NewEscrow Pro, Resilience, Continuity and Agentic Verification: from holding the code to proving it comes back.The new line-up is here.See what's new
VerificationOverviewAgentic VerificationExit Exercise
Why this page looks like this. The Exit Exercise is a human service sold to regulated buyers, so the page sells the outcome (an exit plan that has been exercised, with a report to file) before the method.
  • One conversion path. Request a scoping call. The fallback is the comparison on the overview, for visitors still choosing.
  • The deliverable is the hero image. The Tested Exit Report mock shows the agreed contents (pass or fail, gaps, date and the framework annex), labelled as an example.
  • Nothing we haven't agreed. No duration is stated: the timeline is set at scoping. The price is "from $12,000" with no unit. Confirm the unit (per exercise or per application) before launch.
Exit Exercise

Your exit plan, tested in practice.

Our specialists rebuild your software by hand, in a clean room, from the deposit alone. Then they test it against the business functions you rely on, without the original developers. You get a Tested Exit Report to put on file.

Request an Exit Exercise Compare the two

Add it to any Codekeeper plan, from $12,000. Either party to the agreement can request one.

  • Trusted by 3,500+ teams
  • 10+ years securing software
  • Run without the original developers

Example report. Contents vary by application.

Social proof straight after the promise. These are the logos production already uses, loaded from codekeeper.co. Where an image can't load (for example in the preview), the name shows instead. Use the approved set only.

Trusted by 3,500+ teams, from regulated enterprises to fast-growing software vendors

Airbus Bayer European Parliament General Motors Intuit Nestlé PepsiCo Pfizer
Make the gap concrete, then quote the rule. The buyer already has an exit plan. The opening names the difference between a plan that's been written and one that's been exercised, and the two quotes show that regulators make the same distinction. The quotes are verbatim, with their sources. Have legal confirm them and the disclaimer before launch.

Why it matters

An exit plan on paper isn't a tested exit plan.

An exit plan describes what would happen if a supplier failed. An Exit Exercise shows whether it works: the software rebuilt by people who didn't write it, running the functions your business depends on.

EUDORA
“Exit plans shall be comprehensive, documented and, in accordance with the criteria set out in Article 4(2), shall be sufficiently tested and reviewed periodically.”
Regulation (EU) 2022/2554 (DORA), Article 28(8). Applies to ICT services supporting critical or important functions.
UKPRA SS2/21
“Firms should take reasonable steps to test exit plans; in particular, those relating to stressed exits.”
PRA Supervisory Statement SS2/21, Outsourcing and third party risk management, paragraph 10.24.

An Exit Exercise gives you evidence that your exit plan has been tested. Whether it meets a specific requirement is for you and your assessor to decide.

Four promises, all confirmed. Each card is one of the facts you approved: rebuilt from the deposit alone, tested against the functions the customer nominates, done without the original developers, and documented in the report with its annex. These four are what make it an exit test rather than a build test.

What we test

The exit, not just the build.

An Exit Exercise goes further than a rebuild. It checks that the software you'd recover can do the work your business needs.

Rebuilt from the deposit alone

We rebuild the software using only what's in the deposit. Anything missing is recorded as a gap.

The functions you rely on

You nominate the business functions that matter. We test each one and record whether it passed.

Without the original developers

Codekeeper specialists do the work. The people who wrote the software aren't involved, just as they might not be in a real exit.

Evidence for your file

A Tested Exit Report with the result, the gaps and the date, plus an annex mapped to your framework.

Take the uncertainty out of buying a service. Four steps, one sentence each, so the buyer knows what they're committing to. The timeline is agreed in step 1, as decided, and the stack check sits there too: rebuilds run on supported stacks only. The cross-sell sits under the steps because a deposit that's already been rebuilt is the best starting point for an exercise.

How it works

From scoping call to report on file.

1

Scope

Tell us the application and the business functions to test. We confirm the technology stack is supported and agree the timeline with you.

2

Clean-room rebuild

Our specialists rebuild the software by hand in a clean room, using only the deposit.

3

Functional testing

We test the rebuilt software against each function you nominated and record anything that stops it working.

4

Report

You receive the Tested Exit Report: pass or fail, the gaps found and the date, with the framework annex.

