Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Smallstep is a Device Identity Platform™ designed to close a critical gap in Zero Trust security by authenticating devices, not just users. Using ACME Device Attestation, it creates hardware-bound credentials that prove a device’s authenticity and ownership with cryptographic certainty. These credentials protect access to corporate Wi-Fi, VPNs, SaaS tools, cloud workloads, source code, and sensitive data. Co-developed with Google and standardized at the IETF, ACME DA modernizes legacy approaches like SCEP with stronger guarantees and simpler automation. Smallstep works across macOS, Windows, Linux, iOS, and Android, making it ideal for heterogeneous environments. With deep integrations across enterprise IT and DevOps stacks, it delivers scalable, high-assurance device security without operational complexity.
Description
XFA checks the security of every device at the moment someone signs in, so fast-growing teams get solid IT security without hiring an IT team. Company laptops, personal phones and contractor devices are all covered, and people fix issues themselves with one click or a step by step guide, so work keeps moving. Setup takes about 15 minutes: add XFA to Google Workspace, Microsoft Entra ID, Okta, OneLogin, Ping Identity or Keycloak as an MFA method or external identity provider. There is no MDM to roll out and nothing to enroll. Checks cover OS version and updates, disk encryption, screen lock, firewall, antimalware, password manager and extended checks such as Secure Boot and remote access. Admins decide when XFA warns and when it blocks. Device discovery, Slack and Teams alerts, and exports to Vanta, Drata, TrustCloud and Thoropass build audit proof as you go. Privacy-first, ISO 27001 certified and made in Belgium.
API Access
Has API
Yes
API Access
Has API
Yes
Integrations
Microsoft Entra ID
Yes
Okta
Yes
Aikido Security
No
Amazon Web Services (AWS)
Yes
Drata
No
Google Cloud Platform
Yes
Google Workspace
No
Helm Tickets
Yes
Indent
Yes
Keycloak
No
Integrations
Microsoft Entra ID
Yes
Okta
Yes
Aikido Security
Yes
Amazon Web Services (AWS)
No
Drata
Yes
Google Cloud Platform
No
Google Workspace
Yes
Helm Tickets
No
Indent
No
Keycloak
Yes
Pricing Details
$0
Free Trial
No
Free Version
Yes
Pricing Details
$5.90 per user per month
Free plan for your whole team. Pro: $5.90 per user per month. Max: $8.90 per user per month. Enterprise: custom pricing. Pay annually and get 2 months free. One price per person, every device included.
Free Trial
Yes
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
Yes
iPad App
Yes
Android App
Yes
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
Yes
iPad App
No
Android App
Yes
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Smallstep
Founded
2016
Country
United States
Website
smallstep.com
Vendor Details
Company Name
XFA
Founded
2021
Country
Antwerp, Belgium
Website
xfa.tech/
Product Features
Privileged Access Management
Application Access Control
No
Behavioral Analytics
No
Credential Management
No
Endpoint Management
No
For MSPs
No
Granular Access Controls
No
Least Privilege
No
Multifactor Authentication
No
Password Management
No
Policy Management
No
Remote Access Management
No
Threat Intelligence
No
User Activity Monitoring
No
Product Features
Mobile Device Management (MDM)
Automatic Device Recognition
Yes
Data Management
No
Deployment Management
No
Inventory Management
Yes
Maintenance Utilities
No
Procurement Management
No
Remote Update / Installation
No
Software Management
No
Synchronization Management
No
Wireless Network Support
No