StartupKit, also branded as Kit, is a single account for hiring, security reports, compliance training, and outreach. It is aimed at small teams and early stage startups that would otherwise buy and connect several separate tools to interview candidates, run a vulnerability disclosure program, prove security awareness training, and contact prospects. Hiring covers pipelines for each role, GitHub code assignments, resume extraction, team reviews, and interview scheduling. The security module handles report intake, triage, response SLAs, duplicate checks, bounty approvals with a recorded ledger credit, and audit exports. AI assistants connect through the Model Context Protocol (MCP), so an MCP client such as Claude Code, ChatGPT, Cursor, or GitHub Copilot can read and act on the same records your team works with in the browser.

What Makes StartupKit Stand Out

Four products in one account: Hiring, Security, Training, and Outreach share the same candidate, report, and learner records, so the same person and the same status are not entered twice.

Magic-link portals with no passwords: Candidates, security researchers, and trainees each open a private link on your domain to check their stage, respond to an offer, follow a bounty payout, or submit training proof.

MCP access for AI assistants: More than 190 tools let an MCP client read applications, advance stages, triage vulnerability reports, and draft emails, with tool annotations that mark read-only actions, destructive changes, and actions that contact people outside your company.

Compliance training with a completion register: Decks covering SOC 2, ISO 27001, GDPR, and HIPAA, one row per person with employee ID, department, and completion date, plus CSV and PDF exports and evidence bundles for auditors, with no per-learner fee.

Interview scheduling included: Candidates book from real interviewer availability through the same magic link they use for their application, and scheduling is not sold as a separate add-on.

Who Should Use StartupKit

Early stage startups and small teams that need hiring, a public disclosure process, and training records without buying and integrating several separate SaaS products or hiring an operations team to run them.

Security and compliance leads who run report intake, SLAs, triage, bounty payouts, and audit evidence themselves and want the workflow, the ledger, and the export in one place.

Recruiters and hiring managers who want ready-made stages for 20 roles, structured reviews, and interview scheduling attached to the candidate record rather than spread across calendar and spreadsheet tools.

Frequently Asked Questions

What is StartupKit?

StartupKit, also called Kit, is a browser-based platform that combines an applicant tracking system, a vulnerability disclosure workflow, security awareness training, and cold email outreach in one account. It is priced per seat, at 6,99 EUR per seat per month after a 30-day free trial, and it also exposes its records to AI assistants through MCP.

How does the MCP integration work?

The Model Context Protocol (MCP) lets an AI assistant call StartupKit tools, so you can ask for a candidate summary, move an application to the next stage, triage a report, or find prospects who previously applied, without copying records into the chat. Connections use scoped access tokens tied to your Kit permissions, and tool annotations tell the client which calls read data, make destructive changes, or contact someone outside your company. Access can be revoked.

What are the limitations of StartupKit?

Outreach is a separately billed add-on at 17,99 EUR per month rather than part of the seat price, and there is no separate startup discount. Compensation Research is in beta and coverage varies by role and region. Customer data is stored on EU infrastructure and a DPA is available. StartupKit runs in the browser, so there is no native mobile app, and card details are required at signup even though the trial is not charged.

Ernest Bursa

Projects by Ernest Bursa

StartupKit