SinonKeystone

Paid APILinuxMacSelf-hostedWindows

Visit SinonKeystone Alternatives Pricing

What SinonKeystone is

SinonKeystone is a self-hosted update management platform for Windows, Linux and macOS. One server and one agent handle those operating systems while the platform mirrors Microsoft Update, APT, YUM/DNF and Apple Software Update catalogues into local storage. Administrators can record approvals by update and deployment ring, apply quorum and separation-of-duties rules, promote changes in stages and halt rollouts automatically. Maintenance windows support local tenant time, blackouts, installation cut-offs and reboot permissions. Repository metadata and payload digests are checked before deployment and again on endpoints, with mismatches quarantined. A hash-linked audit chain records approvals, deployments, revocations and integrity rejections, with exportable evidence bundles and dated compliance snapshots. Compliance mappings include CIS Controls v8.1, NIST SP 800-53 r5, EU NIS2, SOC 2 and NCSC CAF v3.2. Deployment supports bare metal, Docker Compose, Kubernetes via Helm and signed air-gapped bundles. The product is in closed beta. Annual list pricing is £3,000 for SME or £16,000 for Enterprise, excluding VAT.

Who it suits

It suits organisations managing mixed Windows, Linux and macOS estates that need controlled patch approvals, scheduled maintenance and compliance evidence. Air-gapped deployment and signed bundles suit environments that refuse outbound fetching.

What it does well

One server and agent cover three operating systems
Mirrors major Microsoft, Linux and Apple catalogues
Records approvals in a hash-linked audit chain
Supports air-gapped signed-bundle deployment
Offers staged gates and automatic rollout halts

What to know first

Closed beta availability
No free plan or trial
Does not replace vulnerability scanning
Unenrolled hosts are excluded from compliance measurements

Plans

Plan	Billed and limits	Price
SinonKeystone Enterprise	£16,000 per year (Enterprise list price, excluding VAT) · Annual list price · unrestricted scale · price shown in GBP	On request
SinonKeystone SME	£3,000 per year (SME list price, excluding VAT) · Annual list price · organisations under 250 employees · price shown in GBP	On request

As sinon.eu lists them, read 11 Oct 2026. The maker's own page has the final word.

Verdict

SinonKeystone combines cross-platform patch deployment with detailed approval, integrity and audit controls. Its closed-beta status, paid annual pricing and requirement for enrolled inventory are important buying conditions.

Facts from SinonKeystone's own pages

Air-gap support: In air-gapped mode, outbound fetching is refused and content is provided in signed bundles whose signatures are verified before unpacking. · sinon.eu, 11 Oct 2026
API: The technical specifications list 9 API route modules, 47 paths and 55 endpoints. · sinon.eu, 11 Oct 2026
Audit evidence: Approvals, deployments, revocations and integrity rejections are recorded in a hash-linked audit chain, with exportable evidence bundles and dated compliance snapshots. · sinon.eu, 11 Oct 2026
Availability and support: SinonKeystone is in closed beta, and the maker invites organisations to request access for an estate coverage assessment and product walkthrough. · sinon.eu, 11 Oct 2026
Change control: Approvals are recorded per update and deployment ring, with quorum, separation of duties, staged promotion gates and automatic rollout halts. · sinon.eu, 11 Oct 2026
Compliance mapping: The product maps to CIS Controls v8.1, NIST SP 800-53 r5, EU NIS2, SOC 2 and NCSC CAF v3.2; the page says 63 of 70 controls are bound to 14 automated checks. · sinon.eu, 11 Oct 2026
Deployment options: It can be deployed on bare metal, with Docker Compose, on Kubernetes via Helm, or fully air-gapped from a signed bundle. · sinon.eu, 11 Oct 2026
Founded: 2012 · sinon.eu, 28 Sept 2026
Headquarters: United Kingdom · sinon.eu, 28 Sept 2026
Limits: SinonKeystone does not replace vulnerability scanning; missing-patch state is derived from reported inventory, and hosts that are not enrolled are excluded from compliance measurements. · sinon.eu, 11 Oct 2026
Operating systems: It supports Windows, Linux and macOS through one server and one agent. · sinon.eu, 11 Oct 2026
Pricing: The pricing page lists SinonKeystone at £3,000 for SME and £16,000 for Enterprise per year, excluding VAT; prices are annual list prices and pounds sterling is the contracting currency. · sinon.eu, 11 Oct 2026
Purpose: SinonKeystone is a self-hosted update management platform that mirrors vendor update catalogues, controls patch approvals and deployments, and produces compliance evidence. · sinon.eu, 11 Oct 2026
Scheduling: Maintenance windows support tenant-local time, change blackouts, cut-offs that prevent installs running past a window, and per-window reboot permissions. · sinon.eu, 11 Oct 2026
Security: The platform verifies repository metadata and payload digests, checks payloads again on endpoints, and quarantines mismatches. · sinon.eu, 11 Oct 2026
Technical requirements: The page lists PostgreSQL 16 and Redis 7, and a single Go agent distributed as MSI, DEB, RPM, PKG or tar.gz packages. · sinon.eu, 11 Oct 2026
Upstream sources: It mirrors Microsoft Update, APT, YUM/DNF and Apple Software Update catalogues into a local content store. · sinon.eu, 11 Oct 2026

Where SinonKeystone stands on Freedom251

Patch Management Software#35 of 49