Get audit, compliance and security for your software platform

Paid Flows start at $99, but discounts start to kick in when you reach 50 Flows and become increasingly cheaper as you scale. Contact us for specifics on your needs.

An Environment Change is recorded with a snapshot whenever a deployment, termination or scaling event occurs in your runtime environment. This snapshot is sent to Kosli.

Environment Changes build a record of snapshots of how your runtimes are really changing. This record allows you to quickly identify unauthorized changes, and is the basis for your compliance and audit status.

We’ll get in touch to discuss how to scale your plan to meet your needs.

You can decide to proceed to a paid plan or scale back down to the Free tier.

You need to upgrade if you exceed 10 Flows, make more than 5,000 Environment Changes each month, or require longer than 90 days of data retention. Larger organizations with audit and compliance requirements usually start with a free trial of the Pro Plan.

Yes, you can record up to 10 Flows and 5,000 Environment Changes each month.

Yes, you can trace the changes made to your environments all the way back to the initial commit.

Yes, you can do this.

It means that you choose to report to Kosli that a service or component has had an e.g. test or security scan, or anything else you wish to report from your CI process.

Yes, you can store this evidence in Kosli’s Evidence Vault and link it to your attestation.

Kosli’s Evidence Vault is a secure, append-only data store that holds your data in a tamper-evident way. It gives you 3rd party proof that you’re following your process.

There’s a link to the Evidence Vault next to the metadata for your artifacts in the Kosli app. Click and download.

Yes, for this we have the Audit Trail feature. An example of a business process that you might want to log in an Audit Trail is the provisioning and revoking of user accounts and access. You can store your Audit Trails in the Evidence Vault.

For this we have an Export to CSV feature. Simply select the evidence you would like to export e.g. all deploys to production, choose a date range, and export your evidence in an auditor-friendly format. In the free tier data retention is limited to 90 days, so to export data older than that you should choose the Pro plan.

By recording all the changes to your environments, and connecting them to all the events that happen in your Flows, Kosli gives you real time compliance status for all running artifacts. Is a component in production missing e.g. a unit test? Kosli will flag it up with a Notification. As with passing a software audit, proving compliance in the free tier is only possible within the last 90 days. For a longer compliance record you should choose the Pro plan.

By recording every change to your environments Kosli detects unauthorized workloads, off-pipeline changes, and malicious deployments, and can alert you to them with notifications.

Kosli can provide various notifications on events like deployments, compliance issues, and scaling events.

We’re completely agnostic when it comes to your tool choices - Jenkins, Circle CI, Travis, Bitbucket - Kosli integrates with all of them.

Kosli works for teams in any industry (finance, health, automotive, etc) and also for compliance to any standard like ISO, SOC2, FedRamp, etc.

No, you install Kosli CLI to monitor, log, and ship information to Kosli

Yes, Enterprise customers can choose to have their data stored in a specific jurisdiction

Yes, this is available for Enterprise customers

Yes, this is available for Pro and Enterprise customers.

Yes, for Enterprise customers we offer a managed single tenant option which can be restricted to your network environment.