Enterprise
Lobstack for your team.
Bots run on each person’s computer. One org account holds the keys, the spend and the receipts.
What a team gets
One org, with roles
Admins, members and viewers. Viewers can look but not change.
Keys the org owns
A key belongs to the org, not to the person who made it.
A budget per bot and per client
A bot pauses at its monthly cap. A client gets its own budget and statement.
Approvals on the record
Each one notes whether a person or a rule decided.
25 seats on Scale
$299 a month, or 20% off paid annually. Pricing
Single sign-on next
SAML and OIDC sign-in are not built yet. Tell us which identity provider you use.
An invoice
Invoices and custom terms on request.
What your security review will ask
Security has every control and its state.
Running today
- Work stays on each computer
- Bots, threads and files sit on the person’s disk, with credentials encrypted. The app sends no telemetry.
- No prompts stored
- The API records each call’s metadata and cost, never the prompt or the reply.
- Sign-in tokens are not kept
- A connector token passes through us encrypted and is deleted once the app collects it.
- Approvals are recorded
- Commands, pushes and messages wait for a yes, and each decision is stored on that computer.
- API keys are hashed
- Stored as a SHA-256 hash, scoped and revocable.
Not running
- No SOC 2 audit
- No audit has been performed, and we do not claim the certification.
- Installers not code-signed
- Windows warns on the first run; macOS asks once, in Privacy & Security.
- No MDM package
- Each person installs the app. There is no managed deployment.
- One region
- One database and one deployment, with no residency commitment.
- Public beta
- Features and settings can still change between releases.
Send us your questions.
Tell us what has to be true first. Where the answer is no, you’ll hear no.

