European Union
Global standards
US
UK
Australia
Netherlands
Software Resilience. Managed Recovery for the applications you can't risk rebuilding yourself.
With Resilience, every part of the application you rely on sits in a neutral vault, and should the worst happen, our engineers take charge of the recovery. Resilience Pro shows the deposit builds beforehand.
From $369 /mo
- ISO/IEC 27001:2022 certified
- Daily syncs across 50+ integrations
- Code in a neutral vault
- Synced daily
- Brought back online by us
- Rebuild passedPro
Relied on by 3 500+ teams across more than 150 countries, from regulated enterprises to software vendors growing at pace
Why Resilience
Recovered for you. By Codekeeper's engineers.
Restoring critical software after a failure takes specialist skills, and it shouldn't be your burden. Resilience puts our engineers on it from beginning to end.
Your team
- Request the recoveryJust once
- Rebuild the applicationTaken care of
- Configure and restart itTaken care of
Codekeeper's engineers
Recovering Payments Core
- Take in the depositReceived
- Rebuild from sourceDone
- Configure the environmentDone
- Restart and checkHealth checks passed
What's at stake
Having the code isn't enough. Recovery takes three things most teams don't have ready.
Boards and auditors will ask what happens when a critical application fails. A deposit puts the code within reach, yet someone still has to rebuild, configure, and run it. Doing that in-house means having expertise, capacity, and an environment ready when the moment comes.
Expertise
People who know how this application rebuilds.
When a vendor stops, through insolvency, a takeover, or discontinued support, the people who knew the application usually leave with it. Your team is left to work out someone else's software from the deposit.
Capacity
Engineers free to do the work on emergency notice.
Rebuilding under pressure takes skills and time most teams aren't staffed for, and shouldn't need to be. The people you would pull in are already running the rest of the business.
Environment
A place to deploy while production is down.
Servers, services, and configuration have to be stood up before a line of the deposit can run, and the setup that worked for the vendor was never written down for you.
Resilience puts Codekeeper's engineers on that job, on a best-effort basis, so "who brings the application back?" already has an answer.
Handled by our team
Managed software recovery, in plain terms.
Managed software recovery is a resilience solution, set up through a legal agreement between the vendor, their customers, and Codekeeper, that makes specialists responsible for restoring critical software.
- The vendor places everything the application needs on deposit, so buyers get a recovery with a named operator behind it.
- Codekeeper holds it in a secure vault until a release condition sends it our way.
- Our engineers carry out the recovery and restore the application to service.
After a release condition
Should the worst happen, recovery falls to us.
There's no deposit for your team to wade through. It's released to Codekeeper, where our engineers rebuild, configure, and restart the application.
We verify the request.
Our team compares it with the release conditions set out in your software resilience agreement.
We begin with the deposit.
All the agreed materials, as last synced and checked, along with the most recent Rebuild Report on Resilience Pro.
We take on the recovery.
While our engineers work, you carry on running the business.
Application types
Shaped around the way your application runs.
Each of on-premises software, SaaS, and AI needs something different in the vault. When your Resilience plan matches how the application runs, our engineers have everything required to restore it.
Software
Installed and on-premises applications- Source code
- Data
- Documentation
From $369
SaaS
Subscription and hosted applications- Source code
- Data
- Documentation
- Deployment infrastructure
- Third-party services
- Credentials and access
From $459
AI
AI systems and models- Models
- Model deployments
- Agents and prompts
- Workflows
From $879
How it works
Sign one agreement, then let our engineers handle the rebuild.
-
Our specialists work through each application with you, pinning down what our engineers would need to restore it.
- Who
- Your team and a Codekeeper specialist, from the first onboarding call.
- What you decide
- Which parts of each application go in the vault: usually the source code, build scripts, documentation, and data, plus credentials and configuration where relevant.
- You get
- A deposit scope for each application, written into the software resilience agreement.
-
A single agreement, signed by the vendor and their customers, names who depends on the application and what starts a recovery.
- Who
- The vendor, their customers, and Codekeeper. For vendor software, the vendor signs, since the code can only come from them.
- Your options
- Two-party (bipartite), where the vendor signs once and adds claimants as they come on board, or three-party (tripartite), where one claimant signs alongside the vendor from day one.
- You get
- A software resilience agreement with the release conditions agreed at signing, such as insolvency, discontinued support, or a material breach.
-
Changes sync daily through 50+ integrations, while a monthly Vault Report shows which agreed materials sit in the deposit.
- Who
- Our specialists, working with your developers to connect the first deposits.
- Then
- Each change syncs daily, and the deposit is checked automatically every month.
- You get
- A Vault Report each month, a Vault Certificate, and a Resilience Certificate that shows the arrangement is in place.
-
Run a build test from your account at any time, and add the certificate it produces to your evidence.
- How
- AI agents in the Codekeeper AI Verification Lab rebuild the deposit in isolation, without calling on the vendor.
- If something is missing
- It is flagged, so the vendor can add it before a recovery is ever needed.
- You get
- Proof it builds: a Recoverability Certificate, backed by a Rebuild Report, an SBOM, an exit workbook, and a tested isolated compile.
-
When a release condition applies, the deposit is released to Codekeeper and our engineers restore your application to service.
- Who
- Codekeeper's engineers, working from the deposit in the vault.
- First
- We verify the release condition before any recovery work starts.
- You get
- A recovery run for you, so your own team can stay on the business.
Want to see how a recovery would run for your applications? Talk it through with a specialist
Resilience or Resilience Pro
Recovered by us. Proven before you need it.