Start from a deposit you know builds.

Agentic Verification rebuilds your deposit in hours, four times a year, and it's included in Escrow Pro, Resilience Pro and Continuity.

See Agentic Verification
Both parties can buy it, so say so. Either party to the agreement can request an Exit Exercise. Vendors are a second audience, so they get their own card. Each card gives that party its own reason to buy.

Who it's for

Either side of the agreement can ask for one.

Customers who rely on the software

Show your board, your auditors or your regulator that your exit plan has been exercised, not just written down.

Vendors who supply it

Answer a regulated customer's questions about your software in their exit plan with evidence, not assurances.

Show the price, and show that no plan change is needed. "From $12,000" is the confirmed price. The panel lists every plan it can be added to, which removes the "do we need Pro?" objection before it's raised.

Pricing

Add it to any plan.

The Exit Exercise is an add-on, so you don't need to change plans to get one.

Add-on

Exit Exercise

From$12,000

Request an Exit Exercise

Available with

  • Escrow
  • Escrow Pro
  • Resilience
  • Resilience Pro
  • Continuity

Plans start from $199 per application per month. Agentic Verification is included in Escrow Pro, Resilience Pro and Continuity.

The conversion point. A scoping call is the natural first step for a scoped service, and it's where the timeline gets agreed. The form asks for what sales needs to route and qualify the request: role in the agreement and the framework. The application field is optional, to keep the form short. In production this is a HubSpot form; have legal confirm the consent wording.

Request an Exit Exercise

Start with a scoping call.

Tell us about the application. We'll agree the functions to test and the timeline with you.

  • A scoping call with Codekeeper
  • The business functions to test, chosen by you
  • A timeline agreed with you

Request a scoping call

Enter your first name.
Enter your company.
Enter a work email, like name@company.com.

We'll use these details to arrange your scoping call. You can unsubscribe from follow-up emails at any time. See our privacy policy.

This is where the request would go to the team.

This is an example page, so nothing was sent. In production this form submits to HubSpot.

The secondary conversion, on every page. Visitors who aren't ready to talk can still leave their email. The sample evidence pack is the same offer on every page, so the site has one lead magnet instead of a different e-book per page. It also carries the launch story: proof, not promises. The button goes to the sample evidence pack page.

Sample evidence pack

See what your auditor would receive.

An anonymised set of outputs from a real Agentic Verification run, so you can judge the evidence before you talk to us.

  • Recoverability Certificate
  • Run report
  • SBOM and Exit workbook excerpts
Get the sample evidence pack
The questions a risk lead asks before booking. Duration, independence, contents of the report, what it means for compliance, who can buy it and which plans. The compliance answer repeats the disclaimer on purpose: it's the question most likely to be asked in writing.

Questions

Before you book the scoping call.

How long does an Exit Exercise take?

We agree the timeline with you when we scope the exercise. If you have an audit or review date, tell us when you request one.

Are the original developers involved?

No. Codekeeper specialists rebuild and test the software from the deposit alone, without the people who wrote it.

What's in the Tested Exit Report?

The result, pass or fail; the gaps found; and the date. It comes with an annex that maps the results to the framework you report against, such as DORA.

Does an Exit Exercise make us compliant?

It gives you evidence that your exit plan has been tested. Whether that meets a specific requirement is for you and your assessor to decide.

Can a vendor request one?

Yes. Either party to the agreement can request an Exit Exercise.

Do we need a Pro plan?

No. You can add an Exit Exercise to any Codekeeper plan.

Which technology stacks can you rebuild?

Tell us what the application is built with, and we'll confirm it's supported when we scope the exercise.

How is this different from Agentic Verification?

Agentic Verification uses AI agents to prove the deposit builds, in hours, four times a year. An Exit Exercise is run by our specialists and also tests the business functions you rely on. See them side by side.

The same close on every page. On this page the second action is the Exit Exercise request itself, the page-specific conversion in the brief. Every page ends on the same two actions in the same order: Book a demo, then the sample evidence pack.

Exercise the exit before you need it.

Book a call with us, or go straight to a scoping request: we agree the functions to test and the timeline with you.

Book a demoRequest an Exit Exercise