ContinueOps
continueops.com
What it is
ContinueOps automates disaster recovery runbooks and records tamper-evident evidence chains with human approvals. Its Organisation Licence adds a business continuity platform with unlimited runbooks, plus tools for business impact analysis, continuity plan management, exercises, disruption response, dependency mapping and RTO/RPO tracking. The service can run recovery tests against infrastructure: both successful and failed tests use DR minutes, while validation-only dry runs without cloud actions are free. The agent retrieves secrets at runtime from HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager and CyberArk. Deployment choices include managed SaaS, a self-hosted appliance, hybrid and fully self-hosted models. Its outbound-only mTLS design stores no cloud credentials and keeps runbook outputs and captured variables inside the customer's VPC. Access controls can be set per runbook; audit logs are append-only and authenticator-app MFA is required by default. ContinueOps supports Linux, macOS, Windows and web, and lists AWS, Azure and GCP marketplaces as deployment formats. The Organisation Licence is £1,600 a month, with a £1,500 setup fee; it includes five user logins and 60 one-off DR test minutes. ISO 27001 certification is in progress, and the company says it is not currently certified.
Spec sheet
- What it does
- ContinueOps maps, versions and tests business-continuity plans, executes recovery runbooks and produces tamper-evident evidence.Read 15 Oct 2026 · continueops.com
- Purpose
- ContinueOps automates disaster recovery runbook execution and creates tamper-evident evidence chains with human-on-the-loop approvals.Read 3 Oct 2026 · continueops.com
- Deployment
- ContinueOps offers self-hosted appliance and managed SaaS deployments, and its security page also describes hybrid and fully self-hosted models.Read 3 Oct 2026 · continueops.com
- Integrations
- The maker lists New Relic, Prometheus, Datadog, GitHub, cloud providers, LLMs, Snyk and Vanta as connected data sources.Read 15 Oct 2026 · continueops.com
- Support
- The Organisation Licence includes priority email and chat support; Enterprise includes 24/7 phone support and a dedicated Customer Success Manager.Read 3 Oct 2026 · continueops.com
- Analytics
- Executive dashboards, compliance reports and audit trails are provided for continuity reporting.Read 15 Oct 2026 · continueops.com
- API access
- The managed service provides dashboard and API access, and the product demos show live API calls with structured responses and audit trails.Read 15 Oct 2026 · continueops.com
- BCP and runbooks
- The Organisation Licence includes a full business continuity and runbook platform with unlimited runbooks.Read 3 Oct 2026 · continueops.com
- Cloud environments
- The product page lists AWS, Azure and GCP marketplaces among supported deployment formats.Read 3 Oct 2026 · continueops.com
- Company business classification
- Companies House classifies Cogito Group Ltd under SIC 62090, other information technology service activities.Read 15 Oct 2026 · find-and-update.company-information.service.gov.uk
- Company legal status
- UK Companies House lists COGITO GROUP LTD as an active private limited company incorporated on 12 December 2018.Read 15 Oct 2026 · find-and-update.company-information.service.gov.uk
- Company registered office
- Companies House lists 5 Technology Park, Colindeep Lane, Colindale, London NW9 6BX as the registered office.Read 15 Oct 2026 · find-and-update.company-information.service.gov.uk
- Compliance status
- ContinueOps says it is ISO 27001 aligned with certification in progress, not currently certified; it also describes SOC 2 evidence mapping and GDPR/UK DPA controls.Read 15 Oct 2026 · continueops.com
- Credential handling
- The agent does not persist cloud credentials; its mTLS certificate is kept in Linux, macOS or Windows OS keystores.Read 15 Oct 2026 · continueops.com
- Customer evidence
- An anonymized mid-market asset manager reports 52% less regulatory-review preparation time using a combined PRA, FCA and ISO 27001 evidence pack.Read 15 Oct 2026 · continueops.com
- Data residency
- Runbook commands, outputs, captured variables, customer data and local-model prompts remain inside the customer environment; only run metadata and evidence metadata are sent to the control plane.Read 15 Oct 2026 · continueops.com
- Deployment models
- ContinueOps offers managed SaaS, a hybrid connector and a self-hosted appliance.Read 15 Oct 2026 · continueops.com
- Dynamic documentation
- Runbooks and BCP plans are designed to update as infrastructure changes and to remain audit-ready.Read 15 Oct 2026 · continueops.com
- Human approvals
- Approval workflows, escalation chains and audit trails supervise critical or AI-assisted actions.Read 15 Oct 2026 · continueops.com
- Included-minute limit
- The Organisation Licence includes 60 DR-test minutes as a one-off allowance; included minutes roll over and do not expire.Read 15 Oct 2026 · continueops.com
- License model
- The security page describes a proprietary ContinueOps reasoning model and license-key-gated signed binaries, indicating a proprietary product rather than open-source software.Read 15 Oct 2026 · continueops.com
- Limit: certification
