Secrets Manager
Securely store encrypted secrets and reusable project variables in one place. Scope configuration by environment and connect it directly to your apps without exposing sensitive values.
Envelope Encryption
Every secret is protected with its own AES-256-GCM data key, which is encrypted by a separate master key.
Values Stay Secret
Plaintext is shown once when a secret is created or updated. Read and list requests only return safe metadata.
Environment Scopes
Keep separate values for development, staging, and production, with a default scope for shared configuration.
Reusable Across Apps
Link secrets and variables to app environment variables. Updated values are resolved automatically on the next deployment.
Built-in Audit Trail
Track every secret creation, update, and deletion with the responsible user and timestamp.
Variables for Configuration
Store readable URLs, feature flags, and settings alongside your secrets. Project variables are reusable and unlimited.