Smallstep Certificate Manager review
A hosted PKI platform for teams issuing and managing private TLS certificates.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Smallstep Certificate Manager is a commercial, hosted certificate authority and PKI platform for issuing and managing private X.509 TLS certificates. It is designed for DevOps teams managing internal services, websites, infrastructure, people, devices, Kubernetes clusters, virtual machines, and hybrid cloud or on-premises environments. The product supports TLS and mTLS certificates through web and API access, with hosted certificate authorities and a management console.
Pricing is handled through contact sales, with bundles or bespoke solutions. The published product details do not present numeric plan tiers. Teams can connect certificate workflows with ACME, Kubernetes, Google, Okta, Microsoft Entra ID, Keycloak, webhooks, Slack, and SIEM tools. The Smallstep API provides authority management, while OIDC enables single sign-on certificate issuance. This makes the product a fit for organizations that need certificate operations to connect with identity, infrastructure, notification, and security systems.
Its core coverage spans private X.509 issuance, renewal automation, passive and active revocation, expiry alerts by email or webhook, and certificate cataloging with filtering, sorting, and export. Advanced Authorities add CRL and OCSP support. These capabilities suit teams operating private TLS authorities across varied infrastructure, especially where automated issuance and renewal are priorities. Teams that require certificate discovery or verification should choose a product that provides that capability. Smallstep Certificate Manager is the stronger choice for private CA management and certificate lifecycle workflows than for discovery-led certificate inventory.
Smallstep Certificate Manager pros and cons
- Where it wins
- Automates private TLS issuance, renewal, and revocation
- Supports ACME, OIDC issuance, webhooks, and API access
- Includes cataloging, expiry alerts, and hosted CA management
- Where it doesn't
- Pricing is handled through contact sales
- Advanced Authorities are required for CRL and OCSP support
- Does not verify certificate discovery
Smallstep Certificate Manager fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update