Like an HSM? I would have expected that any security company would be using those to store private keys, in which case "we should have used our own software" doesn't make much sense.