Keystone Request access

Architecture docs go stale. Keystone's don't have to.

Diagrams rot because each one is a separate drawing that someone has to fix by hand. Keystone keeps one model underneath them all. Try renaming the database, then flip the switch.

In Keystone, renaming an object updates every diagram that shows it.

One model under every diagram

In Keystone, a box is a real object, and every diagram that shows it points at the same one. Rename it, change its owner or delete it, and every diagram, flow and comment follows.

Anyone who spots a mistake can flag it as an inaccuracy right on the object, so the map gets fixed instead of quietly ignored.

Keystone object panel for Postgres showing its type, parent and status
One Postgres, one set of facts, whichever diagram you open it from.

It runs, not just renders

Most architecture tools can only draw your system. Keystone can run traffic through it. Give objects small rules, like a rate limit or a cache hit ratio, and watch where requests pile up.

Drag the load past 750 requests a second, then add a read replica. That's a design review you can do before anyone writes code.

Keystone sends traffic through your model and shows where it breaks.

Your servers, your data

Your architecture map lists every system, every database and every weak spot you have. Keystone runs on your own infrastructure, behind your own sign-in. Nothing goes to a vendor cloud.

And there are no plan walls: single sign-on, the API, webhooks, drafts and simulation ship in every install.

How self-hosting works

$ docker compose up -d
  postgres  Healthy
  api       Started  migrations applied
  web       Started  :8080
$ curl -s localhost:3000/ready
{"status":"ready"}

How Keystone compares

Every tool here is good at something. This is about which one fits a shared, living architecture model.

Keystone compared with IcePanel, Structurizr and drawing tools
KeystoneIcePanelStructurizrLucidchart, draw.io, Miro
Shared model under the diagramsYesYesYesNo, shapes only
Visual editor, no code neededYesYesNo, you write a DSLYes
Step-by-step flowsYesYesDynamic diagramsNo
Drafts for proposed changesYesYesVia git branchesNo
Traffic simulationYesNoNoNo
Run it on your own serversYesNo, cloud onlyYesdraw.io only
SSO in every installSAML and OIDCPaid plansDepends on editionVaries by tool and plan

Based on each vendor's public docs as of September 2026. Something out of date? Tell us at support@keystone-app.io and we'll fix it.

Keystone vs IcePanel
Same modelling ideas, on your own servers, plus simulation.
Keystone vs Structurizr
A model everyone can edit, not just people who write DSL.
Keystone vs drawing tools
Why Lucidchart, draw.io and Miro diagrams drift.

Who it's for

Architects
One source of truth, and a place to record why decisions were made.
Platform and SRE teams
Find the bottleneck before the incident does.
Engineering managers
Know who owns what, and review changes before they land.
New hires
Understand the system without booking ten meetings.
Security and compliance
Keep the architecture map inside your own network.

Questions

Is Keystone a C4 model tool?

Yes. Keystone ships with C4-style object types and diagrams, and lets you add your own object types when C4's four levels don't fit. New to C4? Read our plain-English guide.

Can I host Keystone myself?

Yes. Keystone runs on your own servers with Docker and Postgres. Your architecture data never leaves your network. More on self-hosting.

Which features cost extra?

None. Every install gets every feature, including SAML and OIDC single sign-on, the API, webhooks and simulation.

Do non-engineers need to learn a diagram language?

No. Keystone is a visual editor in the browser. Engineers who want automation can use the REST API and YAML or JSON import.

What does the simulation do?

You write small rules for objects or technologies, like rate limits or cache hit ratios, in a few lines of JavaScript. Then you send traffic through the model. Keystone shows where messages pile up or fail, with a step-by-step trace for each one.

Put your whole company on one map.

Tell us about your team and what you'd map first. We'll send you everything you need to run it.

Request access or write to support@keystone-app.io