Keel
Roadmap

Each phase earns the next.

Nothing gets built before the thing it depends on. We move on when a phase's gate is met, and the gates are commercial or measurable, not “feature complete.” We do not publish dates until the plan is firm.

Become a design partnerPlatform overview
  1. 1

    Foundation

    What we build

    KeelAuth enterprise-ready: SSO, SCIM, passkeys, audit export, agent identities and delegation. KeelKey core with AWS and Azure vault governance.

    Gate to move on

    First paying KeelAuth customers and three agent-identity design partners.

  2. 2

    Visibility

    What we build

    Keel Registry and Keel Intelligence basics: inventory, discovery, dependency graph, event stream, audit ledger.

    Gate to move on

    Design partners report shadow agents found and use the inventory in an audit.

  3. 3

    Control

    What we build

    Keel Governance: policy engine, approvals, delegated-authority limits, kill switch.

    Gate to move on

    Kill switch under 60 seconds end to end, and enforced policy on every registered pilot agent.

  4. 4

    Runtime enforcement

    What we build

    The Context Gateway: identity, purpose and redaction on agent context requests across two sources.

    Gate to move on

    Partners agree to pay for it.

  5. 5

    Detection

    What we build

    Keel Intelligence analytics: learned baselines, anomaly models, automated response under Governance policy.

    Gate to move on

    Detections catch at least 80% of planted red-team scenarios.

Kill-switch time, latency and detection rates on this site are design targets, being validated with design partners. They are not measured results.

Where we are

What is done, and what comes next.

Done

  • Platform architecture and five product definitions
  • Brand and marketing site
  • Context Gateway design for runtime enforcement
  • Standards-based design: OAuth, MCP, CAEP

Next

  • Private beta of KeelAuth
  • SSO, SCIM, passkeys and audit export generally available
  • Three to five design partners, at least one regulated
  • Registry discovery on two clouds

Put your first agent under control.

Join the design partner program: 90 days from federating your identity provider to a governed agent in production planning, with a named Keel engineer.

Become a design partnerTalk to the team