Why this page exists. It's a router for the visitor's first decision: Escrow, Resilience or Continuity. Production's /products lists nine products and three verification levels side by side, which leaves visitors to work out the difference for themselves. This page asks the one question that decides it: what should happen when the application fails?

The headline is the decision. "Choose what happens when it fails" frames all three products as jobs, not tiers. None of them is presented as the cheap option.
The hero visual routes at once. Three cards, one per job, link straight to the product pages, for visitors who already know what they need.
The level (base or Pro) comes second, on purpose. It's a smaller decision, made after the job is clear. 16 Oct: with Continuity Pro added, every protection has both levels, so this holds for all three. The hero copy didn't need to change: the "from" prices are the base levels.

Production's /products URL should redirect here. /how-it-works keeps the story of the model.

Products

Choose what happens when it fails.

Every Codekeeper protection holds the deposit, checks it and certifies it. The difference is the job on the day you need it: Escrow releases it to you, Resilience recovers it for you, and Continuity also keeps the live service switched on while we do.

Book a demo Get the sample evidence pack

Escrow from $199. Resilience from $399. Continuity from $1,449. Per application per month.

Trusted by 3,500+ teams
ISO/IEC 27001:2022 certified
All three on one account

Social proof straight after the promise. These are the logos production already uses, loaded from codekeeper.co. Where an image can't load (for example in the preview), the name shows instead. Use the approved set only.

Trusted by 3,500+ teams, from regulated enterprises to fast-growing software vendors

Two questions decide it. The whole line-up comes down to two choices: who runs the recovery, and whether the live service can wait. The picker asks them in that order and lights up one product. Without JavaScript, all three answers stay visible as plain links, so nothing is lost. The questions use the agreed jobs word for word: released to you, recovered by us, kept paid and switched on for an agreed period. 16 Oct: Continuity Pro added; the Continuity answer now shows its Pro price like the other two. The two questions and the picker logic are unchanged (the level is the second decision, further down).

Find your fit

Two questions. One answer.

Most teams know the answer to both already. If you're not sure, the cards below spell out what each choice means on the day an application fails.

All three hold the deposit with a neutral party, check it and issue a Software Resilience Certificate
Each one is priced per application, for software, SaaS and AI
One application can have more than one protection, on one account

1When the application fails, who should run the recovery?

2While we recover it, can the live service go offline? Only if Codekeeper runs the recovery.

Released to youEscrowFrom $199 · Pro from $449Explore Escrow Recovered by usResilienceFrom $399 · Pro from $649Explore Resilience Stays onlineContinuityFrom $1,449 · Pro from $1,699Explore Continuity

Per application per month, software list prices.

One card per job, in the same structure. Each card answers the same four things in the same order: what happens on the day, who it's for, what's included, and what it costs. That makes them easy to compare without reading every word. The inclusions are the confirmed lists from MESSAGING.md §6. Continuity's card says "best effort" for the recovery, as Resilience's does. 16 Oct: Continuity Pro added; base Continuity no longer includes Agentic Verification, so Continuity's card now lists "Everything in Resilience" and adds Pro in its own line, the same way as the other two cards. The lead now ends with the last sentence of the price logic. The "who it's for" lines follow the agreed scope: Escrow for supplier applications, Resilience for supplier or in-house applications, and Continuity for supplier-run services that must stay switched on. 17 Oct: the recovery models are named, as in the launch film (Danny): Self-Run Recovery for Escrow, Managed Recovery for Resilience and Continuity.

The three jobs

Released to you. Recovered by us. Kept online.

Escrow means the deposit is released to you and you run the recovery. Resilience costs more because we do the recovery. Continuity costs more again because we also keep the live environment switched on. At every protection, Pro adds Agentic Verification.

Escrow

Released to you

Your vendor's code, held by a neutral party under clear release terms.

Release condition met→Deposit to you→Self-Run Recovery

Choose it when

Your team, or a partner you pick, can rebuild and run the application
You license critical software from a vendor and want release rights in writing
You sell software and buyers ask for escrow before they sign

Included

Custody, release under the Escrow Agreement, automated check and a Software Resilience Certificate
With Pro: Agentic Verification and a Recoverability Certificate

From $199 · Pro from $449Per application per month · setup $499 Explore Escrow

Resilience

Recovered by us

The deposit comes to Codekeeper, and we bring the application back.

