Pricing
Priced for sharing .env. Not for squeezing teams.
Two plans. The free one is actually free. The paid one grows with your team.
Free
For small teams and side projects.
- 1 project
- 2 environments per project
- Unlimited variables
- 5 team members
- Dashboard access
- CLI access (push, pull, diff, run)
- 3 CI/CD tokens
- 14-day audit history
Team
$4/user/mo beyond 10
14-day free trial · no card required
For teams shipping production together.
- Unlimited projects and environments
- Unlimited variables
- 10 seats included, then per-seat pricing
- Unlimited CI/CD tokens
- Secret versioning & rollbackComing soon
- Webhooks on secret changesComing soon
- 180-day audit history
- Environment cloningComing soon
Prices in USD. Cancel any time. No credit card required for Free.
Feature by feature.
| Feature | Free | Team |
|---|---|---|
| Core | ||
| Projects | 1 | Unlimited |
| Environments per project | 2 | Unlimited |
| Variables | Unlimited | Unlimited |
| Team members | 5 | 10 included + $4/mo per extra |
| Security & Audit | ||
| End-to-end encryption Variables encrypted in your browser with XChaCha20-Poly1305. Plaintext never reaches our servers. | ||
| Per-organization data keys Wrapped to each member with X25519 sealed-box. Auto-rotated when a member is removed. | ||
| Argon2id passphrase-derived keys Your passphrase unlocks your vault locally. We store no copy. | ||
| One-time encrypted share links Decryption key lives in the URL fragment. The server cannot read shared values. | ||
| Two-factor authentication Email OTP today. TOTP and passkeys coming soon. | ||
| Audit history | 14 days | 180 days |
| Audit log CSV export | ||
| Secret versioning & rollbackComing soon | ||
| Developer tooling | ||
| Dashboard | ||
| CLI push, pull, diff, run | ||
| CI/CD tokens | 3 | Unlimited |
| Webhooks on secret changesComing soon | ||
| Environment cloningComing soon | ||
| Access control | ||
| Role-based permissions Owner, admin, member | ||
| Invitations by email | ||
Fraction of the price. Same security foundation.
Per month
$40.00
Vs. the alternatives
Monthly cost at 15 users.
Competitor prices are approximate list rates as of April 2026. Check their sites for the most current pricing.
Likely asking.
Can I start on the free plan and upgrade later?
Yes. No credit card required to start. When you hit a limit, you'll see a prompt to upgrade; nothing is destroyed or locked retroactively.
Is the CLI free?
Yes. Every plan gets the full CLI: push, pull, diff, and the runtime injection in `handoff run`. Free includes 3 long-lived CI/CD tokens; Team is unlimited.
How does the seat-based pricing work?
The Team plan includes 10 seats at a flat $20/mo (or $200/yr). Each additional member is $4/mo ($3.50/mo on annual).
When am I charged for adding a seat?
Adding a seat adds a prorated line item to your next scheduled invoice, not an immediate card charge. Removing a seat adds a prorated credit to your next invoice.
Can I cancel any time?
Yes. Cancel from the billing portal; your subscription stays active through the end of the current period, then switches back to Free automatically.
What happens to my data if I downgrade?
Nothing is deleted. Your existing projects, environments, and variables stay intact. You just can't create new ones past the Free plan limits until you upgrade again.
Do you offer annual billing?
Yes. Save 17% with annual: $200/year instead of $240, and extra seats drop from $4/mo to $3.50/mo equivalent.
How secure is this?
Every value is encrypted in your browser with XChaCha20-Poly1305 before it reaches us. Your passphrase derives a key locally via Argon2id, so we never see your master key or plaintext values. Each organization has its own data key, wrapped to each member with libsodium sealed-box, and rotated automatically when a member is removed. See our security page for the full threat model.
Do you offer refunds?
Credits are applied to your next invoice automatically on downgrades. For specific refund requests, reach out and we'll sort it out.
Try it free. Upgrade when you outgrow it.
Thirty seconds to your first handoff push.