Smallstep
The world's first Device Identity Platform for Zero Trust security

Smallstep is a device identity platform that issues hardware-bound, short-lived certificates to secure access for humans, devices, workloads, and AI agents. It co-developed the ACME Device Attestation standard with Google at the IETF, providing cryptographic identity instead of static API keys or secrets. The platform supports all major operating systems and is designed to enforce Zero Trust across enterprise environments.
Smallstep issues hardware-bound, short-lived certificates using the ACME Device Attestation standard, binding cryptographic credentials to device silicon to enforce authenticated access across all resources.
Enterprise IT and security teams managing device and workload access
Background.
- Status
- launched
- Business model
- unknown
- Company
- Smallstep Labs
Similar projects.
Editorial take on the space this project sits in — momentum signals, adjacent moves, our call on whether the wedge is real. Get pinged when we publish a new read or when the landscape shifts.
Have a take on this space?
Tell us what you’d build differently, where you think the incumbents miss, or what we’ve gotten wrong about this project. Comments + reactions are coming soon.