Skip to content
subcloak
Book a test

Team Cloudfor Cloak Proxy · Mac

One Cloak Proxy setup for the whole team. End-to-end encrypted.

Shared API workspaces, and rule sets and mock sets that update live once a manager approves each change. A vault with per-person access, reviews for protected changes, CI that runs your team's sets, and a web console for seats, SSO and SCIM. Your members' Macs, and the CI tokens you create, hold the keys.

Start a team Try Cloak Proxy free

$5 a seat a month, or $4 billed yearly · 2 seats minimum · SSO and SCIM included

  • $5a seat a month
  • 2seats minimum
  • 90 daysversion history
  • 1 yearaudit log

01 · Work together

The same requests, at the same time.

Everyone works from one live copy of the team's workspaces, rules and mocks. Talk about a request where it lives, watch a teammate's capture, and keep what you found for the next person.

Live, without Git
Team workspaces, rule sets and mock sets update on every member's Mac as they change.
Comments and @mentions
On any request in a team workspace. Whoever you mention is told.
Session library
Save a capture for the team with tags, so the next person starts where you stopped.
Pair debugging
Follow a teammate's capture live, read-only, from your own Mac.

02 · Control

Protect what matters. Undo anything.

Mark a rule or mock set as protected, and changes wait as proposals until a manager approves them. Every set keeps 90 days of versions to restore from.

Try the Approve button

JK

Jonas proposed 2 changes

To a protected set · 4 min ago

Waiting for review

+Map LocalShipping timeout /v2/shipping/rates → rates-timeout.json

~BreakpointHold payments request request and response

Reviewers

PSPriyaManagerWaiting

MWMeiEditor · can propose, not approve

Try it: only a manager's approval changes a protected set.

Version history

90 days
  1. v23PSDebug header on /v2/*Yesterday
  2. v22MWEmpty cart, for the new cart page3 days ago
  3. v21JKSlow checkout on 3G2 weeks agoRestore
  4. v20PSHold payments: request only6 weeks ago

Viewer

Reads the space and comments.

Editor

Changes it; in a rule or mock set, a manager approves each change before it applies. In a protected set, proposes changes instead.

Manager

Approves proposals, chooses who has access, and protects the set.

Team roles

  • AdminApproves new Macs and manages members
  • MemberUses the spaces at their role
  • CIReads only what it's granted. No seat

03 · Secrets

Share secrets folder by folder. Encrypted to their Macs.

A vault folder gives its secrets only to the people listed in it. Shared agent setups carry MCP servers and prompts, never keys.

Vault

Restricted folders · only the people listed can read a folder's secrets

FolderPSPriyaJKJonasMWMeiARAlex
Payments · stagingSTRIPE_SECRET_KEY, DB passwordRotate
Payments · productionSTRIPE_SECRET_KEYRotate
On-callPAGERDUTY_TOKENRotate
SandboxAWS sandbox keysRotate

Each tick is the folder's key, encrypted to that person's Macs. Subcloak's server holds it but can't open it.

Agents › Checkout reviewer

Shared agent setup · 3 MCP servers

  • cloak-proxyThis Mac's capture
  • githubToken from each person's Keychain
  • linearToken from each person's Keychain

Never keys. The team shares servers, commands and prompts. Each person's tokens stay in their own Keychain.

What Subcloak sees

Built so Subcloak can't read your team's data, except what you publish to monitors and hosted mocks.* (With automatic approval after SSO turned on, your identity provider and our server can admit a Mac.)

If an admin turns on automatic approval after SSO (off by default), our server and your identity provider also decide which Macs join.

We can see

  • Your team's name, and members' emails, names and roles
  • Seats and billing state. Polar holds the card
  • Each member's Macs: platform, app version, last seen, country; a joining Mac's name
  • Sizes and times of changes, and who made them
  • Audit events, mentions and review requests: who, when, from which country and ids, never their content
  • SSO and SCIM identities, and CI token labels
  • Monitors* and hosted mocks*: what you publish to them, and what they send and receive

We can't see

  • Workspaces, rule sets, mock sets and their names
  • Library sessions, tags and Findings
  • Comments, proposals and what changed
  • Vault secrets and agent setups
  • Pair-debugging traffic
  • CI recordings, sealed to the team

04 · Automate

Your team's sets, in CI and on call.

Run the team's collections in CI with cloakctl, send bugs straight to the team, watch production with shared monitors, and give everyone the same hosted mocks.

* Monitors and hosted mocks run on Subcloak's servers from a copy someone publishes after a warning, so they aren't end-to-end encrypted. Everything else is.

05 · Admin

Run the team from a browser. No seat needed.

Seats, billing, members, policies, SSO and SCIM live in the Subcloak console. Owners and billing managers don't need a seat, and the console holds no keys: whoever pays runs the team without reading it, unless an admin turns on automatic approval after SSO.

