StepSecurity

StepSecurity provides security solutions for CI/CD pipelines, with a particular focus on GitHub Actions security. The company was founded in response to major supply chain attacks like SolarWinds and Codecov, which exposed vulnerabilities in CI/CD environments. StepSecurity initially built its product in the open and offered it free to open-source developers to help secure their CI/CD pipelines.

The platform addresses security gaps in continuous integration and continuous deployment workflows, aiming to prevent CI/CD attacks that can compromise software supply chains. The company's approach involves securing the automation pipelines that developers use to build, test, and deploy software.

Founded by security professionals with experience at Microsoft, Uber, and Plaid, StepSecurity targets both open-source projects and enterprise organizations that rely on CI/CD systems. The company has received backing from venture capital firms and angel investors including security executives from companies like Coinbase, Zscaler, and Bill.com.

StepSecurity's mission centers on building a comprehensive CI/CD security platform that protects the software development lifecycle from threats that target build and deployment processes. The company emphasizes customer focus, ownership, trust, and proactive remediation as core operational values.