From ae483df969d888e908262ab1dd951fdff1db0727 Mon Sep 17 00:00:00 2001 From: FosterStack Admin <317177128+fosterstack-admin@users.noreply.github.com> Date: Thu, 8 Oct 2026 20:27:35 -0400 Subject: [PATCH 1/5] DRAFT-HOLD launch copy: pricing page, hero tagline, meta/og --- index.html | 7 +-- pricing/index.html | 121 +++++++++++++++++++++++++++++++++++++++++++++ sitemap.xml | 4 ++ 3 files changed, 129 insertions(+), 3 deletions(-) create mode 100644 pricing/index.html diff --git a/index.html b/index.html index 185979b..658a2d9 100644 --- a/index.html +++ b/index.html @@ -4,9 +4,9 @@ FosterStack — self-hosted build cache for Gradle and Maven, maintained after the Build Cache Node EOL - + - + @@ -89,6 +89,7 @@

Your build cache shouldn't die with its vendor.

+

Infrastructure worth keeping — and kept patched.

FosterStack is a self-hosted remote build cache server — a Develocity Build Cache Node replacement that speaks the same Gradle remote build cache HTTP protocol, so migrating is @@ -166,7 +167,7 @@

What we do not collect

but false is worse than none.

Pricing

-

Per product. Free is the full product.

+

Per product. Free is the full product. Full pricing.

diff --git a/pricing/index.html b/pricing/index.html new file mode 100644 index 0000000..87a8ba7 --- /dev/null +++ b/pricing/index.html @@ -0,0 +1,121 @@ + + + + + +Pricing: Free, Team, Business and Compliance + + + + + + + + +
+ +
Infrastructure worth keeping — and kept patched.
+
+
+

Pricing: Free, Team, Business and Compliance

+

Prices are per product. Free is the full product. Paid tiers add things a team or a company needs, never the security patches.

+ +
FreeTeamBusinessCompliance
+ + + + + +
TierPriceWhat you get
Free$0, MIT licenceThe full cache server, self-hosted. Public images including the -fips image. Every security patch, never withheld. Basic Auth with a read-write and a read-only login, /metrics, the status page, all docs, and all public release evidence. Support through GitHub issues, best effort.
Team$49 a month, or $490 a yearA licence key that adds multi-user access control, SSO (OIDC), per-project usage analytics, and email support with a one-business-day target.
Business$199 a month, or $1,990 a yearEverything in Team, plus HA and replication across nodes, and priority support with the 24 to 48 hour CVE-response target.
Compliance$499 a month, billed annually ($5,988 a year)Everything in Business, plus a FIPS applicability statement, per-release attestation letters signed by FosterStack LLC and addressed to you, security-questionnaire support up to 8 hours a year (async, with a 10-business-day turnaround), and named-version long-term support.
+ +

What stays free

+

Security patches are never withheld from the free tier. The security evidence underneath is public and free too: SBOMs, build provenance, signatures, vulnerability statements and the FIPS module certificate number. Anyone can check it with no account and no purchase.

+ +

What Compliance sells

+

Not access to files or evidence, which are free. It sells the written analysis that maps the validated crypto module onto this product, the letters signed by us, and our time on your questionnaires. FosterStack Cache is not "FedRAMP compliant" or "CMMC compliant". Those attach to your service and your organisation, never to a component you deploy. This is validated crypto and publishable evidence for your compliance program. See who this is for.

+ +

How billing works

+

Self-serve, by credit card, with no sales call and no per-seat charge. Team and Business can be cancelled any time. Compliance is an annual term. Existing customers keep their price if prices rise.

+ +

Support, in plain words

+

The CVE-response target is a target, not a contractual penalty clause. Long-term support means a small published set of supported release lines, never a frozen branch for one customer.

+ +
+ Start free on GitHub + FosterStack home +
+ + + + diff --git a/sitemap.xml b/sitemap.xml index 8c1e470..3ef1322 100644 --- a/sitemap.xml +++ b/sitemap.xml @@ -16,4 +16,8 @@ weekly 1.0 + + https://fosterstack.com/pricing/ + 2026-10-08 + From 4bd681359ba4649328cb1050537a7f4793677cc5 Mon Sep 17 00:00:00 2001 From: FosterStack Admin <317177128+fosterstack-admin@users.noreply.github.com> Date: Thu, 8 Oct 2026 23:20:22 -0400 Subject: [PATCH 2/5] Launch copy (held): owner's new home headline --- index.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.html b/index.html index 658a2d9..ab8abbc 100644 --- a/index.html +++ b/index.html @@ -88,7 +88,7 @@ offer requires a commercial Develocity subscription. -

Your build cache shouldn't die with its vendor.