Resilience keeps all our engineers would need to restore your application complete and ready to recover. Resilience Pro adds a test of the deposit, as Codekeeper's AI agents rebuild your software at a time you pick, so any recovery begins from a deposit our engineers know will build.
Resilience
From $369 per month
Everything you need to be protected.
Included
- Software held by a neutral party
- Syncs every day through 50+ integrations
- Missing files caught each month
- Recovery carried out by our engineers, on a best-effort basis
Resilience Pro
RecommendedFrom $599 per month
Prove the rebuild before a recovery is ever needed.
Everything in Resilience, plus
- Agentic Verification, with as many as four rebuilds a year on supported technology stacks
- Sovereign AI agents in the Codekeeper AI Verification Lab
- Any missing files flagged during each rebuild
- A tested isolated compile you can deploy
- An exit workbook to guide the recovery
- Recoverability Certificates and SBOMs on file
ResilienceResilience CertificateConfirms the agreement is active and the deposit has been checked. Values are examples.
Resilience ProRecoverability CertificateRecords the rebuild and its outcome. Release rights stay with the agreement. Values are examples.Included with Resilience
We take care of the agreements, deposits, and security.
A legal framework comes built in.
Choose two-party, three-party, or multi-party terms, which our in-house counsel drafts around your conditions.
We handle negotiation and jurisdiction.
Pick your preferred governing law, and let our legal team take every round of talks with the other side.
Unlimited deposits.
Keep as many versions as you need, synced daily through our 50+ integrations or uploaded manually.
A shared dashboard for both parties.
Trace every action in a full log, and download certified software resilience evidence whenever you like.
Security in every deposit.
Protect each copy with AES-256 encryption and MFA, in tamper-proof, immutable storage.
Releases processed round the clock (24/7/365).
Report a failure at any hour, and our team confirms the release conditions before our engineers step in.
Other ways to protect
Is Resilience the wrong fit for your application?
Whether you'd prefer to handle the recovery in-house or need critical services kept running throughout, there's a plan for that.
Escrow
For the software your own team can bring back. Put a copy of critical software with a neutral party, ready for your team to recover once an agreed condition applies.
From$189
ExploreEscrowContinuity
For the services that just can't go offline. Keep critical applications up by paying their hosting and service bills for an agreed period during the recovery.
From$1,339
ExploreContinuityPut Managed Recovery behind the applications that matter.
Once critical software fails, every minute of recovery counts. Speak to a resilience specialist, and the call will cover:
- Your critical applications, reviewed one by one
- A setup plan that takes you from agreement to first deposit
- Straight answers on release terms, recovery work, and verification
Frequently asked questions
What to know before we take on your recovery.
What sets Resilience apart from Escrow?
What sets Resilience apart from Escrow is who carries out the recovery. Under Escrow, the deposit is released to you, and your own team restores the application. Under Resilience, the deposit is released to Codekeeper, and our engineers handle the recovery for you.
Must the vendor be involved?
Yes, for vendor software the vendor must be involved, since only the vendor can deposit their source code. A two-party arrangement lets the vendor set up once and add claimants later, while a three-party arrangement includes one claimant from day one.
Does Resilience cover applications we've built in-house?
No, Resilience doesn't cover applications you've built in-house; it's for software you depend on from a vendor. For systems your own team builds and runs, Software Backup fits better, with daily backups of the code, data, configuration, and documents that you can restore from your dashboard.
What goes into a Resilience deposit?
Everything our engineers would need to rebuild and run the application goes into a Resilience deposit: source code, build scripts, documentation, data, and, where it applies, credentials and configuration. Because a recovery needs much more than code, a Resilience deposit reaches well beyond source code escrow. Your software resilience agreement lists the contents, and the monthly automated check records what's present.
Are we responsible for setting up the deposit?
No, you aren't responsible for setting up the deposit on your own. Your team and ours set up the first deposits and integrations together, starting with an onboarding call.
What sets off a recovery?
A recovery is set off when one of the release conditions in your software resilience agreement applies, such as the vendor's insolvency, discontinued support, or a material breach. Once we've verified the condition, the deposit is released to Codekeeper for our engineers to restore the application.
What do you mean by "best effort"?
By "best effort", we mean that we carry out the recovery, but Resilience alone carries no recovery service level. To bring a recovery's cost under an agreed service level, add Cost coverage, which is quoted per agreement according to the application and the recovery it would require.
Are there costs on top of the monthly price?
Yes, on top of the monthly price there's a one-off setup fee of $499 per agreement, the same on Resilience and Resilience Pro, plus release processing at $199 per hour if a release is ever requested. One claimant comes included, with more available as an add-on. Should a recovery ever be run, the work is billed to the claimants who need it; the monthly price covers custody, checks, and certificates, along with Agentic Verification on Resilience Pro.
What extra does Resilience Pro include?
Resilience Pro includes Agentic Verification as its extra: AI agents independently rebuild a complete deposit in the sealed Codekeeper AI Verification Lab, as many as four times a year, on supported technology stacks. Every successful rebuild issues a Recoverability Certificate, along with a Rebuild Report, an SBOM, an exit workbook, and a tested isolated compile. Let us know what you run, and we'll confirm your stack in the demo.
What if the application must never stop?
If the application must never stop, Continuity is the plan you need: alongside the Escrow or Resilience recovery you pick, we keep the live environment paid for and running for an agreed period, with its bills recharged at cost. Continuity Pro adds Agentic Verification.