- The maker explicitly states that ISO 27001 certification is still in progress and not yet current.Read 15 Oct 2026 · continueops.com
- Limit: enterprise pricing
- Enterprise pricing is not published and requires contacting sales.Read 15 Oct 2026 · continueops.com
- Limit: entry commitment
- The Organisation Licence requires a £1,500 setup fee in addition to its £1,600 monthly price.Read 15 Oct 2026 · continueops.com
- LinkedIn company size
- LinkedIn lists Cogito Group at 11-50 employees.Read 15 Oct 2026 · uk.linkedin.com
- LinkedIn founded year
- LinkedIn lists Cogito Group as founded in 2019.Read 15 Oct 2026 · uk.linkedin.com
- LinkedIn headquarters
- LinkedIn lists Cogito Group headquarters in London, London.Read 15 Oct 2026 · uk.linkedin.com
- Maker legal operator
- ContinueOps identifies Cogito Group Ltd as its operating company.Read 15 Oct 2026 · continueops.com
- Network requirement
- Deployments require outbound HTTPS on port 443 and do not require inbound ports.Read 15 Oct 2026 · continueops.com
- Operating systems
- The security page names Linux, macOS and Windows OS keystores for the agent's mTLS certificate.Read 3 Oct 2026 · continueops.com
- RBAC and MFA
- The RBAC page describes per-runbook access controls, append-only audit logging and authenticator-app MFA required by default.Read 3 Oct 2026 · continueops.com
- Recovery testing
- The platform runs DR tests against infrastructure, and both successful and failed executions consume minutes; validation-only dry runs with no cloud actions are free.Read 3 Oct 2026 · continueops.com
- Risk prioritisation
- The platform ranks recovery priorities using business-impact analysis, RTO targets and cross-system dependency mapping.Read 15 Oct 2026 · continueops.com
- Scenario simulation
- ContinueOps supports controlled failure injection and chaos tests across cloud and on-premises environments without touching production.Read 15 Oct 2026 · continueops.com
- Secrets integrations
- Runtime secret retrieval is documented for HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, Google Cloud Secret Manager and CyberArk.Read 15 Oct 2026 · continueops.com
- Security architecture
- The agent uses outbound-only mTLS, stores no cloud credentials, and keeps runbook outputs and captured variables inside the customer's VPC.Read 3 Oct 2026 · continueops.com
- Self-host formats
- The appliance is offered as ISO, VHD, RAW and OVA images, with AWS Marketplace AMI and Kubernetes Helm/container support.Read 15 Oct 2026 · continueops.com
- System requirements
- The documented minimum self-hosted or hybrid sizing is 8 vCPU, 32 GB RAM and 200 GB SSD; recommended sizing is 8 vCPU, 64 GB RAM and 200 GB SSD.Read 15 Oct 2026 · continueops.com
- Target customers
- The security page describes the product for regulated networks in financial services, insurance, healthcare and the public sector.Read 3 Oct 2026 · continueops.com
- Transport security
- The agent makes one outbound mTLS connection over TLS 1.3 and uses no inbound ports.Read 15 Oct 2026 · continueops.com
- Usage metering limit
- Both successful and failed cloud executions consume DR-test minutes, while validation-only dry runs without cloud actions are free.Read 15 Oct 2026 · continueops.com
- Vanta integration
- Evidence can synchronize directly into a Vanta workspace.Read 15 Oct 2026 · continueops.com
Plans and prices
Strong points and limits
Strong points
- Organisation Licence includes unlimited runbooks.
- Validation-only dry runs without cloud actions are free.
- Per-runbook access controls and append-only audit logs.
- Runbook outputs stay inside the customer's VPC.
Limits
- No free plan is listed.
- Organisation Licence has a £1,500 setup fee.
- Successful and failed DR tests consume minutes.
- ISO 27001 certification is not yet complete.
Who it suits
ContinueOps suits organisations managing continuity and recovery procedures, particularly regulated networks in financial services, insurance, healthcare and the public sector. It offers managed and self-hosted deployment options.
ContinueOps in depth
Read the full write-up
ContinueOps is a business-continuity and disaster-recovery platform for organisations that need to exercise infrastructure recovery as well as manage continuity plans. It is best suited to regulated teams with strict controls over credentials, access and operational evidence. Its main trade-off is a substantial monthly commitment alongside metered recovery tests, and it is not currently ISO 27001 certified.
Overview
ContinueOps combines continuity planning with the execution of disaster-recovery runbooks. The Organisation Licence includes unlimited runbooks and supports business impact analysis, continuity plans, exercises, disruption response, dependency mapping and RTO/RPO tracking. That combination is useful when a team needs both plans and executable recovery procedures; it is a less natural fit for buyers seeking a planning-only tool or a free way to start.
The platform uses human-on-the-loop approvals and creates tamper-evident evidence chains. Its agent connects through outbound-only mutual TLS, stores no cloud credentials, and keeps runbook outputs and captured variables inside the customer's VPC. Those controls suit sensitive infrastructure, though they do not change the certification caveat: ContinueOps says ISO 27001 certification is in progress and that it is not currently certified.
