What every startup hits before engineer five
Stripe keys live in Slack DMs
Two laptops, four DMs, and a screenshot. The new engineer still can't log in.
One encrypted vault per project. Invite the new hire — they pull working secrets in 30 seconds.
Postmark token expired at 3 AM
Third-party API keys rotate silently. Production breaks before anyone reads the email.
Set an expiry date on every secret. Get a warning a week before, not a page after.
Hiring your seventh engineer takes half a day of setup
Pairing call, screenshare, paste-by-paste reconstruction of a .env file you can't even share in plain text.
Add them to the org. envshed init && envshed pull and they're shipping in under a minute.
DATABASE_URL is in five places — three are wrong
Local, staging, prod, a .env.local someone committed in April, and the CI runner. Values drift.
One value per environment in one vault. Every machine pulls the current version on demand.
What a startup actually needs on day one
AES-256-GCM at rest
Plaintext never lands on disk — your security reviewer can verify the model in the docs.
One CLI, every machine
envshed pull writes a .env. envshed run injects values into the process. Same command on a laptop and in CI.
GitHub Actions in one step
Store one service token in GitHub. Every other secret rotates in Envshed and propagates on the next run.
Roles your team will actually use
Owner, admin, member at the org level. Editor and viewer per project — invite once, scope as you go.
Expiry warnings before the page
Set a date on the Stripe key. We warn you in the dashboard and the CLI a week before it expires.
Audit log every read and write
User, IP, timestamp, and value diff for every change — the answer your post-mortem already needs.
Simple, fair pricing
Start free. Scale as your team grows. No hidden fees.
Roughly a third of what comparable secrets managers charge
Most hosted secrets managers land at $15–$25 per user/month once you're past their free tier. Envshed is $5, flat — no quote, no sales call.
Developer
$0
For solo devs and pairs. Everything you need to stop pasting secrets into Slack.
- Up to 2 members
- Up to 3 projects
- Unlimited secrets
- AES-256-GCM encryption
- CLI & API access
Free forever plan
Team
$5
/user/month
For teams of 3+ that ship to production. Unlimited members, audit logs, CI-ready service tokens.
- Unlimited members
- Unlimited projects
- Unlimited secrets
- CLI & API access
- Webhooks
- Service tokens (CI/CD)
- Audit logs
Cancel anytime
Business
$9
/user/month
For organizations that need SSO, priority support, and a name to cite in their vendor review.
- Everything in Team
- SAML SSO
- Priority support
Cancel anytime
No charge during your 14-day trial on paid plans.