Pricing

keptsec publishes security-patched forks of abandoned open-source packages that have open security advisories. Every fork, and all the evidence for every release, is public and free. Paid plans add a signed evidence bundle for the whole catalog and files kept current for your organisation. Prices are per organisation, not per package or per seat.

Checkout is not open yet

Paid plans cannot be bought yet. Checkout opens once the Team evidence bundle and the organisation VEX feed are being produced. Until then, everything listed under Free is available to everyone.

Free, for everyone

For every fork and every release:

Every fork in the catalog, free to install and use under its open-source licence
Public source with a published diff against the last upstream version
Signed releases with build provenance (Sigstore), published to npm, and a GitHub build attestation
An OpenVEX statement and a CycloneDX SBOM for each release
An advisory record in OSV format for each release
The proof-of-concept tests and the public sandbox re-run log for each release, listed in the attestation index

Team: $49/month per organisation

Everything in Free, plus:

One signed evidence bundle for the whole catalog, with an index and a script to verify every signature in it
One VEX feed for your organisation, regenerated by the pipeline on every re-run
Both delivered as access to a private evidence repository on GitHub

Org: $299/month per organisation

Everything in Team, plus:

A VEX and remediation report generated by the build and test pipeline against a lockfile you provide
Access to a pinned LTS branch for each catalog fork
Access to a private package registry

Oracle for coding agents: free tier

The oracle is not available yet. When it launches, it will be free up to 50 calls per day.

Each answer comes from a recorded sandbox run and includes a link to that run’s log

What you are paying for

All paid plans are software subscriptions. You pay for the files and the access listed above, which our automated build, test and signing pipeline produces. No plan includes consulting, audits, manual review, guaranteed response times, service level agreements (SLAs), uptime commitments or any other service performed by people.

Payments and refunds

Polar is our merchant of record and authorised reseller. When you buy, you buy from Polar, which processes the payment and issues your receipt and invoice.
Prices are in US dollars, per organisation, per month. Polar adds VAT or sales tax at checkout based on your billing address.
Paid plans renew automatically every month, and you are charged at the start of each month until you cancel. You can cancel at any time online in Polar’s customer portal (linked from your receipt) or by writing to support@keptsec.com. You keep access until the end of the month you have paid for.
Refunds: ask within 14 days of any payment, the first one or a renewal, through Polar or at support@keptsec.com, and we refund it in full, no questions asked. A refunded subscription is cancelled.

Questions

Ask in GitHub Discussions on the keptsec organisation.

Billing and account questions: support@keptsec.com.

Legal

Questions about these documents: legal@keptsec.com.