What is StepSecurity?
StepSecurity operates at the intersection of cybersecurity and DevOps, providing a comprehensive suite of tools designed to detect, prevent, and respond to software supply chain attacks. The company's platform offers end-to-end protection for critical infrastructure, including AI agents, developer workstations, npm packages, and CI/CD pipelines. By integrating directly into the development environment, StepSecurity enables organizations to enforce automated security policies and gain granular visibility into network behavior.
In an era where software supply chain vulnerabilities are increasingly exploited, StepSecurity serves as a vital layer of defense. Its solutions for GitHub Actions and developer mobile device management address the specific needs of enterprises seeking to harden their security posture. By automating the identification of risks, the company empowers engineering teams to focus on innovation while maintaining a robust, compliant, and resilient software delivery process.
How much funding has StepSecurity raised?
StepSecurity has raised a total of $3M across 1 funding round:
Angel/Seed
$3M
Angel/Seed (2024): $3M with participation from DeVC, Runtime Ventures, and SaaS Ventures
Key Investors in StepSecurity
DeVC
A collective of founders, operators, and investors that provides capital and strategic support to ambitious startups from the concept stage through early traction.
Runtime Ventures
A Netherlands-based investment firm focused on the consumer services sector, providing operational expertise and financial backing to growing enterprises.
SaaS Ventures
A business automation and software development firm that invests in and supports companies looking to enhance operational efficiency through digital transformation.
What's next for StepSecurity?
Looking ahead, the strategic deployment of this capital will likely focus on deepening the company's integration capabilities and expanding its market reach. As the demand for secure CI/CD pipelines continues to surge, StepSecurity is expected to invest heavily in R&D to stay ahead of emerging threat vectors. The company's growth trajectory suggests a transition from early-stage development to a more aggressive scaling phase, targeting larger enterprise clients who require sophisticated, automated security solutions.
Furthermore, the firm is well-positioned to capitalize on the increasing adoption of AI-driven development tools, which introduce new attack surfaces that require specialized protection. By leveraging its recent backing, StepSecurity aims to solidify its position as a leader in the supply chain security sector, providing the necessary infrastructure to support the next generation of secure software development.
