StartupKit

What is StartupKit?

StartupKit, which the company also calls Kit, is a multi-product SaaS platform that consolidates hiring, vulnerability disclosure, security awareness training, and cold outreach behind a single login. It addresses a familiar problem for small companies: recruiting software, bug bounty tooling, compliance training vendors, and sales engagement platforms each hold a fragment of the same operational picture, and none of them talk to one another. Kit positions itself for startups and lean teams that need first-hire pipelines and first-audit evidence without buying four separate subscriptions. Seats cost €6,99 per month once a 30 day trial ends.

Key Features

• Hiring pipelines with candidate portals. Each role gets its own pipeline with stages, GitHub code assignments, resume extraction, team reviews, and interview scheduling. Candidates reach their application through a private magic link rather than creating an account.
• End-to-end vulnerability disclosure. Security teams run report intake, triage, SLA tracking, duplicate checks, researcher appeals, bounty approvals, and audit exports inside Kit. Researchers see a branded portal showing fix status and payout state.
• Training with tamper-evident registers. Courses cover SOC 2, ISO 27001, GDPR, and HIPAA. Employees upload evidence such as a locked screen screenshot, and the completion register exports as CSV or PDF with employee IDs, departments, and dates. There are no per-learner fees.
• MCP access for AI assistants. More than 190 tools expose Kit records to ChatGPT, Claude Code, Cursor, GitHub Copilot, or any other Model Context Protocol client. Tool annotations mark each call as read-only, destructive, or contacting an outside person before it executes.
• Twenty hiring process templates. Ready-made stages, candidate instructions, and timing cover roles ranging from junior engineer to registered nurse, organized across seven categories and published in five languages.
• Outreach as a separate add-on. Prospect research draws on LinkedIn, company sites, and a knowledge base, then drafts an email for human review. Reply detection, bounce handling, and MCP tools are included. The add-on costs €17,99 per month.
• Compensation Research in beta. Advertised salary ranges are collected from live job postings and refreshed daily, with tracking by role and region and exportable comparisons.

How It Works

Signup requires a card, though the 30 day trial is not charged and cancellation happens in settings. From there a team either copies one of the twenty hiring templates or builds a pipeline from scratch, then adds seats for colleagues who need access. Candidates, security researchers, and trainees receive magic links that open a portal hosted on the company domain, which removes password management for external parties. Internal staff work either in the browser interface or through an AI assistant connected by pasting an onboarding prompt into an MCP client; the public MCP server is usable before signup, while scoped access tokens govern what an assistant can read or change. Daily operation centers on a needs-attention view that surfaces reviews awaiting a decision, code tasks nearing expiry, candidates still waiting for a reply, and reports approaching an SLA deadline. Slack, GitHub, Google Calendar, Google Meet, and webhooks round out the integration surface, and account data can be exported before cancellation.

Use Cases

• A seed-stage founder making a first engineering hire copies the Software Engineer Standard template, sends candidates a single link for code assignments and interview booking, and reviews panel feedback in one place. Interviews land on the candidate record alongside scheduling, which removes the usual email thread.
• A security lead at a Series A company replaces a shared inbox with Kit's disclosure workflow. Reports arrive with SLA countdowns, duplicate flags, and researcher appeals, and approved bounties write a ledger credit that the researcher can see in the portal. Audit exports then answer what was disclosed, when, and how quickly it was acknowledged.
• A compliance manager running SOC 2 readiness enrolls staff in awareness training, collects screenshot evidence per person, and exports a completion register for an auditor. The same account already holds the hiring records, so evidence requests do not require a second vendor relationship.

Frequently Asked Questions

Is a credit card required to start the trial? Yes. A card is entered at signup, but no charge occurs during the 30 day trial. Cancelling before day 30 avoids a charge, otherwise the paid plan begins automatically.

How does per-seat pricing work, and what costs extra? Hiring, Training, the full Security workflow, and Compensation Research (beta) are included at €6,99 per seat per month. AI Outreach is the only separately billed add-on, at €17,99 per month, and seats can be added or removed at any time with automatic billing adjustments.

Can an AI assistant change records in Kit? Yes. Connected assistants can read candidates, advance stages, draft replies, and manage campaigns, subject to scoped tokens and the permissions granted. Each tool declares whether it reads data, makes a destructive change, or contacts someone outside the company.

Where is customer data stored? Kit stores customer data on EU infrastructure and offers a Data Processing Agreement to every customer. Connected AI providers apply their own processing terms.

Who is StartupKit built for? Small and mid-sized companies that hire, run a disclosure program, and need compliance training evidence. Teams that need only one of those functions may find a dedicated point tool cheaper and deeper.