Roadmap
Where SIGSHIP is going.
What is live, what lands this month, and what Cloud aims for after that. Self-hosted work carries its month. For Cloud, no dates promised: what we promise is each feature's month on the pricing page, and a feature that misses its date is refunded on request.
Shipped
Live now, in the free tool.
- v0.1.0 · First release
- v0.1.1 · Package details for npm and the MCP Registry
- v0.2.0 · Licence key support with `SIGSHIP_KEY`, which adds the Pro pack of extra checks
- v0.3.0 · `npx sigship ui [folder]`
- v0.3.1 · Requires Node
- v0.3.2 · `npx sigship ui`
- v0.4.0 · MCP 0
By 30 November
Self-hosted. Being built now.
- Everything on this site true today or labelled with its month
- The in-browser check at /check/: nothing uploaded
- sigship 0.4.0: accepted risks file, SARIF for GitHub code scanning, fix prompts tuned to your tool, a pre-commit hook, secrets in git history, and the opt-in online check for known vulnerable packages
- Pro and Business on sale through Polar, with licence keys
- The Deep self-check badge, issued only to licensed sites
- The Lookout intake run by the system, with the Monday notice sent by it
December
Cloud. Our aim, not a promise.
- Private beta of SIGSHIP Cloud with the first 20 founders, on a free Checked daily badge
- Remote MCP, so a coding agent can ask Cloud for the latest verdict
- Watch checks: live site scan, live Supabase probe, SSL, domain and downtime alerts
- The benchmark published on the accuracy page
- Deeper Pro checks: Supabase policies, security headers, login rate limits
January and after
Cloud. Our aim, not a promise.
- Solo opens with a 14-day trial and no card
- Public launch
- Team and Agency as soon as roles and the merge block are solid, which we aim for by February: draft fix pull requests, Slack and Discord alerts, the Live-checked badge with a clean-days streak, white-label reports
Every new check starts in the Lookout. The incident rule says what happens when a check should have caught something and didn’t.