Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Entrust CodeSafe review

#29 of 29 in Tokenization Software

A focused HSM runtime for custom cryptography rather than tokenization workflows.

5.5/10Editor score
Visit Entrust
Entrust CodeSafe5.5 Visit Entrust

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Entrust CodeSafe is a developer toolkit and runtime for building, signing, packaging, and deploying third-party applications inside the secure boundary of compatible nShield hardware security modules. It is aimed at mid-market and enterprise teams that need application-specific cryptographic logic to run alongside protected keys and operations. Developers can use the nCore API for cryptographic functions, implement custom algorithms or communication protocols, and add business-specific validation before signing. CodeSafe 5 supports the nShield 5s, 5c, and 5c 10G models.

Platform fit is centered on Entrust's HSM ecosystem. Development is supported on Windows and Linux, while deployment is self-hosted and on-premises with compatible nShield hardware. CodeSafe 5 applications can use native IPv4/IPv6 networking and an SSH server, and administrators can manage instances through csadmin, hsc_codesafe, or KeySafe 5. The product keeps application-specific commands, replies, and temporary keys private to a running instance, which suits teams placing sensitive processing inside the HSM boundary rather than in a separate application tier.

CodeSafe uses a contact-sales pricing model, and running an application is a licensable feature. Its scope is specialized: the documented capabilities cover HSM-resident application execution and custom cryptographic operations, not a tokenization workflow. Teams with compatible nShield deployments and a requirement for custom code inside the module should consider it; organizations seeking software centered on tokenization should evaluate alternatives designed around that primary function.

Entrust CodeSafe pros and cons

  • Where it wins
    • Runs third-party applications inside compatible nShield HSMs.
    • Supports custom cryptographic algorithms and communication protocols.
    • Provides nCore API, IPv4/IPv6 networking, and SSH interfaces.
  • Where it doesn't
    • Its documented role centers on HSM applications, not tokenization workflows.
    • Requires compatible Entrust nShield 5 hardware.
    • Pricing is contact-sales, and running applications is licensable.

Entrust CodeSafe fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update