Customer Success Stories
Trusted by security-forward engineering teams worldwide
From growth-stage startups to public companies across fintech, cybersecurity, AI, and Web3, security teams around the world trust StepSecurity to protect their software supply chain.
100K+
Repositories Secured
18M+
Software builds secured weekly
2,000+
GitHub organizations
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Enterprise success stories
How security teams run StepSecurity in production
Real deployments across fintech, cybersecurity, AI, and enterprise software. Every story is written from the customer's own experience.
“StepSecurity's cutting-edge security features are a core part of Mercari's supply chain security strategy.”
Allan WirthManager of Platform and AI Security, MercariRead the case study →
“StepSecurity is critical for filling in the blanks with our GitHub security posture.”
Scott CarterStaff 2 Engineer, WS1 Intelligence, OmnissaRead the case study →
“StepSecurity is a must-have for any GitHub project or organization.”
Evan GiblerStaff Security Engineer, ChainguardRead the case study →
“StepSecurity has excelled at filling gaps in GitHub's native security feature set. It has enabled us to convert a set of recommended practices into enforced controls, and to do so at enterprise scale.”
Udi YehudaVP of Platform Engineering and Global CISO, CheckmarxRead the case study →
“With the increase in supply chain attacks, StepSecurity gives us peace of mind that this behaviour will be caught and stopped.”
Ryan RichardsonSOC Lead, Utility WarehouseRead the case study →
“StepSecurity has been transformative in advancing Coveo's security posture.”
Jean-Philippe LachanceStaff Security Specialist, R&D, CoveoRead the case study →
“I genuinely don't worry about CI/CD the way I used to, because I know StepSecurity is watching it.”
Busra KuglerSecurity Engineer, XBOWRead the case study →“StepSecurity gave us visibility into a part of the software delivery process that had previously been difficult to observe.”
Naomi BuckwalterSenior Director of Product Security, Contrast SecurityRead the case study →
“StepSecurity gave us enterprise-grade CI/CD protection without forcing us to overhaul our infrastructure all while uniquely and proactively securing how we build software.”
Marek CountsAerospikeRead the case study →
“StepSecurity has become a vital part of Aquanow's CI/CD security strategy.”
Dhaval TailorInfrastructure Security Engineer, AquanowRead the case study →
“StepSecurity made an immediate impact to our GitHub Actions security.”
Joe BlanchardCSO and CIO, HashgraphRead the case study →
“I could not find any competitors that did both network-level monitoring…”
Dan HansenSite Reliability Engineer, RecidivizRead the case study →Community tier detections
Supply chain attacks caught in the wild by open source projects running StepSecurity's free community tier.
ChainDropCommunity detectionChainDrop npm worm: keyv and hundreds more packages compromised→AxiosCommunity detectionAxios compromised on npm, caught by Harden-Runner telemetry→TrivyCommunity detectionTrivy compromised a second time, detected by the community→FlankGoogle open sourceLive supply chain attack detected in Flank in real time→Azure KarpenterMicrosoft open sourceCI/CD supply chain attack detected in Azure Karpenter Provider→BazelGoogle open sourceBazel defends against a CI/CD supply chain vulnerability→
