PayTV providers have traditionally budgeted conditional access system (CAS) costs as part of doing business, while also accepting the complexity of managing content security across a diverse range of devices. Today, there’s a drastically lower-cost and simplified alternative.

We’ve extended the reach of our leading multi-DRM cloud service, DRMtoday, to also support DRM for IPTV use cases – safely protecting multicast channels using CENC!

You can now comfortably bring standard hardware-level Widevine and PlayReady DRM protection to multicast – finally unifying studio-recognized IPTV and OTT security under a single licensing endpoint!

Lower cost than CAS

Our cloud DRM approach has significantly lower total cost of ownership than CAS – across set up, operation, and ongoing maintenance.

  • DRM service contracts are inherently lower cost than CAS in general
  • Costly CAS headends are replaced with a software encryptor (for example: avoid CAPEX-heavy CAS headend refreshes)
  • Complicated and expensive on-prem CAS modules like ECMGs or servers are avoided completely 
  • Firmware updates, which can be laborious, are a thing of the past (our solution’s player component is purely on the application layer)
  • Skip smart-card programs, middleware licenses, and per-box royalty fees

Plus, as we’re able to protect both your multicast and unicast streams using the same DRM licensing servers and delivery paths, you’ll move away from costly, fragmented CAS/DRM setups.

Built for progressive PayTV operators 

Our new technology lets you move beyond high-priced CAS while keeping RTP/UDP multicast running for the years ahead.

It also modernizes legacy security infrastructure with one model spanning Android TV/Linux/RDK set-top boxes and smart TVs, plus all OTT devices.

Unified and simplified

DRMtoday‘s global license delivery network lets you protect multicast streams with hardware-secured Widevine and PlayReady DRM while also securing OTT streaming across  mobiles, browsers, smart TVs, and more (using Widevine, PlayReady, and FairPlay Streaming).

This gives you: 

  • One license server handling multicast, unicast, and hybrid workflows
  • One entitlement flow and delivery path for your whole STB and smart TV device estate
  • One operational dashboard to simplify monitoring and reporting
  • One unified model removing the overhead of duplicate security vendor contracts 

Firmware-free device portability

CAS traditionally requires lengthy vendor firmware management: new device rollouts or updating existing firmware can be a slow process, requiring a significant amount of effort.

Our modern CENC multicast solution, on the other hand, is software-first and relies on application-level changes only. In other words, it’s designed to replace CAS without touching firmware at all! A headend update plus a small app-based player library is typically all it takes. The client-side work is also quite straightforward – for example, we’ll even provide an ExoPlayer or GStreamer patch.

In fact, you essentially avoid the need to deal with the OEM/SOC layer at all anymore. You only need to consider if a device has DRM hardware-support for Widevine L1 or PlayReady SL3000 – and of course, that’s already quite common these days! 

Swimming sport on TV with a set top box
Easily deploy across Android TV/Linux STBs and smart TVs

Being OEM-agnostic is already a huge time saver when introducing new devices, but the great news here is brownfield fleets can be protected quickly as well. Our approach is applicable for models you may already use regardless of which CAS is in place. You also no longer need to worry about device OS versions.

And, in case you support devices without DRM built into the hardware, we can still help by leveraging Widevine L3 or PlayReady SL2000 software-based DRM.

Tomorrow-proof on your terms

Multicast can’t be switched off overnight as operators transition toward full-IP delivery. DRMtoday lets you provide multicast cost-effectively now, with a predictable migration path to unicast on your timetable. The DRM workflows and license infrastructures remain identical, so you avoid disruptive migrations or re-engineering projects when the time comes for all-OTT. 

Plus, you gain the ability to extend the lives of your STBs and smart TVs, giving you flexibility to shift toward pure OTT while keeping older devices in place. This also opens opportunities to accelerate feature rollouts, with use cases like re-streaming and PVR becoming easier to achieve.

Still studio trusted

With billions of DRMtoday license deliveries each month, we know a thing or two about meeting strict security requirements. Whether it’s DRM for OTT or IPTV, our solution is aligned with studio-recognized content protection standards, and is as secure as traditional CAS. 

  • Uses hardware-secured licensing in Trusted Execution Environments (TEE) – just like secure CAS primitives
  • Offers the same safe studio-approved security level used for premium OTT content (Widevine L1 and PlayReady SL3000) enabling UHD and HD quality
  • Provides robust license controls that match or exceed CAS workflows (revocation, policy enforcement, device checks)

And on top of that, we provide. . . 👇

Expert 24/7 support

You get the same level of expert support expected from traditional CAS, backed by a team that deeply understands the full licensing delivery workflow.

Because we own and operate the entire process end to end, we can provide round-the-clock technical assistance. With SLA options supporting up to 99.999% availability, our support is designed to provide confidence, protect uptime, and help meet demanding rights holder requirements.

Need a hybrid player for Android?

Maintaining different player stacks for OTT vs. multicast increases development and support overhead. You can also combine our PRESTOplay hybrid Android TV player together with DRMtoday to deliver one feature-rich OTT/IPTV playback app, simplifying development, testing, and ops.

Get started today

Secure multicast/unicast, cut costs, and create a clear path to an all-OTT future with DRMtoday.

Contact us to discover how it’s possible! We’ll explain the straightforward headend and client integration as well as providing a demo and studio validation material.


Recent updates

Alternative MPD events and SGAI now accessible with DASH

Alternative MPD events and SGAI now accessible with DASH

Blog article

With the MPEG-DASH 6th edition now officially published as an ISO standard (ISO/IEC 23009-1), server-guided...

Company culture: How Castlabs people define it

Company culture: How Castlabs people define it

Blog article

There are many factors that influence a company’s work culture. At Castlabs we believe that...

Arbor Media and Castlabs partner to strengthen trust in public institutional media workflows

Arbor Media and Castlabs partner to strengthen trust in public institutional media workflows

Press release

DOETINCHEM and BERLIN, June 25, 2026 – Arbor Media and Castlabs today announced a strategic...