Private beta · launching soon

The trust layer for modern software

Identity, access control, feature flags, metering, and billing, five composable, multi-tenant building blocks behind one API. We're putting the finishing touches on the platform; join the early-access list to be among the first to build on it.

Request early accessSee the product
  • Multi-tenant & secure by design
  • Free tier at launch
  • No credit card to join
keystone · control plane
5 services
Your appKeystone APIONE CONTROL PLANEIdentityAuth · Orgs · API keysAccess ControlRBAC · ReBAC · ABACFeature FlagsFlags · EntitlementsMeteringUsage · Limits · QuotasBillingPlans · Invoices
0

Composable building blocks

0

Unified API

0%

Uptime SLA target

<0ms

Target p50 decision latency

Five building blocks, one platform

IdentityAccess ControlFeature FlagsMeteringBilling
The platform

Everything you need to run a serious SaaS

Adopt one block or all five. Each is independently deployable, metered, and gated, and they compose into a single control plane.

Identity

Auth, organizations, members, MFA, and API keys with multi-tenant isolation built in.

  • Email + password, passwordless codes, and TOTP MFA out of the box
  • Organizations, roles, members, and invitations
  • Rotating refresh tokens with reuse detection
Access Control

RBAC, ReBAC, and ABAC over a managed OpenFGA core with a fail-closed decision API.

  • Model resource types, roles, and relationships
  • Fail-closed decisions: check, batch-check, expand, list-objects
  • Relationship-based inheritance and resource hierarchy
Feature Flags

Multivariate flags with per-environment targeting, plus entitlements and plans.

  • Boolean, string, number, and JSON flags
  • Per-environment values with targeting + percentage rollout
  • Entitlement plans and per-subject overrides
Metering

Idempotent usage ingestion, windowed counters, limits, and soft/hard quota enforcement.

  • Idempotent event ingestion (dedup by id)
  • Day / month / lifetime windowed counters
  • Limits, per-subject overrides, and time-bounded top-ups
Billing

A rating engine for flat, seat, tiered, usage, and hybrid pricing behind a merchant of record.

  • Flat, seat, tiered, volume, usage, and hybrid pricing
  • Versioned, time-bounded plans (never mutated)
  • Proration, coupons, trials, and top-ups
Composable by design

Versioned contracts. Zero breaking changes.

Explore the product

Be first to build on Keystone

We're onboarding early-access teams ahead of launch. Join the waitlist and we'll reach out with your invite, identity, authorization, metering, and billing, without the multi-quarter build.

Join the waitlistTalk to us