Smallstep Certificate Manager
Smallstep Certificate Manager: A hosted PKI platform for teams issuing and managing private TLS certificates. Ranked #18 of 31 in Certificate Management Software by our editors (7.5/10); pricing: Pricing on request; best for teams running private TLS authorities.
At a glance
- Editor score7.5 / 10
- PricingPricing on request
- Best forTeams running private TLS authorities
- Facts checked20 Sep 2026
Where it wins
- Automates private TLS issuance, renewal, and revocation
- Supports ACME, OIDC issuance, webhooks, and API access
- Includes cataloging, expiry alerts, and hosted CA management
Where it doesn't
- Pricing is handled through contact sales
- Advanced Authorities are required for CRL and OCSP support
- Does not verify certificate discovery
Our verdict on Smallstep Certificate Manager
Smallstep Certificate Manager is a commercial, hosted certificate authority and PKI platform for issuing and managing private X.509 TLS certificates. It is designed for DevOps teams managing internal services, websites, infrastructure, people, devices, Kubernetes clusters, virtual machines, and hybrid cloud or on-premises environments. The product supports TLS and mTLS certificates through web and API access, with hosted certificate authorities and a management console.
Pricing is handled through contact sales, with bundles or bespoke solutions. The published product details do not present numeric plan tiers. Teams can connect certificate workflows with ACME, Kubernetes, Google, Okta, Microsoft Entra ID, Keycloak, webhooks, Slack, and SIEM tools. The Smallstep API provides authority management, while OIDC enables single sign-on certificate issuance. This makes the product a fit for organizations that need certificate operations to connect with identity, infrastructure, notification, and security systems.
Its core coverage spans private X.509 issuance, renewal automation, passive and active revocation, expiry alerts by email or webhook, and certificate cataloging with filtering, sorting, and export. Advanced Authorities add CRL and OCSP support. These capabilities suit teams operating private TLS authorities across varied infrastructure, especially where automated issuance and renewal are priorities. Teams that require certificate discovery or verification should choose a product that provides that capability. Smallstep Certificate Manager is the stronger choice for private CA management and certificate lifecycle workflows than for discovery-led certificate inventory.
Your product? Our editors can test Smallstep Certificate Manager in depth and publish a review, labelled as paid · from $149/mo →
Smallstep Certificate Manager pricing
Smallstep Certificate Manager fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Certificate discovery | Not verified |
| Automatic renewal | Yes |
| Deployment automation | Yes |
| Revocation workflows | Yes |
| Certificate types | Not verified |
| CA integrations | Yes |
| Deployment | Cloud |
| Platforms | Web |
| Support | Email, Tickets, Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 9 integrations: ACME, Kubernetes, Google, Okta, Microsoft Entra ID, Keycloak … |
| Pricing | Pricing on request (source) |
| Website | smallstep.com |
| Facts checked | 20 Sep 2026 |
Smallstep Certificate Manager integrations
Smallstep Certificate Manager lists 9 integrations on its own site.
- ACME
- Kubernetes
- Okta
- Microsoft Entra ID
- Keycloak
- webhooks
- Slack
- SIEM
Alternatives to Smallstep Certificate Manager
- DigiCert Trust Lifecycle ManagerA broad certificate governance platform for hybrid infrastructure and enterprise PKI.9.4
- DigiCert ONEFull certificate lifecycle control for large organizations managing diverse trust environments.9.3
- Keyfactor PlatformA broad certificate lifecycle platform for hybrid enterprise environments.9.1
See all Smallstep Certificate Manager alternatives →
Also Ranked In
Smallstep Certificate Manager is ranked in 2 of our directories.
Used Smallstep Certificate Manager? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Smallstep Certificate Manager for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Smallstep Certificate Manager is listed in our Certificate Management Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/smallstep-certificate-manager/"><img src="https://www.itechguides.com/best/badge/smallstep-certificate-manager.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update