Determinate Systems vs StepSecurity
Determinate Systems
determinate.systemsStepSecurity
stepsecurity.ioSide by side
| Figure | Determinate Systems | StepSecurity |
|---|---|---|
| Price from | — | $8/mo |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 0 | 3 |
| Spec score · Software Supply Chain Security Software | 7.8 (#14) | 7.9 (#12) |
| Integrations | FlakeHub documents authentication with GitHub, GitLab, Semaphore, Buildkite, AWS STS, and Google Cloud, and identity-provider support for GitHub, Microsoft Entra, and Okta. | The pricing page lists GitLab CI, Azure DevOps, JFrog Artifactory, Sonatype Nexus, and Google Artifact Registry compatibility. |
| Product | Determinate is an end-to-end Nix toolchain spanning installation, collaboration, and deployment. | StepSecurity detects, prevents, and responds to software supply chain attacks across developer environments, code repositories, and CI/CD pipelines. |
Plans
In their own words
Determinate Systems
Determinate Systems provides an end-to-end Nix toolchain for installation, collaboration, and deployment across developer laptops, CI, cloud, and edge devices. The platform combines Determinate Nix, FlakeHub, and Determinate Secure Packages. Determinate Nix adds lazy trees, parallel evaluation, stable flakes by default, and a native Linux builder for macOS. FlakeHub offers binary caching, private flakes, organization controls, semantic versioning, and deployment of NixOS, Home Manager, and nix-darwin configurations without local evaluation. Secure Packages is a supported Nixpkgs replacement with curated packages and cryptographic signing. It includes CycloneDX 1.5 SBOM generation, policy checks, and vulnerability scanning; critical vulnerabilities are said to be patched within seven days. Distributions receive at least 12 months of support, with one in four receiving 60 months. Platforms listed are Linux, macOS, Windows, and web. A free plan is available.
StepSecurity
StepSecurity is a software supply chain security platform spanning developer environments, code repositories, and CI/CD pipelines. Harden-Runner uses eBPF to monitor network calls, file writes, and process executions, then relates activity to workflow steps. Dev Machine Guard inventories AI coding agents, MCP servers, IDE extensions, and local packages on developer machines. Secure Registry provides package cooldowns, blocks compromised versions, and offers typosquat protection and blocklists. Code Repo Security screens pull requests and can open remediation pull requests according to policies. Security alerts can go to email, Slack, or Microsoft Teams. Dev Machine Guard can be deployed without an agent through Intune, SCCM, or Jamf on macOS, Windows, and Linux. The Community plan is free for unlimited public repositories and lists GitHub-hosted runners on GitHub Cloud; private repositories are included in the 14-day trial. Dev Machine Guard costs $8 a month per device, while Enterprise costs $16 a month per contributing developer. The Trust Center lists SOC 2 Type 2 and ISO 27001:2022 compliance.