KERYS Software

Name: KERYS Software
Brand: KERYS Software

AI Native

Unifiez vos postes, boostez vos performances IT – La virtualisation sécurisée pensée pour les DSI et RSSI

Est 2024|Valuation $29.5M|Raised $7.2M|5 Ref Customers

LinkedIn 1K|Website|FTEs 19|HQ Palaiseau, Île-de-France, FR

MarketsEndpoint Security (EPP/EDR)

Published Sep 26, 2026

01Common complaints

- If an organization requires widely recognized security attestations immediately - If SOC 2 Type II, ISO 27001, or Common Criteria certifications are mandatory procurement gates, public documentation for KERYS does not appear sufficient to fast-track vendor approval. - If mature, large-scale management tooling is required on day one - Enterprises may prefer VDI or incumbent vendors that provide established admin consoles, monitoring, ITSM workflows, and broad partner ecosystems. - If the primary requirement is remote delivery of desktops or applications - VDI solutions (Citrix/AVD/Horizon) are typically a better fit where the desktop must reside in the datacenter or cloud. - If endpoint hardware is underpowered or standardized with minimal specifications - Local virtualization for multiple environments may require CPU, RAM, and storage upgrades for acceptable performance. - If abundant public peer reviews and references are required for vendor selection - The absence of broad, independently published review coverage increases procurement risk and will likely require deeper reference checks and longer pilots. - Known limitations acknowledged by vendor - Vendor materials and blog posts indicate iterative releases addressing friction points discovered during deployments, suggesting ongoing product maturation is underway. - Roadmap visibility - No public roadmap with specific feature dates was located during this research. - Scale limitations - The product has not been publicly benchmarked at scale in independent sources available for this research. - Security and compliance gaps - Publicly accessible certifications and third-party attestations were not clearly documented in the sources reviewed. - API and integration constraints - No public API documentation or integration specifications were located in this research pass.

Deal disqualifiers (poor fit)

Organizations needing only basic browser or document isolation (lighter containment tools may be more cost-effective)
Enterprises standardized on thin-client or fully centralized VDI strategies
Environments that require current, independently verified certifications before pilots or procurement

02Why they buy

- unique selling points supported by available evidence (vendor and press sources; limited independent validation) - Local secure multi-environment workstation concept intended to reduce the need for multiple physical machines per user - Offline-capable approach compared with centralized VDI/DaaS alternatives - Vendor-described architecture emphasizing fixed resource assignment to reduce side-channel risk, dedicated core allocation, and a hypervisor-layer encryption claim - Where competitors may have clear advantages - Citrix/AVD/Horizon: enterprise maturity, referenceability, integrations, and proven large deployments - HP Wolf Security / Sure Click: established product line for containment and a clearer market footprint with broader ecosystem presence

03Field reports

Availability note (important)

KERYS appears to be an early-stage enterprise product. Major review platforms (G2, TrustRadius, Gartner Peer Insights) did not show an accessible product listing or public reviews for KERYS Software or YS::Desktop in the search results available for this research.

Vendor-published testimonials (vendor-provided, not independently verified)

The vendor homepage includes testimonials attributed to senior roles; specific customer names and contextual details were not provided publicly, so these endorsements are not independently verifiable.

Third-party directory listing

A third-party directory entry lists YS::Desktop but shows no customer reviews, limiting its usefulness for independent sentiment analysis.

Community / social proof

Searches did not surface discussion threads specifically focused on YS::Desktop or KERYS in major public forums (Reddit, Hacker News) during this research.
This absence represents an evidence gap for independent user sentiment.

Balanced interpretation

Available evidence indicates positive positioning in vendor marketing and some press interviews. However, independent, high-volume user feedback and verified customer references are not readily available publicly, which increases the due diligence burden for potential buyers.

Public case studies

No detailed public, named case studies with quantified outcomes were found on the site pages reviewed for this research.

Press-reported examples (partially informative)

Press articles and vendor materials highlight goals such as avoiding multiple machines per user in sensitive contexts and emphasize security and user experience as objectives.

Critical evaluation

Vendor materials include claims about performance and cost/CO2 reductions, including statements that a portion of native performance is retained. Methodologies for those claims were not disclosed publicly, and independent benchmarks or workload-specific results were not located. Workload selection and hardware configuration materially affect performance outcomes (GPU-heavy, IO-heavy workloads, CAD/CAE, etc.).

04Best fit

Company sizes

Likely best fit:
- Larger organizations or enterprises, or any organization where a subset of high-risk roles justifies investment in specialized endpoint isolation
- Environments where hardware refresh cycles or budget are available to support higher-spec endpoints

Industries and verticals

Aerospace, defense, industrial and OT-adjacent environments, critical infrastructure, and other regulated engineering contexts
Any enterprise with formal multi-domain workstation requirements (for example, admin/dev/R&D/partner enclaves)

Roles and personas

Decision makers: CISO, Head of Security Engineering, Head of Endpoint Security, CIO or Head of Digital Workplace (if device consolidation is an objective)
End users: Developers requiring admin rights with segmented work contexts, administrators handling privileged workflows, engineers working with sensitive IP who require separation from internet-facing tasks

Pain points and challenges the product addresses

Multiple laptops per user imposed by policy or risk constraints
Productivity loss from switching devices and managing separate work contexts
VDI fragility in low-connectivity or offline environments

Qualification criteria (good fit)

Explicit requirement for strict separation between environments
Offline operational requirements where VDI is unacceptable
Ability to allocate or upgrade hardware to meet local virtualization resource requirements

05The pitch

What the product does (core value proposition in objective terms)

- KERYS Software markets YS::Desktop as a local (endpoint) secure virtualization product that allows a user to switch between multiple isolated workstation environments on a single physical machine. The vendor positions this capability as intended to reduce the need for multiple dedicated laptops or workstations for different security domains. - Vendor positioning emphasizes: - Isolation features intended to mitigate hypervisor weaknesses such as VM escape and side-channel attacks (as claimed by the vendor). - Vendor-reported performance comparable to native execution for some workloads; independent benchmarks were not located in this research. - Positioning that the product can operate without continuous network connectivity, in contrast to VDI/DaaS approaches that depend on network availability.

Target market and market positioning

- Primary buyer persona appears to be CISOs and security leaders in larger enterprises and regulated/high-sensitivity environments (for example, aerospace, industrial, and critical infrastructure) where multiple security domains and strict segmentation are common. - The product is positioned as an alternative to: - Multi-device approaches (separate air-gapped or hardened workstations) - VDI/DaaS for some workstation isolation needs (particularly where offline operation is a requirement) - Endpoint isolation approaches (micro-VM containment) depending on specific use cases

Get a comprehensive analysis of KERYS Software including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →