Put your evidence to work.
Get KEEN running with its creator.
I'm Miguel Jacq, KEEN's inventor and principal developer. I install and maintain KEEN on your infrastructure, and help your team build an evidence programme it can keep using.
Your infrastructure. Your data.
Free and open source. No per-user licence fees.
Explore KEEN and try the demoChoose how you pay for ongoing care.
Both options cover one supported production instance and include up to two hours of application service effort each month. All prices are in AUD and exclude GST; GST is added where applicable.
Pay monthly
$500 / month
+ $1,500 standard installation
- Three-month initial commitment, then monthly with cancellation available at any time.
- Installation includes up to six hours on a prepared, supported environment, with checks and handover.
- Application Care billed monthly in advance; installation payable before scheduling.
Initial three-month commitment: $3,000 including installation. A full first year of care plus installation totals $7,500.
Enquire about monthly carePay annually
$6,000 upfront / 12 months
Standard installation fee waived
- Twelve months of Application Care, paid upfront.
- The same two-hour monthly allowance and application support.
- Save $1,500 in the first year compared with monthly care plus standard installation.
Equivalent to $500/month, billed annually. The installation waiver and any early-exit terms are recorded in the signed agreement.
Enquire about annual careHosting, third-party subscriptions, standards licences and independent audit or certification fees are paid separately. Optional ISMS assistance and custom development are priced below.
What Application Care includes
- Monthly review of KEEN releases and security advisories, with relevant updates planned for an agreed maintenance window.
- Approved stable upgrades, startup and core workflow checks, and a record of changes.
- Application fault investigation and advice to your hosting operator.
- A named contact who develops KEEN and understands its internals.
The two hours cover all service activities, meetings and troubleshooting. Unused time expires each month. Additional technical work is $150/hour, with approval before chargeable work starts. Feature implementation is scoped separately.
A clear division of responsibilities
You or your hosting partner provide and operate the server, OS, network, database, TLS, monitoring, backups and recovery. I look after the agreed KEEN application work, running upgrades, fixing bugs and so on.
Your team approves framework scope, policies, permissions, risk decisions and audit conclusions. One matching non-production environment can be included for upgrade checks. Separate customer deployments need separate subscriptions; HA clusters, forks and unusual architectures need a scoped quote.
Build the evidence programme around your team.
Start with the sources and frameworks that matter most. We agree the scope, deliverables and an hourly estimate or capped budget before work begins.
ISMS onboarding & advice
$150 / hour
- Connect evidence sources and curate mapping rules against your chosen frameworks.
- Migrate policies, assets, people, risks and other existing ISMS records.
- Coach administrators and document ownership and review routines.
- Prepare evidence coverage, measures and sampling for audits.
Example budget: 20 hours of mapping and administrator assistance costs $3,000. This buys an agreed block of time; the achievable scope depends on your data and requirements.
Custom development
$175 / hour or scoped quote
New features, bespoke adapters and substantial changes to suit your workflows.
We agree requirements, ownership, licensing and any contribution to the open source project before development starts.
What might the first year cost?
Standard installation ($1,500) + 12 months of care ($6,000) + 20 hours of ISMS assistance ($3,000) = $10,500.
With annual care paid upfront and the agreed installation waiver, the same example totals $9,000. Both figures exclude GST and external costs.
Practical details
When is support available?
Business hours are 9am–5pm, Monday–Friday, Melbourne time, excluding Victorian public holidays. Initial response targets are one business day for production outages or suspected serious security issues, two for degraded features with a workaround, and five for advice or planned changes.
These are acknowledgement and triage targets, subject to agreed availability. Resolution and release timing are agreed separately. Continuous monitoring, 24/7 response and an uptime SLA are outside Application Care. Planned leave and escalation contacts are agreed in advance.
Can I run KEEN myself, or bring my hosting partner?
Yes! KEEN is open source and can be run independently for free. You retain control of your infrastructure and data, and can choose your own hosting provider.
Agencies and hosting partners can commission care for named customer instances from $500 per instance per month, with no mandatory membership fee or revenue share. You handle hosting, recovery and first-line support; I provide the agreed application support.
What if I don't have a hosting partner, or my hosting partner says they can't run KEEN?
mig5 is happy to recommend hosting organisations capable of running KEEN securely and to high standards. mig5 recommends Code Enigma for hosting KEEN.
How do we agree the work and get started?
We discuss your environment, frameworks, evidence sources and timing, then agree the scope, responsibilities, access and fees in writing before scheduling work. Onboarding can be phased around your priorities.
Hourly work is recorded in 15-minute increments, with written approval for budget increases. This service supports evidence preparation; independent certification and assurance remain with your appointed specialists, and no certification outcome is promised.
For the full service scope and commercial arrangements, download the professional services guide (PDF). The guide and this page describe the offer; your signed agreement sets the engagement terms.
Tell me where you want to start.
Share where you plan to run KEEN, any frameworks or audit deadlines, and whether you need installation, ongoing care or help with your ISMS. A short outline is enough, even if you're still working out the details.
We'll establish the scope and next steps before you commit.
Opens my contact form. Prefer another channel? Contact details.