| What it does | Secure secrets management for teams with encrypted environment variables and audit logs
| Search billions of TLS certificates from all public Certificate Transparency logs by domain, wildcard, organization, serial number or SHA-256 fingerprint
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | Not given
| FR
|
|---|
| Pricing model | Freemium
| Not given
|
|---|
| Pricing | Free: up to 3 projects, 100 secrets per environment, CLI access. Team: $4 per user per month (or $3.33 per user per month with annual billing, $40 per user per year, saving 17%). Enterprise: custom pricing with SSO/SAML, custom integrations, SLA and dedicated support, on-premise option.
| Not given
|
|---|
| Key features | - AES-256-GCM encryption at rest
- Run without .env file on disk
- Role-based access per environment
- Service tokens for CI/CD
- Database credential rotation for PostgreSQL and MySQL
- Secret scanning for hardcoded keys
- SDKs for 8 languages and CI/CD platforms
- Environment inheritance and overrides
- Complete audit logs of all secret access
- AI agent integration for Claude, Cursor, Codex
| - Search by domain, wildcard, organization, serial number, SHA-256 fingerprint and public key (SPKI)
- Index of 28.5 billion certificates across 88 active and 111 archived CT logs
- 6.5 billion distinct hostnames with first-seen and last-seen dates, certificates back to 2013
- Fast API: domain lookup 25-30 ms, subdomains 45-50 ms
- Subdomain finder with certificate counts and first/last seen dates
- BIMI brand logos from verified mark certificate logs
- CAA record checker showing records as CAs see them and CAs that issued for a domain
- Free JSON API with cursor pagination and anonymous use
- Machine-readable documentation at llms.txt for AI agents
- Continuous ingestion of all public CT logs with live coverage metrics
|
|---|
| What makes it different | - Move secrets from .env files to encrypted storage in three commands
- Nothing left on disk to leak with keyenv run
- Zero-knowledge encryption KeyEnv employees cannot access secrets
- Works offline with cached encrypted secrets
- Affordable per-seat pricing compared to competitors
| - Searches all public Certificate Transparency logs continuously ingested into a single index
- Reveals subdomains hidden from DNS enumeration and web crawls through certificate search
|
|---|
| Free plan | Not given
| Not given
|
|---|
| Open source | Not given
| Not given
|
|---|
| Platforms | Not given
| Not given
|
|---|
| Public API | Not given
| Not given
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 8 ● no change since last check | 38 ● no change since last check |
|---|
| Trust Flow (Majestic) | 4 | 18 |
|---|
| Citation Flow (Majestic) | 29 | 29 |
|---|
| Referring domains (Majestic) | 33 | 76 |
|---|
KeyEnv
ctlogs.dev