Keys stay on Macs
A new member's Mac gets the team's keys only after an admin's Mac approves it and both compare a code. SSO proves who someone is; it doesn't hand out keys, unless an admin turns on automatic approval after SSO.
SSO and SCIM, included
Single sign-on with OIDC (Okta, Microsoft Entra ID, Google Workspace and others) and SCIM provisioning, at no extra charge on every team. SAML is coming later.
Policies that say who enforces them
Each policy shows whether our server, each Mac, or both enforce it, from required reviews to who may share team data.

06 · Pricing

$5 a seat a month. $4 billed yearly.

From 2 seats. Only people who use Cloak Proxy take one. SSO, SCIM and the audit log come with every team, not as an enterprise extra. Founding offer: 30% off the first year for the first 20 teams of 10 or more seats, which keep at least 10 seats and their plan for that year.

$32a month

$4 a seat a month, billed $384 a year

  • SSO and SCIM, no extra charge
  • First support reply within 1 business day
  • Onboarding call from 10 seats, yearly

US dollars, plus local tax. Billed by Polar, our merchant of record. 30-day refunds, no questions asked. A Team seat doesn't include Personal Cloud.

Everything in Cloak Proxy, plus all 19:

In the docs

Work together

  • Team workspaces, with live updates and no Git needed
  • Shared rule sets and mock sets
  • Comments and @mentions
  • Team session library with tags
  • Team Findings and Report Bug to the team
  • Live pair debugging

Control

  • Roles and per-workspace permissions
  • Secrets vault with per-person access, end-to-end encrypted
  • Review and approve changes to protected rule and mock sets
  • Admin policies
  • 1-year audit log
  • 90-day version history

Automate

  • CI recordings from cloakctl, and CI access to team sets
  • Shared monitors with Slack, PagerDuty and Opsgenie alerts*
  • Hosted team mocks*
  • Shared MCP servers and agent setups (never keys)

Identity and support

  • SSO and SCIM at no extra charge
  • Onboarding call (10+ seats, yearly)
  • First support reply within 1 business day
Start a team

* Runs on our servers, not end-to-end encrypted.

FAQ

Before you start a team

Something else? Email hello@subcloak.com or book a call.

How do we start?

Start a team in the Subcloak console: sign in with your email, choose seats and pay through Polar. Then an admin opens Cloak Proxy 0.7.4 on a Mac to set up the team's keys and print the Team Recovery Kit, and invites everyone else. Get started

Can I buy a team without using Cloak Proxy myself?

Yes. The owner and billing managers run billing, seats and settings in the Subcloak console and don't need a seat. The console never holds the team's keys, so whoever pays can run the team without being able to read it, as long as automatic approval of new Macs after SSO stays off (it's off unless an admin turns it on). An admin sets up the keys on a Mac.

Can Subcloak read our team's data?

It's built so we can't: everything your team syncs is end-to-end encrypted with keys only members' Macs, the CI tokens your admins create and the team's printed Recovery Kit hold. Two exceptions, marked * everywhere: monitors and hosted mocks run on our servers from a copy someone publishes after a warning. We do see who's in the team, their Macs' platform and country, sizes and times, and who mentioned or asked whom to review, never what they wrote. If an admin turns on automatic approval after SSO, our server and your identity provider also decide which Macs join; it's off by default.

Who needs a seat?

Each person who uses Cloak Proxy with the team. Owners and billing managers who only use the console don't, and neither do CI tokens. 2 seats minimum.

What happens when someone leaves?

Our server cuts off their access at once, and the next admin's Mac online changes the team's keys, so nothing written afterwards can be read with their old ones. They keep what they had already downloaded, so for each vault folder they could open, Cloak Proxy tells you to change its secrets at their source.

Does a Team seat include Personal Cloud?

No. They're separate plans with separate keys, and nothing moves between them unless you copy it. You can use both on the same Mac. Personal Cloud

Refunds and cancelling?

A full refund of any team payment within 30 days, on request to team-support@subcloak.com. Cancel any time in the console: the team works until the end of the paid period, then is read-only for 30 days, then deleted. Polar, our merchant of record, handles payment, tax and receipts. Refund policy

Just you? Personal Cloud syncs your own Macs for $3 a month.Want your app tested? We test with Cloak Proxy, and a person proves every finding.

Bring your team. Start in a few minutes.

Start a team in the Subcloak console, then set up its keys in Cloak Proxy 0.7.4 on an admin's Mac. Cloak Proxy itself stays free for everyone on your team.

$5 a seat a month · $4 yearly · 2 seats minimum

Start a Team Cloud team

Bought per seat in the console. A full refund of any team payment within 30 days, on request.

Start a team Read how to get started

Questions first? team-support@subcloak.com. Want to try Cloak Proxy now? . Privacy

Download Cloak Proxy

Free for life. No account, no sign-up.

Free for life · macOS 14 Sonoma or later · Apple silicon and Intel
No sign-up needed. Leave your email only if you'd like release notes; we use it for nothing else. Privacy