The code is done. The AI wrote it in a weekend. And it's been sitting on localhost because “ship it” turned out to mean “configure the platform, check the security, figure out the billing, and pray nothing breaks.” ZipLoom is the last step — the one that turns working into live.
The solo ladder works in tranches: 100 seats at $99/yr (First Thread), then 400 at $149 (The Weave), then 500 at $199 (Last Bolt), then the public price of $20/month. Each tranche price is permanent for everyone who claims it. Founding Guild is a separate 5-seat option for teams at $299/yr — a parallel door, not the next rung. Once a tranche closes, it doesn't reopen.
What changes
The left side is a real CVE. CVE-2025-48757 — 170+ apps shipped with RLS off. The right side is every ZipLoom deploy.
The math
These are the tools you'd need to match ZipLoom's capability stack individually. Sourced from their public 2026 pricing pages — click any row to verify.
| Tool | What it does | Cost/yr |
|---|---|---|
| Snyk (Team) | Dependency CVE scanning | $599 |
| Doppler (Team) | Secrets management + vault | $228 |
| Vercel (Pro) | Deploy platform | $240 |
| Better Stack | Uptime + perf monitoring | $360 |
| GitHub Advanced Sec. | Code scanning + Dependabot | $588 |
| LaunchDarkly (free) | Feature flags / staged rollout | $0–300 |
| Auth0 (B2B free) | MFA / TOTP enforcement | $0–228 |
| Total | Seven tools, seven logins, seven bills | $2,343–2,643 |
| ZipLoom First Thread | All of the above, one product | $99/yr |
Choose your tier
One seat = one person's account, with the app installs your tier includes.
First Thread
Solo$99/yr
1 seat · locked for life
Public price will be $20/mo ($240/yr)
30-day full refund · deploys stay live if you leave
Founding Guild
Team$299/yr
5 seats — for teams of 2–5
Shared workspace · Guild roles · audit log
30-day full refund · deploys stay live if you leave
White-Glove Weave
Ships this week$497 once
We migrate your existing app for you
Pairs with any founding tier
30-day full refund · deploys stay live if you leave
What's included
Secure
Security Scan On Every Deploy
RLS enforcement, secrets detection, CVE audit, license compliance — the exact checks whose absence caused CVE-2025-48757 and the Moltbook breach.
Two-Factor Authentication (TOTP)
Platform-wide 2FA required on sign-in. Protects every deploy credential you store.
Secrets Vault — AES-256-GCM
Env vars encrypted at rest, decrypted only at deploy time, never in logs. Keys rotate independently of your codebase.
GitHub Actions Integration
ziploom/scan-action in your CI. Security scan gates every push — blocking merges when a critical vulnerability is found.
Deploy
Deploy To 6 Platforms, Zero Config
Vercel, Netlify, Railway, Render, Fly.io, Cloudflare. Framework auto-detected. Build command, install command, output directory — inferred.
AI Builder — Describe It, Ship It
Type what you want to build. Get a recommended stack with reasoning, a monthly cost estimate, a deploy-time estimate, and follow-up questions to refine it — then deploy directly from the plan.
84 AI Compositions Per Month
Search 330M+ repos, score candidates on quality and license safety, return real code — not hallucinations.
Staged / Canary Rollout
1% → 10% → 50% → 100% with an automatic error gate. Traffic shifts back if error rate spikes.
Operate
Performance Budget — Lighthouse CI
Every deploy fires a Lighthouse audit. Score drops surface in your dashboard before users notice them.
Synthetic Monitor + Auto-Rollback
Checks your production URL every 15 minutes. If it goes dark, the previous deploy is restored automatically.
AI Debug Agent — Troubleshoot & Resolve
Every failed deploy gets an automatic cause + fix, no clicking required. Need more? Open the interactive debug agent — it's pre-loaded with your build log, so you skip straight to "why did this happen" instead of re-pasting the error.
Agent Ops — 93 GitHub Tools
93 audited GitHub tools, 48 executable today (read-only — repos, PRs, workflows, security advisories). The remaining 45 write tools are catalogued and gated behind role checks, rolling out next. Every call runs under your credentials, logged to audit trail.
Own
Self-Host Export — Zero Lock-In
Export a Dockerfile, docker-compose.yml, Terraform IaC, and .env.template any time. Leaving takes an afternoon.
Price Locked For Life
The tranche mechanism makes this structurally true: prices only move upward. There is no mechanism by which we could raise your $99 later.
