Skip to main content
SGSiteGraph

smallstep.com

The World's First Device Identity Platform | Smallstep

Last scanned Jul 27, 2026, 5:43 PM

79

Overall score

Fair

Summary

Secure devices, enforce Zero Trust and simplify cryptography with Smallstep's unified platform for device identity and certificates. This website uses Next.js hosted on Google Cloud. SEO is good (80/100) and accessibility is good (85/100). Security scores good (75/100) and performance good (75/100). Top issue: Missing canonical link.

Secure devices, enforce Zero Trust and simplify cryptography with Smallstep's unified platform for device identity and certificates.

United States
Hosted on Google Cloud

Top issues to fix

7 issues found · 1 high priority

  • Missing Content-Security-Policy header

    Security

    Add a CSP to control which sources can run scripts — the strongest single defense against XSS.

  • Missing X-Content-Type-Options header

    Security

    Add X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.

  • Missing X-Frame-Options header

    Security

    Add X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.

  • Missing canonical link

    SEO

    Add <link rel="canonical"> so search engines know which URL variant to index.

  • No structured data (JSON-LD) found

    SEO

    Add JSON-LD (Organization, Article, Product…) to become eligible for rich results.

  • robots.txt not found

    SEO

    Publish /robots.txt with a Sitemap: directive to guide crawlers.

+1 more issue — details in the sections below.

80

SEO

3 issue(s) found

75

Performance

12 ms

75

Security

HTTPS & header checks

85

Accessibility

1 issue(s) found

Not enough scan history yet to show a trend — check back after this site has been re-scanned a few more times.

Organization

Company details published in this site's own structured data.

Secure devices, enforce Zero Trust and simplify cryptography with Smallstep's unified platform for device identity and certificates.

Contact

Email, phone, and address published on this site's own pages.

Meta tags

Title
The World's First Device Identity Platform | Smallstep
Description
Secure devices, enforce Zero Trust and simplify cryptography with Smallstep's unified platform for device identity and certificates.
Canonical
Language
en
Charset
utf-8
Viewport
width=device-width, initial-scale=1
Robots meta
index, follow
Manifest

OpenGraph & Twitter Card

OpenGraph

og:title
The World's First Device Identity Platform | Smallstep
og:description
Secure devices, enforce Zero Trust and simplify cryptography with Smallstep's unified platform for device identity and certificates.
og:type
website
og:url
https://smallstep.com/

Twitter Card

twitter:card
summary_large_image
twitter:title
The World's First Device Identity Platform | Smallstep
twitter:description
Secure devices, enforce Zero Trust and simplify cryptography with Smallstep's unified platform for device identity and certificates.

Technologies

Detected frameworks, languages, and tools.

Hosting & CDN

Hosting provider
Google Cloud
CDN provider
IP address
34.117.219.211
ASN
AS396982 (GOOGLE-CLOUD-PLATFORM - Google LLC, US)

DNS records

TypeValue
A
  • 34.117.219.211
AAAA
MX
  • aspmx.l.google.com
  • alt1.aspmx.l.google.com
  • aspmx2.googlemail.com
  • aspmx3.googlemail.com
  • alt2.aspmx.l.google.com
TXT
  • google-site-verification=N74VIKkvrIyDKlX-8AjJPPZ1ZCPr1k4oEKi5qHZ0cAU
  • google-site-verification=4MmiszkvZ0W4-mVUq7rEc-zO9Rt-iCfZ5lxJWlzYzWA
  • v=spf1 include:_spf.google.com include:7748242.spf03.hubspotemail.net include:mailgun.org -all
NS
  • dns1.p08.nsone.net
  • dns4.p08.nsone.net
  • dns3.p08.nsone.net
  • dns2.p08.nsone.net
CAA
CNAME
IPv6 supportNo

TLS / SSL certificate

Version
TLS 1.3
Issuer
Google Trust Services
Subject
smallstep.com
Valid from
Jul 14, 2026
Valid to
Oct 12, 2026
Days until expiry
76
SAN domains
smallstep.com, www.smallstep.com

Security headers

  • Strict-Transport-SecurityEnabled
  • Content-Security-PolicyMissing
  • X-Frame-OptionsMissing
  • X-Content-Type-OptionsMissing
  • Referrer-PolicyMissing
  • Permissions-PolicyMissing

Compression: gzip · 0 cookie(s) observed

Content & assets

Headings

H1 1 · H2 10 · H3 13

Links

23 internal · 8 external · 0 broken

Images

69 total · 22 missing alt

Scripts / Styles

70 scripts · 3 stylesheets

JS / CSS size

1.9 MB · 145 KB

Page size

389 KB

Robots.txt & Sitemap

robots.txt
Not found
Disallow rules
0
sitemap.xml
Found
URLs in sitemap
536

SEO issues

  • Missing canonical link
  • No structured data (JSON-LD) found
  • robots.txt not found

Accessibility issues

  • More than 20% of images are missing alt text

Careers

View careers page

This company has an active careers page, but individual openings weren't reliably parsed from it — visit the page above for current listings.

Scan details

Requested URL
https://smallstep.com
Final URL
https://smallstep.com
HTTP status
200
HTTP version
HTTP/2
Response time
5 ms
HTML size
389 KB
Redirect chain
https://smallstep.com

See something wrong on this report? Request a correction

Frequently asked questions

What technology does smallstep.com use?
smallstep.com is built with Next.js.
Is smallstep.com secure (HTTPS)?
Yes. smallstep.com uses TLS 1.3 with a certificate issued by Google Trust Services, valid until Oct 12, 2026.
Who hosts smallstep.com?
smallstep.com is hosted on Google Cloud.
What is smallstep.com's SEO score?
smallstep.com scored 80/100 for SEO in the latest analysis (great).
What is smallstep.com's overall website score?
smallstep.com has an overall SiteGraph score of 79/100, combining SEO, performance, security, and accessibility.
Is smallstep.com hiring?
smallstep.com has a careers page; check it directly for current openings.