Smallstep

Private CA and device identity so internal TLS, SSH, and laptops get short-lived certificates instead of passwords.

Proof of life. Published hardware-bound device identity essay, May 2026

About Smallstep

Smallstep runs step-ca, an open-source certificate authority, plus a commercial control plane for enterprise PKI and device identity. Device Identity for Okta binds a managed device certificate to workforce SSO so access follows the laptop, not a shared secret.

It is certificates as identity, not a secrets vault with a PKI checkbox.

Investors

StepStone GroupBain Capital Venturesboldstart

Work at Smallstep? Link to this listing

Optional badge for your site or README. It changes nothing about the listing, its order or its review. Other formats and a dark version: press kit.

<a href="https://securitystartups.com/companies/smallstep"><img src="https://securitystartups.com/badge/listed.svg" alt="Listed on Security Startups" width="184" height="44"></a>