Smallstep

Smallstep is a cybersecurity company that has developed a device identity platform to enhance security for connected applications and devices. The company's core offering is a platform that automates certificate management, which is critical for securing modern distributed systems. This platform is designed for development, security, and operations (dev/sec/ops) teams.

Smallstep's technology addresses the complexities of securing various digital assets, including Wi-Fi networks, VPNs, Zero Trust Network Access (ZTNA), Software-as-a-Service (SaaS) applications, and cloud APIs. It achieves this by using hardware-bound credentials, which are a more secure method of authentication than traditional passwords or software-based certificates. The company has also been involved in developing new security standards, such as ACME Device Attestation, in collaboration with major tech companies like Google.

The business model appears to be based on the number of devices protected, which is a common approach in the cybersecurity industry. This model allows the company to scale its revenue as its clients grow and connect more devices to their networks. The company targets businesses that need to secure their digital infrastructure, which includes a wide range of clients from small startups to large enterprises.

Keywords: device identity, certificate management, cybersecurity, zero trust, ACME, devsecops, authentication, infrastructure security, network security, API security