StartupKit
StartupKit bundles hiring, security disclosure, compliance training and cold outreach into one €6,99 per seat account with 190+ MCP tools for AI assistants.
Overview
StartupKit, branded as Kit, is a European software platform that combines four operational products inside one account. Hiring pipelines, vulnerability disclosure handling, compliance training, and cold outreach share one login, one seat price of €6,99 per month, and a 30 day trial. Compensation Research, still labelled beta, is bundled at no cost, while outreach is the only separately billed add-on at €17,99 per month. Customer data is stored on EU infrastructure and a data processing agreement is available to every account.
Key Features
Hiring pipelines with magic link portals. Per role pipelines include GitHub code assignments, resume extraction, team reviews, and interview scheduling. Candidates choose interview slots from real interviewer availability and respond to offers through one private link, without creating an account.
Vulnerability disclosure workflow. Report intake, triage checklists, duplicate detection, severity scoring, and acknowledgment SLAs are handled in Kit. Bounties are approved with a recorded ledger credit, and researchers track fix verification and payout status in their own portal.
Compliance training register. SOC 2, ISO 27001, GDPR, and HIPAA decks ship with tamper evident completion records stored as one row per person, including employee ID, department, role, and date. Registers export to CSV or PDF for auditors.
Outreach with approval gating. Kit researches prospects from LinkedIn, company sites, and a knowledge base, then drafts email copy. Nothing sends without operator approval. Replies from all campaigns collect in one priority ordered inbox tagged by detected sentiment.
MCP server with more than 190 tools. Claude Code, ChatGPT, Cursor, and GitHub Copilot connect through the Model Context Protocol. Tool annotations flag read only actions, destructive changes, and messages sent to people outside the company.
Twenty hiring process templates. Templates cover 20 roles across 7 categories and 5 languages, with predefined stages, candidate instructions, and timing. Slack, GitHub, Google Calendar, Google Meet, and webhook integrations are included.
How It Works
Operators work in the browser, where a dashboard surfaces what needs attention: reviews waiting on a decision, code tasks about to expire, candidates awaiting replies, security reports approaching SLA deadlines, and training gaps in the register. Candidates, researchers, and trainees never log in. Each receives a private magic link that opens their own application, report, or course on a company branded domain. The same records remain reachable by AI assistants connected over MCP, where a prompt such as advancing an application or approving a bounty resolves into a tool call, with confirmation steps for anything destructive or externally visible.
Who It's For
The platform targets small startups and lean operations teams that need hiring, security disclosure, and compliance training without buying three separate systems. Engineering led companies running a vulnerability disclosure programme or working toward SOC 2 and ISO 27001 readiness fit the bundled model, as do founders who already work inside an AI assistant and want recruitment records reachable from it. Teams with high volume recruiting or a dedicated sales development function may find the single pipeline structure and the separately priced outreach module restrictive.
Pros & Cons
The Good
- Four normally separate products, hiring, security disclosure, training, and outreach, are bundled under a single €6,99 per seat price with Compensation Research in beta included at no extra cost.
- Magic link portals give candidates, researchers, and trainees passwordless access to their own records on a company branded domain.
- The MCP server exposes over 190 tools with annotations that distinguish read only calls, destructive changes, and actions that contact people outside the company.
- Completion registers, bounty ledgers, and audit evidence export to CSV or PDF, which supports compliance obligations rather than only tracking them.
- Customer data is hosted on EU infrastructure with a data processing agreement and a 30 day trial that is not charged until day 30.
The Bad
- A credit card is required at signup even though the first 30 days are free, and cancellation before day 30 is the only way to avoid a charge.
- Outreach is billed separately at €17,99 per month on top of the seat price, so the advertised entry price does not cover the full product set.
- Compensation Research is still in beta with coverage that varies by role and region, and both candidates and trainees rely on email links rather than a native mobile app.