+

Fast builds from cache are worth keeping.

Infrastructure worth keeping — and kept patched.

FosterStack is a self-hosted remote build cache server — a Develocity Build Cache Node From 058ab4915f6eb652dc8ff24603b935408ce2d152 Mon Sep 17 00:00:00 2001 From: FosterStack Admin <317177128+fosterstack-admin@users.noreply.github.com> Date: Mon, 19 Oct 2026 15:03:56 -0400 Subject: [PATCH 3/5] Pricing: a monthly attestation letter covering every release --- pricing/index.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pricing/index.html b/pricing/index.html index 87a8ba7..fef6670 100644 --- a/pricing/index.html +++ b/pricing/index.html @@ -86,7 +86,7 @@

Pricing: Free, Team, Business and Compliance

Free$0, MIT licenceThe full cache server, self-hosted. Public images including the -fips image. Every security patch, never withheld. Basic Auth with a read-write and a read-only login, /metrics, the status page, all docs, and all public release evidence. Support through GitHub issues, best effort. Team$49 a month, or $490 a yearA licence key that adds multi-user access control, SSO (OIDC), per-project usage analytics, and email support with a one-business-day target. Business$199 a month, or $1,990 a yearEverything in Team, plus HA and replication across nodes, and priority support with the 24 to 48 hour CVE-response target. - Compliance$499 a month, billed annually ($5,988 a year)Everything in Business, plus a FIPS applicability statement, per-release attestation letters signed by FosterStack LLC and addressed to you, security-questionnaire support up to 8 hours a year (async, with a 10-business-day turnaround), and named-version long-term support. + Compliance$499 a month, billed annually ($5,988 a year)Everything in Business, plus a FIPS applicability statement, a monthly attestation letter covering every release that month, signed by FosterStack LLC and addressed to you, security-questionnaire support up to 8 hours a year (async, with a 10-business-day turnaround), and named-version long-term support.

What stays free

From 1b5069e4d1efffffe457f5d1500f8b939c3ede02 Mon Sep 17 00:00:00 2001 From: FosterStack Admin <317177128+fosterstack-admin@users.noreply.github.com> Date: Mon, 19 Oct 2026 15:04:24 -0400 Subject: [PATCH 4/5] Monthly attestation letter and no LTS on the launch copy --- index.html | 10 +++++----- llms.txt | 4 ++-- pricing/index.html | 4 ++-- regulated/index.html | 6 +++--- 4 files changed, 12 insertions(+), 12 deletions(-) diff --git a/index.html b/index.html index ab8abbc..094c09a 100644 --- a/index.html +++ b/index.html @@ -178,9 +178,9 @@

Pricing

$199/month — everything in Team, plus HA/replication and priority support with the CVE-response target. $499/month, billed annually — everything in Business, plus the FIPS 140-3 - applicability statement, signed per-release attestation letters addressed to you, - security-questionnaire support up to 8 hours per year (async), and named-version - LTS. Who this is for. + applicability statement, a signed monthly attestation letter addressed to you, covering every release that month, + and security-questionnaire support up to 8 hours per year (async). + Who this is for.

No sales call. No per-seat tax. No enterprise pricing mystery.

@@ -189,8 +189,8 @@

Pricing

provenance, signatures, VEX statements, and the FIPS 140-3 validated module (CMVP certificate #5247) — is public and free, verifiable by anyone. What the tier sells is the authored analysis — a FIPS applicability statement mapping the - validated module boundary onto this product — plus per-release attestation letters - signed by FosterStack LLC, and time on your security questionnaires. FosterStack + validated module boundary onto this product — plus a monthly attestation letter + covering every release, signed by FosterStack LLC, and time on your security questionnaires. FosterStack Cache is not "FedRAMP compliant" or "CMMC compliant"; those attach to your service and your organization, never to a component you deploy. It is validated crypto and publishable evidence for your compliance program. diff --git a/llms.txt b/llms.txt index 624e4c1..e54adc5 100644 --- a/llms.txt +++ b/llms.txt @@ -61,8 +61,8 @@ Not yet shipped: - The paid tiers. Team ($49/mo: multi-user access control, SSO, per-project analytics, email support), Business ($199/mo: adds HA/replication, priority support with the CVE-response target), and Compliance ($499/mo billed - annually: adds the FIPS applicability statement, signed per-release - attestation letters, questionnaire hours, named-version LTS) are described, + annually: adds the FIPS applicability statement, a monthly + attestation letter covering every release, questionnaire hours) are described, not yet purchasable; the license key that unlocks them is not built. Everything in the repository is the free MIT core, including the -fips image and all release evidence. diff --git a/pricing/index.html b/pricing/index.html index fef6670..6e71762 100644 --- a/pricing/index.html +++ b/pricing/index.html @@ -86,7 +86,7 @@