Application fails→Deposit to us→Managed Recovery

Choose it when

Nobody on your side could rebuild and run it in a hurry
Your board or auditor asks who brings it back, not just who holds the code
It's vendor software or a system your own team built

Included

Custody, recovery by Codekeeper (best effort), automated check and a Software Resilience Certificate
With Pro: recovery starts from a deposit we already know builds

From $399 · Pro from $649Per application per month · setup $499 Explore Resilience

Continuity

Stays online

Full continuity: we recover it, and keep the live service on meanwhile.

Vendor stops→Live environment kept on+Managed Recovery

Choose it when

You can't be without the application, even for a day
It runs on hosting, accounts and services a vendor pays for
The first question asked is "can you keep it running?"

Included

Everything in Resilience: custody, recovery by Codekeeper (best effort), automated check and a Software Resilience Certificate
Live environment mapped at setup and kept current; kept paid and switched on for an agreed period, bills recharged at cost
With Pro: everything in Resilience Pro, including Agentic Verification and a Recoverability Certificate

From $1,449 · Pro from $1,699Per application per month · setup $999 Explore Continuity

The side-by-side that settles it. Sales is asked "what's the difference?" more than anything else, so the answer gets a table with three equal columns and no "recommended" badge. Every cell is a confirmed fact. "The live service" row is where Continuity differs, and it uses the agreed wording exactly: kept paid and switched on for an agreed period, with no number of days and no uptime promise. 16 Oct: Continuity Pro added. The columns are the three protections, so the level difference sits in the cells: Continuity's proof is now the Software Resilience Certificate, tested in advance "With Continuity Pro", and its price shows both levels. 17 Oct: the recovery models are named, as in the launch film (Danny): Self-Run Recovery for Escrow, Managed Recovery for Resilience and Continuity.

Side by side

Same deposit. Different job on the day.

Escrow

Resilience

Continuity

When it's needed

The deposit is released to you

The deposit comes to Codekeeper

Who recovers

Self-Run Recovery: your team, or a partner you choose

Managed Recovery: Codekeeper, best effort

The live service

Not covered

Mapped at setup, kept current, and kept paid and switched on for an agreed period

The paperwork

Escrow Agreement

Resilience Arrangement

Continuity arrangement

Proof

Software Resilience Certificate

Tested in advance

With Escrow Pro

With Resilience Pro

With Continuity Pro

Cost coverage

–

Quoted add-on

From

$199, Pro $449

$399, Pro $649

$1,449, Pro $1,699

Setup

$499

$999

Software list prices per application per month. SaaS and AI have their own rows; see pricing.

Start from the situation, not the product. Many visitors recognise their situation before they recognise a product name. Each card names a common starting point and the protection that usually fits. This is guidance, not a rule, and the regulated-buyer card says so. Software Backup and the Exit Exercise appear here as the answers to two situations, so the router covers the whole line-up without crowding the main decision. 16 Oct: Continuity Pro added; the regulated-buyer card now names Resilience Pro or Continuity Pro, the levels that come with Agentic Verification.

Common starting points

Where teams usually start.

Recognise your situation? Here's the protection that usually fits. We'll check it against your applications in a demo.

A small vendor runs a critical system

You license it, and your team knows the stack

Get release rights in writing, and with Pro, proof that the deposit builds before you need it.

Escrow Pro

Nobody here could rebuild it

The know-how sits with the vendor

Put the recovery with Codekeeper, so there's a named party to bring it back.

Resilience

Operations run on a SaaS platform

Bookings, payments, care or logistics

Keep the live environment paid and switched on for an agreed period while we recover the application.

Continuity

A regulator wants a tested exit plan

DORA, PRA SS2/21 and similar

Resilience Pro or Continuity Pro for the application, plus an Exit Exercise when the plan needs to be tested in practice. Whether that meets a requirement is for you and your assessor to decide.

Exit Exercise

You sell software to enterprises

Buyers ask for escrow in procurement

Set up escrow once, with a two-party agreement, and extend protection to every client who asks.

Escrow

You need copies of your own systems

In-house code, data and configuration

Daily backups, kept outside production and restorable from your dashboard.

