WholeStack gate
No SHIP, no production — on apps WholeStack builds. Foreign-repo CI is not sold.
Loading ShipGate
ShipGateShipGate is the gate before production for software WholeStack builds: no SHIP, no production. Checking software WholeStack did not build is not available yet. SAML SSO, SCIM, and VPC are not built — Enterprise is a conversation about verification engagements and written terms, not a checklist of those products.
Data handling and what we do not claim: Security overview.
ShipGate holds no SOC 2 or ISO 27001 certification and this page claims none. What it can give your reviewers instead is the written security packet and a gate whose behaviour you can read in your own CI logs.
No SHIP, no production — on apps WholeStack builds. Foreign-repo CI is not sold.
Every verdict names the revision that earned it. Stale when the tree moves.
An advisory scan cannot pass a pull-request check. UNVERIFIED when it cannot answer.
Each reports separately. The catalog is published on the scan page, gate by gate.
HTTPS only. No standing PATs. Installation tokens are short-lived.
Re-verifiable NDJSON with a manifest, hash chain, and HMAC signature.
Commercial prices follow NORTH-STAR §9: Explore free, Build $99 once, live app $79/mo. There is no ShipGate CI add-on. See ShipGate pricing.
| Feature | Available today | Enterprise conversation |
|---|---|---|
| Verification on WholeStack builds | Yes | Yes |
| Live ShipGate MCP endpoint | Yes | Yes |
| Labelled demo scan (advisory only) | Yes | Yes |
| Foreign-repo SHIP / hosted CI add-on | Not built (gap #20) | Not sold as a SKU |
| SSO — SAML 2.0 or OIDC | Not built | Not built — do not procure as available |
| SCIM 2.0 directory sync | Not built | Not built — do not procure as available |
| VPC / dedicated deployment | Not built | Not built — do not procure as available |
| Price | $99 build · $79/mo live | Contact sales / verification engagement |
Not a roadmap slide dressed as a product matrix. If a control is not built, this page says so — including SAML, SCIM, and VPC.
ShipGate verifies WholeStack builds (SHIP / NO_SHIP) and exposes a live MCP endpoint. The public scan page is a labelled demo. Foreign-repo verification is gap #20 — not sold.
ShipGate CI at $50/mo, free hosted-scan quotas, public verify API, and SAML SSO / SCIM / VPC as available Enterprise controls. None of those routes or products exist in this repository.
Design-partner verification for AI-generated or high-risk apps is quoted per engagement (NORTH-STAR §9). Human-assisted steps are labelled. The price buys the verification package, never a verdict.
Enterprise agreements can negotiate support and process. This page does not publish an uptime SLA, SOC 2, ISO, SSO, SCIM, or VPC product you can buy today.
Data-flow description, what is and is not built, retention settings, and written answers to your InfoSec questionnaire — without pretending controls exist.
Explore free. Build $99 once per app, Guided Build $499 once per app. Live app $79/month per deployed app. Same SKUs agency later.
Interactive previews of a possible control plane around Production Admission. Demo state only — SAML / SCIM / VPC are not built, and demo widgets are not a procurement commitment.
_shipgate-verify.acme.io TXT "shipgate-domain-verify=ed25519:8d8336b3727cc94c"
Interactive preview only — no live DNS lookup is performed on this page.
Supports SAML 2.0 / OIDC via SAML Jackson. Group claims map into workspace roles below.
https://api.shipgate.dev/scim/v2/acme-iosgsc••••••••••••••••••••••••d6a5Regenerating here only updates this demo. Production tokens are issued in the Enterprise workspace after contract.
Send your stack details, security questionnaire, and deployment constraints. We respond with what we support today — not a six-month platform roadmap.
Or email team@shipgate.dev. Free advisory scan is the demo door: scan a repository.