StepSecurity

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

StepSecurity is ranked #9 of 23 in software supply chain security software on Inferse. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan. A free trial is offered. Paid plans start at $8/mo.

Compared on software supply chain security software

Free plan: Yesstepsecurity.io
Source & repo security: Yesstepsecurity.io
Dependency analysis: Yesstepsecurity.io
Provenance attestations: Yesstepsecurity.io
Release policy gates: Yesstepsecurity.io

Facts

Product: StepSecurity detects, prevents, and responds to software supply chain attacks across developer environments, code repositories, and CI/CD pipelines.docs.stepsecurity.io · 3 Oct 2026
CI/CD monitoring: Harden-Runner uses eBPF to monitor network calls, file writes, and process executions, correlating events to workflow steps.docs.stepsecurity.io · 3 Oct 2026
Developer machine inventory: Dev Machine Guard inventories AI coding agents, MCP servers, IDE extensions, and local packages on developer machines.stepsecurity.io · 3 Oct 2026
Package protection: Secure Registry provides cooldown periods, compromised-version blocking, typosquat protection, and package blocklists.stepsecurity.io · 3 Oct 2026
Repository controls: Code Repo Security screens pull requests and can open policy-driven remediation pull requests across repositories.stepsecurity.io · 3 Oct 2026
Integrations: The pricing page lists GitLab CI, Azure DevOps, JFrog Artifactory, Sonatype Nexus, and Google Artifact Registry compatibility.stepsecurity.io · 3 Oct 2026
Notifications: Security event notifications can be sent by email, Slack, or Microsoft Teams.docs.stepsecurity.io · 3 Oct 2026
Operating systems: The pricing page lists agentless Dev Machine Guard deployment through Intune, SCCM, or Jamf on macOS, Windows, and Linux.stepsecurity.io · 3 Oct 2026
Security compliance: The Trust Center lists SOC 2 Type 2 and ISO 27001:2022 compliance and provides audit and penetration testing reports.trust.stepsecurity.io · 3 Oct 2026
Support: The Community plan includes community support, while Enterprise and Dev Machine Guard list priority support.stepsecurity.io · 3 Oct 2026
Notable limits: The free Community plan is for unlimited public repositories and lists GitHub-hosted runners on GitHub Cloud; private repositories are included in the 14-day free trial.stepsecurity.io · 3 Oct 2026
Intended users: StepSecurity describes its full platform as serving contributing developers and offers Dev Machine Guard for employees who use development tools but do not contribute code.stepsecurity.io · 3 Oct 2026
Company: The company page identifies Varun Sharma as CEO and co-founder and Ashish Kurmi as CTO and co-founder.stepsecurity.io · 3 Oct 2026