Reference
Plans and pricing
Cloak Watch is free with every check, detection and fix. A paid live feed is coming: early warnings and incident packs within minutes, for $18 a year.
Cloak Watch is free. Every check, every fix, Install Guard, AI Activity, the incident playbook, and GitHub and domain checks work without paying, and detections are never paywalled. The optional paid live feed, which is coming, buys speed: early warnings about suspicious releases and Subcloak’s incident packs reach your Mac within minutes, and the feed tells your Mac the moment something new is published. It also adds a security report, Slack, Discord and webhook alerts, a year of history, a watchlist and priority help.
Free and the live feed
Section titled “Free and the live feed”| Free | Live feed | |
|---|---|---|
| Every check and every fix | Yes | Yes |
| Inventory, Install Guard, AI Activity and Guard | Yes | Yes |
| I think I’ve been hit, watch mode, GitHub and domain checks New in 1.2.0 | Yes | Yes |
| Live: newly reported malicious packages, from public sources | Usually within the hour | Usually within the hour |
| Registry takedowns and other confirmations of a malicious release New in 1.2.0 | Yes | Yes |
| Early warnings: Under review cards for suspicious new releases, before anyone confirms them New in 1.2.0 | No | Within minutes (coming soon) |
| Headlines | As soon as they’re published | As soon as they’re published |
| Subcloak incident packs (exact host files, remediation steps, when bad versions were live) | A day after publishing | Within minutes |
| Instant checks: the feed tells this Mac the moment something new is published | No | Yes |
| How often Watch checks the feed in the background | Every 15 minutes | Every 5 minutes, when instant checks can’t connect |
| Blocking suspected releases at install time New in 1.2.0 | No | Coming soon |
| History kept: fixed incidents, events and alerts, AI Activity | Up to 30 days | Up to 1 year |
| Security report (this Mac’s inventory, incidents and fixes, AI tools and coverage, as a PDF or CSV) | No | Yes |
| Slack, Discord and webhook alerts | No | Yes |
| Custom watchlist (an alert when a package, extension, publisher or word you name shows up in the feed) | No | Yes |
| Priority help | No | Yes |
| Macs | Any | Up to 3 per license key |
| Account | None | None |
Subcloak’s feed checks its sources every 10 minutes for both plans, and on both plans Watch checks every minute while the Feed tab is on screen. When anything new arrives, every plan matches it against your Mac at once. The live feed never unlocks a check or a fix: on the free plan, every detection and every fix work the same, and a release a registry or public database confirms as malicious reaches every Mac.
Under review cards and install blocking aren’t live yet: Subcloak’s release scanner is in a test period and doesn’t send verdicts to Macs. Settings › Plan lists the plan’s other features, and Install Guard shows install blocking as Coming soon.
| Personal | $18 a year |
| Founding price | $15 for your first year |
| Macs | Up to 3 Macs on one key |
Until the live feed is on sale, About the Live Feed… (at the bottom of Headlines and in Feed Details) says it’s coming, with Get an Email to join the list on subcloak.com.
How it works once it’s on sale
Section titled “How it works once it’s on sale”Settings › Plan is on every Mac. Until the live feed is on sale, it shows the price, when the plan is coming under Availability, and what the plan adds, each with what the free plan gets instead. Features that come with the plan show a Live Feed badge where they live in the app, such as Settings › Alerts and the retention pickers in Settings › Advanced.
When Subcloak puts the live feed on sale, Watch learns it from the signed feed: Settings › Plan adds Buy the live feed with Buy…, and the offer becomes Try the Live Feed…. You don’t need to update the app.
Buy and activate
Section titled “Buy and activate”-
Click Buy… in Settings › Plan. Checkout opens in your browser. Paddle, Subcloak’s reseller, handles the payment and emails your receipt.
-
After checkout, the thank-you page shows your license key. A key such as
CWK-XXXXX-XXXXX-XXXXX-XXXXX-XXXXXXcovers up to 3 Macs. -
Click the activate link on the thank-you page, or paste the key into Licence key in Settings › Plan and click Activate.
A link never activates anything by itself: Watch asks Activate this Mac? and shows the key’s last characters first. Activate only if the link came from your Cloak Watch purchase.
Activating sends the key over HTTPS and a random install ID to Subcloak’s license server, nothing else. Subcloak keeps only a hash of the key. The key and its signed license token stay in this Mac’s Keychain, and Watch checks the token on your Mac, refreshing it every few days.
Use a key on several Macs
Section titled “Use a key on several Macs”One key covers up to 3 Macs. Activate it on each one in Settings › Plan.
- If all 3 places are taken, Watch says the key is already in use on 3 Macs. Click Deactivate This Mac on one you no longer use, or wait: a Mac that hasn’t checked in for 30 days drops off by itself.
- Deactivate This Mac frees this Mac’s place and removes the key from it. The free feed carries on.
- Restore gets a fresh license for this Mac with the stored key, for example after a message that the license server didn’t accept this Mac’s token.
Lost your key?
Section titled “Lost your key?”Click Lost your key? in Settings › Plan. Enter the email you paid with and the Transaction ID (the order number on your Paddle receipt) to get a new key. Subcloak’s license server keeps only a one-way hash of your email, never the address itself.