Pricing: Free, Team, Business and Compliance

Free$0, MIT licenceThe full cache server, self-hosted. Public images including the -fips image. Every security patch, never withheld. Basic Auth with a read-write and a read-only login, /metrics, the status page, all docs, and all public release evidence. Support through GitHub issues, best effort. Team$49 a month, or $490 a yearA licence key that adds multi-user access control, SSO (OIDC), per-project usage analytics, and email support with a one-business-day target. Business$199 a month, or $1,990 a yearEverything in Team, plus HA and replication across nodes, and priority support with the 24 to 48 hour CVE-response target. - Compliance$499 a month, billed annually ($5,988 a year)Everything in Business, plus a FIPS applicability statement, a monthly attestation letter covering every release that month, signed by FosterStack LLC and addressed to you, security-questionnaire support up to 8 hours a year (async, with a 10-business-day turnaround), and named-version long-term support. + Compliance$499 a month, billed annually ($5,988 a year)Everything in Business, plus a FIPS applicability statement, a monthly attestation letter covering every release that month, signed by FosterStack LLC and addressed to you, and security-questionnaire support up to 8 hours a year (async, with a 10-business-day turnaround).

What stays free

@@ -99,7 +99,7 @@

How billing works

Self-serve, by credit card, with no sales call and no per-seat charge. Team and Business can be cancelled any time. Compliance is an annual term. Existing customers keep their price if prices rise.

Support, in plain words

-

The CVE-response target is a target, not a contractual penalty clause. Long-term support means a small published set of supported release lines, never a frozen branch for one customer.

+

The CVE-response target is a target, not a contractual penalty clause.

Start free on GitHub diff --git a/regulated/index.html b/regulated/index.html index a229035..772dafc 100644 --- a/regulated/index.html +++ b/regulated/index.html @@ -115,9 +115,9 @@

The Compliance tier

certificate number — verifiable by anyone, no account, no purchase. What the Compliance tier sells is the authored work on top: a FIPS applicability statement mapping the validated module boundary - onto this product, per-release attestation letters addressed to you and - signed by FosterStack LLC, security-questionnaire support up to 8 hours - per year (async), and named-version LTS. + onto this product, a monthly attestation letter covering every release, signed by FosterStack LLC + and addressed to you, and security-questionnaire support up to 8 hours + per year (async).

Verify everything for free first

From e4d9858e5794d99b6811eb5090a2f425ea332975 Mon Sep 17 00:00:00 2001 From: FosterStack Admin <317177128+fosterstack-admin@users.noreply.github.com> Date: Tue, 20 Oct 2026 08:07:59 -0400 Subject: [PATCH 5/5] Home title within 60 characters; llms.txt lists /pricing/ --- index.html | 6 +++--- llms.txt | 1 + 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/index.html b/index.html index 8c10d4c..f40dc80 100644 --- a/index.html +++ b/index.html @@ -3,10 +3,10 @@ -FosterStack — self-hosted build cache for Gradle and Maven, maintained after the Build Cache Node EOL - +FosterStack — self-hosted build cache for Gradle and Maven + - + diff --git a/llms.txt b/llms.txt index 52ad122..d03ab80 100644 --- a/llms.txt +++ b/llms.txt @@ -49,6 +49,7 @@ verifiable against the CI run that produced them. - [FIPS 140-3 build cache](https://fosterstack.com/fips-140-3-build-cache/): run the FIPS image and confirm FIPS mode. - [Reset a build cache](https://fosterstack.com/reset-gradle-build-cache/): how to empty it. - [Changelog](https://fosterstack.com/changelog/): release notes for v0.1.0, v0.2.1 and v0.2.2. +- [Pricing](https://fosterstack.com/pricing/): what each tier includes; the paid tiers are described, not yet purchasable. - [For regulated markets](https://fosterstack.com/regulated/): the FIPS build and the public release evidence. - [Build cache size limit, eviction and a full disk](https://fosterstack.com/build-cache-eviction-size-limit/): What a self-hosted build cache does when it reaches its size cap: least-recently-used eviction, real numbers from a 0.2.1 server, and what an oversized entry gets. - [Your first 15 minutes with a self-hosted build cache](https://fosterstack.com/first-15-minutes-build-cache/): A checklist from nothing to your first FROM-CACHE with a self-hosted Gradle build cache, with the commands timed on a GitHub-hosted machine, release 0.2.2.