Skip to content

Enterprise

Lobstack for your team.

Bots run on each person’s computer. One org account holds the keys, the spend and the receipts.

Download the app

What a team gets

  • One org, with roles

    Admins, members and viewers. Viewers can look but not change.

  • Keys the org owns

    A key belongs to the org, not to the person who made it.

  • A budget per bot and per client

    A bot pauses at its monthly cap. A client gets its own budget and statement.

  • Approvals on the record

    Each one notes whether a person or a rule decided.

  • 25 seats on Scale

    $299 a month, or 20% off paid annually. Pricing

  • Single sign-on next

    SAML and OIDC sign-in are not built yet. Tell us which identity provider you use.

  • An invoice

    Invoices and custom terms on request.

What your security review will ask

Security has every control and its state.

Running today

Work stays on each computer
Bots, threads and files sit on the person’s disk, with credentials encrypted. The app sends no telemetry.
No prompts stored
The API records each call’s metadata and cost, never the prompt or the reply.
Sign-in tokens are not kept
A connector token passes through us encrypted and is deleted once the app collects it.
Approvals are recorded
Commands, pushes and messages wait for a yes, and each decision is stored on that computer.
API keys are hashed
Stored as a SHA-256 hash, scoped and revocable.

Not running

No SOC 2 audit
No audit has been performed, and we do not claim the certification.
Installers not code-signed
Windows warns on the first run; macOS asks once, in Privacy & Security.
No MDM package
Each person installs the app. There is no managed deployment.
One region
One database and one deployment, with no residency commitment.
Public beta
Features and settings can still change between releases.

Send us your questions.

Tell us what has to be true first. Where the answer is no, you’ll hear no.