Smallstep Labs: Leveraging Open Source Data for Enterprise Growth
Smallstep ensures that sensitive apps and systems can only be accessed by company-owned devices. Smallstep partnered with Google and Apple to develop the new standard for high-assurance device identity - ACME Device Attestation. By binding access to hardware, Smallstep neutralizes security threats and streamlines compliance and governance. Smallstep’s platform integrates with existing device management and posture solutions and offers comprehensive protection for Wi-Fi, VPN, ZTNA, public SaaS apps, internal web apps, cloud APIs, and more.
About Smallstep
Smallstep ensures that sensitive apps and systems can only be accessed by company-owned devices. Smallstep partnered with Google and Apple to develop the new standard for high-assurance device identity - ACME Device Attestation. By binding access to hardware, Smallstep neutralizes security threats and streamlines compliance and governance. Smallstep’s platform integrates with existing device management and posture solutions and offers comprehensive protection for Wi-Fi, VPN, ZTNA, public SaaS apps, internal web apps, cloud APIs, and more.
“I’m Mike Malone. I founded Smallstep 6 years ago with a mission to build trusted connections between people and tools that power business, regardless of their location, to accelerate teams and improve security. We envision a future where trusted people and devices can seamlessly connect to corporate resources, where permitted, with minimal security risk, so good can thrive.”
Challenge
Smallstep wanted to understand the impact of their open-source project on enterprise adoption of their commercial security solutions. Traditionally, measuring the impact of open-source projects on a commercial business had been historically difficult.
Solution
Smallstep utilized Scarf, an analytics platform for open-source projects, to track metrics and usage patterns of their open-source projects. This provided valuable insights into how many organizations were actively engaging with their project, including a significant portion of the Fortune 100.
“Seeing the widespread adoption of our open source software and understanding its critical role in bolstering security for an impressive 78% of Fortune 100 companies is a great affirmation of our mission,” said Mike Malone, CEO, Smallstep Labs. “It underscores the value and real-world impact of our solutions.”
The Setup
Smallstep uses Scarf to better understand user interactions and software usage, providing insights into its user base and potential customer segments as an important signal for commercial use. Scarf data is being built into sales motions and GTM activities, driving shorter sales cycles.
“These key discoveries reaffirm Smallstep’s vision to provide frictionless secure connections for individuals, devices, and software services, making best practices accessible to every organization,” said Ted Malone, Head of GTM at Smallstep.
Results
By leveraging Scarf’s analytics, Smallstep discovered that 78 of the US Fortune 100 companies were actively using their open-source software. This high adoption rate indicates the value proposition of Smallstep’s open-source solutions and their potential to drive commercial business growth.
Key Outcomes
- Validated Smallstep’s commitment to providing accessible security solutions.
- Understanding the high engagement from Fortune 100 companies boosts enterprise sales.
- Smallstep can target their ICPs more effectively.
You Can’t Build an Open Source Business Blind: Stirling PDF Case Study
StirlingPDF is one of the largest PDF platforms on GitHub, with an open-source core and an enterprise offering around it. Their platform includes:
Building a Predictable ICP: How Liquibase uses Scarf for GTM Operations
Liquibase is the open source standard for automating database change, with more than 100 million downloads and a community that has been growing for over a decade. Teams adopt Liquibase Community to keep database schema changes in lockstep with fast-moving application releases, then graduate to Liquibase Secure when they need governance, compliance, and control at scale.
From “Flying Blind” to Full Visibility: How Wherobots Uses Scarf to Guide GTM and DevRel
Wherobots is a Series A-stage startup building the Spatial Intelligence Cloud that makes it possible to build production-ready data products with data about the physical world up to 20X faster and at a fraction of the cost of existing approaches. Founded by the creators of Apache Sedona (used by more than 20,000 organizations), Wherobots brings the performance and governance of a modern lakehouse architecture to spatial data workloads through its optimized Sedna-compatible engine and SedonaDB, a spatial-first single-machine runtime. Teams move from complex, do-it-yourself pipelines to 5–20× faster processing without having to manage infrastructure.
