XS B.V." } } ```