Skip to content
@smallstep

Smallstep

Device Identity for companies with sensitive resources. Secure corporate Wi-Fi, SaaS Apps, VPNs, and more

Pinned Loading

  1. certificates Public

    🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

    Go 7.3k 465

  2. cli Public

    🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

    Go 3.9k 267

  3. step-issuer Public

    ⚙️A certificate issuer for cert-manager using step certificates CA

    Go 216 33

  4. autocert Public

    ⚓ A kubernetes add-on that automatically injects TLS/HTTPS certificates into your containers

    Go 734 57

  5. step-kms-plugin Public

    🔐 step plugin to manage keys and certificates on a cloud KMSs and HSMs

    Go 57 7

  6. hello-mtls Public

    👋 Docs demonstrating mutual TLS configurations in various technologies

    JavaScript 107 26

Repositories

Showing 10 of 89 repositories
  • crypto Public

    Crypto is a collection of packages used by Smallstep products

    Go 86 Apache-2.0 27 9 9 Updated May 12, 2025
  • certificates Public

    🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

    Go 7,273 Apache-2.0 465 197 (2 issues need help) 25 Updated May 12, 2025
  • cli Public

    🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

    Go 3,861 Apache-2.0 267 137 (2 issues need help) 17 Updated May 12, 2025
  • Go 6 Apache-2.0 1 0 4 Updated May 12, 2025
  • cli-utils Public

    Common code between step and step-ca

    Go 9 Apache-2.0 6 0 0 Updated May 12, 2025
  • step-sds Public

    🔭 Secret discovery service (SDS): simplifying certificate management for relying parties (such as Envoy)

    Go 74 Apache-2.0 12 1 1 Updated May 12, 2025
  • certinfo Public Forked from grantae/certinfo

    A tool for printing X509 TLS certificates in Go

    Go 18 MIT 39 0 2 Updated May 12, 2025
  • pkcs7 Public Forked from mozilla-services/pkcs7

    Implements a subset of PKCS #7 / Cryptographic Message Syntax (CMS, RFC 2315, RFC 5652)

    Go 17 MIT 222 7 4 Updated May 12, 2025
  • singleflight Public Forked from azazeal/singleflight

    Package singleflight implements a call sharing mechanism.

    Go 1 MIT 3 0 0 Updated May 12, 2025
  • workflows Public
    Go 2 2 0 1 Updated May 12, 2025