Case Study: Circle achieves stronger GitHub Actions security with StepSecurity

Circle blocks off-baseline CI egress with StepSecurity in 1 month

Circle, a global financial technology firm and issuer of the USDC stablecoin, faced the challenge of securing its GitHub Actions CI/CD pipeline against software supply chain attacks. Their static security controls lacked runtime visibility and enforcement, creating a significant risk as a regulated company. To address this, they turned to StepSecurity for its Harden-Runner platform.

StepSecurity provided runtime monitoring and supply-chain hardening, giving Circle visibility into outbound network calls and blocking unexpected egress and compromised actions. The solution was implemented with zero impact on build times and resulted in faster incident response and a preventative security model. StepSecurity's platform allowed Circle to move from trust-based security to enforced, runtime guardrails.

Circle