Software Backup

The second decision, kept short. Once the job is clear, the level is a smaller choice: base or Pro, at every protection. The ladder repeats the homepage line-up so the prices and lines match everywhere. 16 Oct: Continuity Pro added as a sixth card (from $1,699, Danny 11 Oct). Its line, "Full continuity, proven in advance.", is its level line (confirmed by Danny on 16 Oct). The shared line-up grid now lays the six cards out as the three protections across, base and Pro levels down, and one column on phones. The proof options (Agentic Verification and the Exit Exercise) link out, so this router doesn't have to explain them. 17 Oct: the recovery models are named, as in the launch film (Danny): Self-Run Recovery for Escrow, Managed Recovery for Resilience and Continuity.

Then choose the level

Protected, or ready to recover.

Every protection has a base level and a Pro level. The base level is everything you need to be protected. Pro is everything you need to recover: Agentic Verification rebuilds the deposit up to four times a year, so you know it builds before you need it.

Self-Run Recovery

Escrow

Everything you need to be protected.

From $199per application per month

Explore Escrow

Self-Run Recovery

Escrow Pro

Everything you need to recover.

From $449per application per month

Explore Escrow Pro

Managed Recovery

Resilience

We run the recovery.

From $399per application per month

Explore Resilience

Managed Recovery

Resilience Pro

Proven before we need it.

From $649per application per month

Explore Resilience Pro

Stays online

Continuity

Full continuity.

From $1,449per application per month

Explore Continuity

Stays online

Continuity Pro

Full continuity, proven in advance.

From $1,699per application per month

Explore Continuity Pro

Want to see the proof first? Agentic Verification shows the deposit builds, in hours. An Exit Exercise tests your exit plan in practice, added to any plan. See all prices

The secondary conversion, on every page. Visitors who aren't ready to talk can still leave their email. The sample evidence pack is the same offer on every page, so the site has one lead magnet instead of a different e-book per page. It also carries the launch story: proof, not promises. The button goes to the sample evidence pack page.

Sample evidence pack

See what your auditor would receive.

An anonymised set of outputs from a real Agentic Verification run, so you can judge the evidence before you talk to us.

Recoverability Certificate
Run report
SBOM and Exit workbook excerpts

Get the sample evidence pack

The questions that stop a decision. Each answer is short and uses confirmed terms only. Combining protections on one application is confirmed (27 Sep model). How a combination is priced is still open, so the answer sends visitors to sales instead of stating a price. 16 Oct: Continuity Pro added. The Continuity answer used to say Continuity includes Agentic Verification; it now compares each Continuity level with its Resilience level. The Pro and DORA answers name the three Pro levels.

Questions

Choosing between them.

What's the real difference between Escrow and Resilience?

Who does the work when the application fails. With Escrow, the deposit is released to you and your team, or a partner you choose, runs the recovery. With Resilience, the deposit comes to Codekeeper and we bring the application back. That's why Resilience costs more.

When do we need Continuity rather than Resilience?

When the live service can't wait for the recovery. Both include recovery by Codekeeper. Continuity also maps the live environment at setup and, if the vendor stops, keeps it paid and switched on for an agreed period, with the bills recharged at cost. The levels match: Continuity builds on Resilience, and Continuity Pro on Resilience Pro.

Do we need Pro?

Every protection has a Pro level: Escrow Pro, Resilience Pro and Continuity Pro. Pro adds Agentic Verification: AI agents rebuild the deposit in the Codekeeper AI Verification Lab up to four times a year and issue a Recoverability Certificate. Choose it when you need proof the deposit builds, for example for an auditor, a client or your board.

Can one application have more than one protection?

Yes, for example Software Backup for your own copies and Resilience for the recovery. Ask us how pricing works for a combination.

Which one helps with DORA or PRA SS2/21?

Firms usually look at Resilience Pro or Continuity Pro for critical applications, plus an Exit Exercise when the exit plan needs testing. Codekeeper's evidence supports your assessment; whether it meets a specific requirement is for you and your assessor to decide. See DORA and PRA SS2/21.

We're not sure yet. What's the next step?

Book a demo. We'll go through the applications you rely on and suggest a protection and level for each one.

The same close on every page. A router page ends by offering help with the decision it exists for. Every page ends on the same two actions in the same order: Book a demo, then the sample evidence pack.

Not sure which one? We'll help you choose.

Book a demo and we'll match each of your applications to the right protection and level.

Book a demo Get the sample evidence pack