Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Smallstep is a Device Identity Platform™ designed to close a critical gap in Zero Trust security by authenticating devices, not just users. Using ACME Device Attestation, it creates hardware-bound credentials that prove a device’s authenticity and ownership with cryptographic certainty. These credentials protect access to corporate Wi-Fi, VPNs, SaaS tools, cloud workloads, source code, and sensitive data. Co-developed with Google and standardized at the IETF, ACME DA modernizes legacy approaches like SCEP with stronger guarantees and simpler automation. Smallstep works across macOS, Windows, Linux, iOS, and Android, making it ideal for heterogeneous environments. With deep integrations across enterprise IT and DevOps stacks, it delivers scalable, high-assurance device security without operational complexity.
Description
ZTXGate represents a cutting-edge Zero Trust Network Access (ZTNA) solution that merges the intuitive experience of a contemporary SaaS control plane with the benefits of on-premises software, including deployment flexibility, data sovereignty, and isolated blast-radius capabilities. Each client utilizes a unique single-tenant instance to ensure optimal security and performance.
The platform facilitates identity federation through OIDC SSO for the administrative portal, featuring a per-provider registry, PKCE implementation, group-to-role mapping, and a local break-glass conversion. It also supports SCIM 2.0 inbound provisioning via a dedicated hardened listener equipped with per-token bearer authentication, CIDR allowlisting, and rate limitations. The system enables cross-protocol identifier linkage to ensure that an OIDC login and a SCIM-provisioned user are recognized as a single identity.
Additionally, ZTXGate offers a pluggable biometric step-up solution that allows for push challenges through its own authenticator (ZTXBAS), as well as Okta Verify Push and Duo Push, all governed by a unified policy field. Resource-specific policies determine the backend in use, while API credentials are securely encrypted at rest.
Furthermore, the platform incorporates MDM and EDR device posture as a crucial element of its policy framework, supporting integrations with Microsoft Intune, Defender, and SentinelOne Singularity to enhance overall security posture and compliance.
API Access
Has API
Yes
API Access
Has API
No
Integrations
Okta
Yes
Active Directory
No
Amazon Web Services (AWS)
Yes
Certificate Authority Service
Yes
Cisco Duo
No
Docker
Yes
Google
No
Google Cloud Platform
Yes
Helm Tickets
Yes
Indent
Yes
Integrations
Okta
Yes
Active Directory
Yes
Amazon Web Services (AWS)
No
Certificate Authority Service
No
Cisco Duo
Yes
Docker
No
Google
Yes
Google Cloud Platform
No
Helm Tickets
No
Indent
No
Pricing Details
$0
Free Trial
No
Free Version
Yes
Pricing Details
$4/user/month
Starter — $4 per user / month (annual, self-hosted)
Business — $7 per user / month (annual, self-hosted)
Enterprise — Custom pricing.** Self-hosted or Managed
Business — $7 per user / month (annual, self-hosted)
Enterprise — Custom pricing.** Self-hosted or Managed
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
Yes
iPad App
Yes
Android App
Yes
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
Yes
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
Yes
iPad App
Yes
Android App
Yes
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Smallstep
Founded
2016
Country
United States
Website
smallstep.com
Vendor Details
Company Name
CoreZT
Founded
2025
Country
United Arab Emirates
Website
www.corezt.com
Product Features
Privileged Access Management
Application Access Control
No
Behavioral Analytics
No
Credential Management
No
Endpoint Management
No
For MSPs
No
Granular Access Controls
No
Least Privilege
No
Multifactor Authentication
No
Password Management
No
Policy Management
No
Remote Access Management
No
Threat Intelligence
No
User Activity Monitoring
No