Key features
Continuity planning and runbooks
The Organisation Licence brings unlimited runbooks together with continuity management, impact analysis, exercise management, disruption response, dependency mapping and recovery-objective tracking. This is a broad operational scope for organisations that want continuity work connected to response procedures, rather than maintained as a separate planning exercise.
Infrastructure testing and credentials
Teams can run DR tests against infrastructure. Both successful and failed executions consume test minutes, so a failed exercise still uses the allowance; validation-only dry runs without cloud actions are free. The agent can retrieve secrets at runtime from HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager and CyberArk. ContinueOps also lists AWS, Azure and GCP marketplaces among supported deployment formats.
Access and deployment controls
Per-runbook access controls, append-only audit logging and authenticator-app MFA required by default provide useful governance for teams managing sensitive procedures. Deployment choices include managed SaaS and a self-hosted appliance, while the security page also describes hybrid and fully self-hosted models. The agent's mTLS certificate can use Linux, macOS or Windows OS keystores.
Pricing
There is no free plan. The Organisation Licence is £1,600 a month, with a £1,500 setup fee. The monthly option is shown, and an annual option is also offered without a separate price. It includes five user logins, unlimited runbooks and 60 DR test minutes as a one-off allowance. The entry allowance is modest for teams that expect frequent infrastructure exercises, and both successful and failed tests count against it.
Additional named users cost £100 a month for five logins. Test-minute packs are one-time purchases: 600 DR test minutes cost £150 as a one-time purchase, and 3,000 DR test minutes cost £200 as a one-time purchase; both packs never expire. These packs address the Organisation Licence's limited included allowance without adding a recurring minute charge.
Enterprise has custom pricing and is billed through Contact Sales. It includes unlimited user logins and DR test minutes, SSO / SAML and SCIM, custom integrations and white-label options, making it the more suitable tier for organisations that need those capabilities or do not want user and test-minute ceilings.
One-time authoring blocks are available for teams that need implementation help rather than more software capacity: Runbook authoring - 20 hr block costs £4,000, paid once, Runbook authoring - 40 hr block costs £7,600, paid once, and Runbook authoring - 100 hr block costs £17,000, paid once. These are substantial services purchases, not lower-cost alternatives to the licence.
Platforms
ContinueOps supports Linux, macOS, Windows, web and self-hosted deployments. Its deployment flexibility matters for organisations with network or hosting constraints, while its marketplace deployment formats cover AWS, Azure and GCP.
Who it's for
ContinueOps is aimed at regulated networks in financial services, insurance, healthcare and the public sector. It is a strong fit where teams need to rehearse infrastructure recovery while keeping credentials and runbook data within controlled environments. Buyers requiring current ISO 27001 certification should look elsewhere; the certification remains in progress.
Pros and cons
Pros: Unlimited runbooks and a wide set of continuity functions connect planning with recovery operations.
Pros: Outbound-only mTLS, no stored cloud credentials and in-VPC runbook data address tightly controlled infrastructure requirements.
Pros: Runtime integrations cover five named secrets managers, while deployment options span managed SaaS, self-hosted and hybrid models.
Cons: The Organisation Licence costs £1,600 a month plus a £1,500 setup fee, placing it beyond teams seeking a low-cost entry point.
Cons: Its included 60 DR test minutes are one-off, and failed tests also consume minutes.
Cons: ContinueOps is not currently ISO 27001 certified, which may disqualify it from certification-led procurement.
Alternatives
Business Continuity Management Software is a broader category to browse when comparing continuity tools.
Choose Preparis if mobile access matters: it supports Android and iOS as well as desktop platforms, and its business-continuity plan uses custom pricing.
i-doit is an alternative if you need an API-oriented, self-hosted option with a free trial; its pro plans use custom pricing.
Continuity2 may suit organisations looking for a priced annual BCMS licence: Meridian BCMS costs £20,000 a year for organisations with 0–500 staff and allows unlimited users within the organisation.
Quantivate Business Continuity Software is another paid option, with pricing handled through a demo request.
Noggin Business Continuity Software offers sales-estimated pricing and a 30-minute demonstration.
Riskonnect is an alternative when project size, complexity and customization shape the price.
Onspring is another paid option, with Bronze and Silver plans that use custom pricing.
Strobe Business Continuity is another web-based alternative.
Verdict
ContinueOps is the right choice for regulated organisations that need continuity planning tied to executable recovery runbooks, with careful controls over credentials, access and evidence. Its security architecture and broad continuity scope are compelling, but the monthly licence, setup fee and consumption of minutes by failed tests make costs worth weighing against expected exercise volume. Look elsewhere if current ISO 27001 certification is mandatory or if you need a free or low-cost starting point.
Verdict
ContinueOps combines recovery runbooks, continuity planning and infrastructure testing with controls for access, credentials and evidence. The listed Organisation Licence starts at £1,600 a month, plus a setup fee, and ISO 27001 certification remains in progress.
Where Specifiction places it
- Business Continuity Management Software#2 of 238.9