Open Source

The protocol is free.
We make it easy.

SIG is open source and MIT licensed. Self-host everything, or let Authkeep handle the infrastructure so you can focus on building.

100%
Open source protocol. MIT licensed, no vendor lock-in.
<1ms
Verification latency. Local-first, no round-trips to an auth server.
Ed25519
Cryptographic signatures on every event. Tamper-evident by design.
Zero
Trust required. Verify any relationship against published attestations.

Choose your plan

Start free with the full protocol. Upgrade when you need managed infrastructure, analytics, or enterprise support.

Open Source

Free

Self-host the full SIG stack. Everything you need to issue and verify attestations.

  • Full CLI tooling
  • All Rust crates (core, jose, server, client)
  • Unlimited issuers & events
  • MIT licensed
  • Community support
Get Started
Most Popular

Pro

$99 /month

Managed hosting with monitoring, analytics, and priority support.

  • Everything in Open Source
  • Managed .well-known hosting
  • Dashboard & analytics
  • Automated key rotation
  • Up to 10 issuers
  • Email support (24h SLA)
Start Free Trial

Enterprise

Custom

Advanced compliance, SLAs, and dedicated support for large organizations.

  • Everything in Pro
  • Unlimited issuers
  • SSO & RBAC
  • 99.99% uptime SLA
  • Audit logs & compliance exports
  • Dedicated support engineer
Contact Sales

Get started in seconds

Install the CLI, initialize an issuer on your domain, and start publishing signed attestations. No account required.

terminal
$ cargo install authkeep-cli
Installed ak v0.1.0
$ ak init-issuer --domain id.authkeep.io
Created .well-known/sig.json
Created .well-known/jwks.json
Created .well-known/did.json
Created .well-known/sig/events.jsonl
$ ak check --sig .well-known/sig.json \
--subject "did:key:z6Mkf1...agent"
allow relationship=agent seq=1

Deploy your way

Same protocol, same tools. Run Authkeep wherever your infrastructure lives.

Managed Cloud

We host everything — .well-known endpoints, key management, event feeds, and dashboard. Multi-region with 99.99% uptime. Start in minutes.

Best for Startups & SaaS teams

On-Premise

Deploy the full stack on your own servers. Complete control over data residency, network configuration, and hardware security modules.

Best for Enterprise & Government

Air-Gapped

For classified and high-security environments. Operate entirely offline — sign attestations, rotate keys, and verify relationships with zero network dependency.

Best for Defense & SCIF environments

Hybrid

Mix managed and self-hosted. Run issuers on-prem while publishing feeds through Authkeep's CDN, or keep keys local while using our verification infrastructure.

Deployment comparison

Managed Cloud On-Premise Air-Gapped Hybrid
Setup time Minutes Hours Hours Hours
Data residency Multi-region Your control Your control Split
Network Required Internal only None Partial
Key management Managed Self-managed Self-managed Split
Updates Automatic Automatic Manual Automatic
Best for Startups, SaaS Enterprise, Gov Defense, SCIF Regulated industries

Frequently asked questions

Can't find what you're looking for? Reach out on GitHub.

Is the protocol really free?

Yes. The SIG protocol specification, all Rust crates, and the CLI are fully open source under the MIT license. You can self-host everything at no cost, forever.

What does the managed service include?

Pro and Enterprise plans host your .well-known endpoints, manage key rotation, provide a dashboard for managing attestations, and include monitoring and analytics.

Can I migrate between self-hosted and managed?

Absolutely. Everything is based on the open SIG protocol, so your event logs and keys are fully portable. Export or import at any time — no vendor lock-in.

Do you offer annual billing?

Yes — annual plans come with two months free. Contact us for Enterprise annual agreements.

What happens to my data if I cancel?

Your event logs and keys are always exportable. After cancellation, you have 30 days to export everything. The protocol is portable — switch to self-hosting at any time.