Global standards
US
Australia
Netherlands
Failure
You go down with your vendor
7 000 Delta flights canceled over five days after a faulty CrowdStrike update crashed 8.5 million Windows machines.
Software resilience
Keep your software running. Whatever happens.
Protect the applications your business can't lose: the ones you build and the ones you buy. When an app fails, get it released to you, recovered for you, or kept switched on during recovery.
- ISO/IEC 27001:2022 certified
- 10+ years securing software
Proof it builds, ready for your auditor.Recoverability CertificateRebuild Report and SBOMFramework references for DORA and PRA SS2/21
Building software resilience for 3 500+ teams, from regulated enterprises to fast-growing software vendors
Third-party software risk
Your business runs on software you don't control.
Whether you bought it or built it, when software fails, you feel it first. And without a plan already in place, recovery becomes improvisation.
These companies thought they were covered, too.
Attack
An attacker takes over your systems
5 weeks without building a single car after a cyberattack forced Jaguar Land Rover to shut down all of its systems.
Non-compliance
A supplier's code becomes your fine
£1.25M GDPR fine for Ticketmaster after a third-party chatbot on its payment page leaked customers' card details.
Incidents like these happen so often we keep a running record. Follow the News Ticker
Why CodekeeperBuilt to bring software back.
For 10+ years, Codekeeper has been the neutral party between the people who build software and the people who depend on it. Whatever happens, we make sure the software comes back.
Neutral by design.
Your software stays yours. We hold the copy and release it only on the terms you agreed.
Your code stays private.
Verification runs on Codekeeper's own AI models, inside a secure environment.
ISO 27001 certified.
Your copy is held to an independently audited security standard, checked every year.
Three ways back
When your software goes down, there are three ways back.
Released to you · Escrow Pro
Take the software over yourself. You get its code, verified to build, so your team can keep going.
Escrow Pro
Recovered for you · Resilience Pro
Have it recovered for you. Our engineers rebuild and restart the software from the copy we hold, on a best-effort basis.
Resilience Pro
Kept switched on · Continuity Pro
Keep the software running while it's fixed. We keep the service available during recovery.
Continuity ProWhat's new
From safekeeping to proof you can recover.
Having the code is a start. But getting your application back is the goal. Escrow Pro, Resilience, Continuity, and Agentic Verification take your software protection all the way there.
See what changed →Chapters
More films
Verification
Codekeeper's own AI models rebuild your software before you need it
Until now: software verification was done by hand and took weeks.
Recovery
Codekeeper can now run the recovery for you
Until now: escrow released the code to you, and your team ran the recovery.
Continuity
Your services stay online while the recovery runs
Until now: everything stayed dark until the recovery was done.
You choose the protection. You keep the control.
Every application you can't lose sits in one account, with the evidence to show for it.
Need daily backups of your own systems? See Software Backup. View all pricing plans
How we prove it
Proof beats promises.
Anyone can say your software can be recovered. We rebuild it to show you.
Two ways to get the proof.
Two ways to get the proof.
Included in Pro plansAgentic Verification. A ready-to-run copy of your software, when you ask.
AI agents work out how your software is built and rebuild it from the copy we hold, on Codekeeper's own models, up to four times a year, on supported technology stacks.
Add-on to any planExit Exercise. Our most complete test of your software.
Our specialists recover your software from the deposit alone, without the vendor or the original developers, bring the data back, deploy it, and test the business functions you nominate.
What you get in each plan
Every planEscrow · Resilience · Continuity
- Plan Certificate
- Vault Certificate
- Vault Report
ProvesIt's there.
Pro plansAdds Agentic Verification
- Recoverability Certificate
- Rebuild Report
- SBOM
- Tested isolated compile
- Exit workbook
ProvesIt builds.
Exit Exercise add-onAdds a tested exit
- Exit Exercise Report
- Exit Exercise Certificate
- SBOM
- Framework annex
ProvesYou could exit and keep working.
See an illustrative evidence pack, with example values, before you talk to us.
Regulators now expect an exit plan that works.
Financial regulation has moved on from "do you have a contract?" to "could you actually leave, and keep running?"
European UnionDORA
Regulation (EU) 2022/2554
Art. 28(8)Exit plans shall be comprehensive, documented and, in accordance with the criteria set out in Article 4(2), shall be sufficiently tested and reviewed periodically.
United KingdomPRA SS2/21
PRA Supervisory Statement SS2/21
¶ 10.24Firms should take reasonable steps to test exit plans; in particular, those relating to stressed exits.
Codekeeper's evidence supports your assessment. Whether it meets a specific requirement is for you and your assessor to decide.
Whichever side of the software you're on.
- You buy software and can recover it yourselfRelease rights are agreed up front. If the vendor can't support it, the copy comes to you.Best fitEscrow
- You buy software and want us to recover itThe same copy, held with us. If the software fails, our engineers bring it back for you.Best fitResilience
- You sell software to enterprisesShow buyers their software is protected and proven to build, so deals don't stall.
Best fitResilience Pro - You run a system that can't go offlineWe keep the services it runs on paid, so it stays online while it's recovered.Best fitContinuity
What teams say after setting up software protection with Codekeeper.
“Their team was responsive and helpful, and that made the process nice and smooth. Codekeeper is providing us with an escrow platform which we needed in order to secure an enterprise sales agreement with a new customer.”
Daniel K.
Co-Founder & CEO, Small business
“We've had a great experience with CodeKeeper. The setup process was smooth, and the team made everything very straightforward. Knowing our critical software assets are securely protected gives us real peace of mind.”
Jordan Adler
Google review
“We worked with Codekeeper as our escrow provider for major enterprise deployments and found them to be extremely professional, responsive, and flexible throughout.”
Ross Kilshaw
Google review
Connect once. Your deposit stays current.
We've rethought software protection from the ground up to give you more flexibility, more features, and better value than traditional providers. Connect your systems once for automatic daily syncs, up-to-date backups, and current deposits.
- 50+ integrations, including GitHub, GitLab, Bitbucket, AWS, Azure, and Google Cloud
- Deposits sync daily, with no per-deposit fees
- ISO 27001 certified, with AES-256 encryption at rest
- Beneficiaries get access once the release is verified
Frequently asked questions
Good questions to ask first.
What's the difference between Escrow, Resilience, and Continuity?
The difference between Escrow, Resilience, and Continuity is who brings your software back, and whether it stays online in the meantime. With Escrow, the copy is released to you and your team runs the recovery. With Resilience, our engineers run it for you. Continuity sits on either one and keeps the hosting and services behind your software paid and switched on for an agreed period, with the bills recharged at cost, so it stays online while it's recovered.
What is an "application"?
An application is any system your business can't lose: software from a vendor, a SaaS platform, an AI system, or something you built yourself. You pay per application, at a different rate for software, SaaS, and AI.
Is my code safe with you?
Yes, your code is safe with us. Codekeeper is ISO/IEC 27001:2022 certified, and every copy is encrypted in transit and at rest. Agentic Verification runs on our own models, so your code never reaches a public AI. For the full detail, see our Trust Center.
Will this make us compliant with DORA or NIS2?
Codekeeper won't make you compliant with DORA or NIS2 on its own, and no product can. What we give you is evidence to support it: certificates, Rebuild Reports, SBOMs, and Exit Exercise Reports. They support your own compliance assessment; they don't replace it.
Protect the software your business can't run without.
If one application going down would take your business with it, start there. We'll walk through your stack and show you what each protection covers.