Security Scan On Every Deploy
RLS enforcement, secrets detection, CVE audit, license compliance — the exact checks whose absence caused CVE-2025-48757 and the Moltbook breach.
Two-Factor Authentication (TOTP)
Platform-wide 2FA required on sign-in. Protects every deploy credential you store.
Secrets Vault — AES-256-GCM
Env vars encrypted at rest, decrypted only at deploy time, never in logs. Keys rotate independently of your codebase.
GitHub Actions Integration
ziploom/scan-action in your CI. Security scan gates every push — blocking merges when a critical vulnerability is found.
Deploy To 6 Platforms, Zero Config
Vercel, Netlify, Railway, Render, Fly.io, Cloudflare. Framework auto-detected. Build command, install command, output directory — inferred.
AI Builder — Describe It, Ship It
Type what you want to build. Get a recommended stack with reasoning, a monthly cost estimate, a deploy-time estimate, and follow-up questions to refine it — then deploy directly from the plan.
84 AI Compositions Per Month
Search 330M+ repos, score candidates on quality and license safety, return real code — not hallucinations.
Staged / Canary Rollout
1% → 10% → 50% → 100% with an automatic error gate. Traffic shifts back if error rate spikes.
Performance Budget — Lighthouse CI
Every deploy fires a Lighthouse audit. Score drops surface in your dashboard before users notice them.
Synthetic Monitor + Auto-Rollback
Checks your production URL every 15 minutes. If it goes dark, the previous deploy is restored automatically.
AI Debug Agent — Troubleshoot & Resolve
Every failed deploy gets an automatic cause + fix, no clicking required. Need more? Open the interactive debug agent — it's pre-loaded with your build log, so you skip straight to "why did this happen" instead of re-pasting the error.
Agent Ops — 93 GitHub Tools
93 audited GitHub tools, 48 executable today (read-only — repos, PRs, workflows, security advisories). The remaining 45 write tools are catalogued and gated behind role checks, rolling out next. Every call runs under your credentials, logged to audit trail.
Self-Host Export — Zero Lock-In
Export a Dockerfile, docker-compose.yml, Terraform IaC, and .env.template any time. Leaving takes an afternoon.
Price Locked For Life
The tranche mechanism makes this structurally true: prices only move upward. There is no mechanism by which we could raise your $99 later.
The close
The counter on this page is the real one — it reads from actual purchases. Not a fake timer. The tranche closes when it closes. You're deciding whether the thing you already built is going to exist. Because that's the real cost of the last mile — the app that stayed on localhost. It only has to exist. We'll handle the part that decides whether it's safe to be real.
30-day full refund · zero questions · deploys stay live
If ZipLoom doesn't earn its place in your workflow, you lose nothing but the time it saved you. Every app you deployed stays live and stays yours.
Or see all plans · no meter, ever
For product questions, see the main page or pricing page.
Structurally locked. Once the first 100 seats are gone, the next 400 open at $149 (The Weave), then 500 at $199 (Last Bolt), then the public price. The tranche mechanism only moves forward — there is no mechanism by which we could quietly raise your $99 later.
The next tranche (The Weave, 400 seats) opens at $149/yr. After that, Last Bolt — 500 seats at $199/yr. After that, the public price of $20/month ($240/yr). Those three are the solo ladder; Founding Guild ($299/yr, 5 seats) is a separate option for teams, not the rung above Last Bolt. The founding door closes permanently when all 1,000 founding licenses are claimed.
Yes — 30 days, full refund, zero questions, no forms. Every app you deployed stays live and stays yours. After 30 days you stop being billed at renewal. No retention flow, no 'are you sure' maze.
First Thread ($99/yr) is for a solo builder — one person, 5 app installs. Founding Guild ($299/yr) is for a small team of 2–5: five seats in a shared workspace and 20 app installs. Every founding tier also gets 12% more AI compositions and scans than the public plan it maps to, for life. White-Glove Weave ($497 once) is a hands-on migration of one existing app by a human — it pairs with any founding tier.
One seat = one person's account. First Thread includes 5 app installs; Founding Guild includes 20. The Guild tier (5 seats) means five different people can share one workspace, each with their own login and access controls.
Yes. Founding members get everything that ships during the founding period at no extra charge, including Agent Ops write operations when they roll out. The price is for the platform, not a frozen snapshot of it.
30-day full refund · deploys stay live if you leave · no meter, ever