Step Security Adds Windows Support to Dev Machine Guard
Summary
Step Security says Dev Machine Guard now runs natively on Windows 10 and 11, extending its inventory of developer tools, packages, extensions and MCP configurations across Windows and macOS fleets.
Key points
- The release supports Windows 10 and 11, with AMD64 and ARM64 binaries signed with Sigstore and published with build provenance.
- The scanner inventories AI coding agents, AI CLI tools, IDEs and extensions, MCP server configurations, npm packages, local processes and device details.
- Windows detection uses native mechanisms, including Windows Registry version data, Task Scheduler scans and Windows-specific application discovery.
- Community mode scans locally and produces JSON or HTML reports; Enterprise mode sends results to Step Security's backend for centralized visibility, policy enforcement and historical reporting.
- Enterprise features include per-device dashboards, policies for extensions, MCP servers, agents and packages, and alerts for compromised dependencies and malicious extensions.
- The announcement cites Shai-Hulud, s1ngularity and Mini Shai-Hulud as incidents that motivated broader developer-machine visibility.
Article Details
- Event Type
- Step Security released native Windows support for Dev Machine Guard, extending its existing macOS coverage.
- Impact
- Organizations can use the same dashboard and policies to inventory and scan Windows and macOS developer machines, improving visibility into installed developer tools, extensions, MCP server configurations, and npm packages. The article describes this as a response to a prior visibility gap; it does not report a new compromise.