Smallstep
Device identity platform issuing hardware-backed, short-lived certificates for devices, workloads and AI agents
Highlights
- New on EvolcAdded 2026-11-11
About Smallstep
Smallstep builds a device identity platform that issues hardware-backed, short-lived certificates to company-owned devices, workloads, users, and AI agents and MCP-based toolchains. It co-developed the ACME Device Attestation standard with Google at the IETF.
Its customers are enterprise IT, security and DevOps teams that need to restrict access to Wi-Fi, VPNs, source code, databases and internal APIs to trusted devices. The site lists an open core model, integrations with Okta, Jamf, TPM, macOS, Linux and other systems, and a "Book a demo" / "Talk to an expert" sales flow.
The company's lead investors are listed on its About page, and it has open job postings for a Forward Deployed Engineer and a general application, both remote-first.
Product: Device Identity Platform issuing hardware-attested, short-lived certificates for devices, workloads, users and AI agents
Jobs at Smallstep
More cybersecurity companies
Socket
Software supply chain security tools that help development teams detect and block malicious open-source packagesRemote-friendlySprocket Security
Continuous penetration testing platform combining AI agents and human pentesters for mid-market and enterprise security teamsNew on EvolcSpyCloud
Identity threat protection that recaptures stolen credentials and sessions to stop account takeover for enterprisesNew on EvolcStrider Technologies
Nation-state risk intelligence platform for enterprises and government agencies, screening people, organizations and softwareStrix
Autonomous AI pentesting for security teams, validating findings across code, APIs, web apps and cloud with fix PRsNew on EvolcSunnyside*
Ethereum scaling and onchain privacy infrastructure for enterprises and blockchain projectsNew on Evolc
Website technologies
Tools and platforms detected on this company’s website, grouped by purpose. Dates record when Evolc observed them.
Frontend frameworks
- Next.jsHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Website resourcedeclared script/iframe or software asset
- ReactMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Related technologyimplied by Next.js
Hosting
- AWSMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Page markupsoftware structure signature
- Page markupsoftware structure signature
- Page markupsoftware structure signature
Recruiting
- AshbyMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Page markupsoftware structure signature
- Page markupsoftware structure signature
- Page markupsoftware structure signature
Website detection does not establish a paid subscription or company-wide use. Tools loaded after consent or sign-in may be missed. “No longer observed” does not prove the company stopped using a tool.