Skip to content
SPECIFICTION
Get listed

KeyEnv

keyenv.dev

From $3.33/mo Free plan WebmacOSLinuxAPISelf-hosted
Visit keyenv.dev
Spec score 8.4 #6 of 46 in Secrets Management Tools

What it is

KeyEnv manages environment variables and secrets across development workflows. Its CLI lets teams run, inject, and manage secrets from the terminal, while separate development, staging, and production configurations allow environment-specific overrides. A scanner checks for hardcoded keys, tokens, and passwords across more than 149 patterns. KeyEnv can schedule PostgreSQL and MySQL credential rotation using a two-secret approach intended to avoid downtime. Integrations include SDKs, GitHub Actions, Bitbucket Pipelines, serverless tools, and frameworks such as Next.js, Django, Laravel, Spring Boot, and Rails. The maker says secrets are encrypted on the device with AES-256-GCM and that it cannot access encryption keys or plaintext secrets; data in transit uses TLS 1.3, with Argon2id for key derivation. Access controls include roles, environment isolation, revocable scoped tokens, and audit logs. KeyEnv runs on Linux, macOS, web, API, and self-hosted deployments. The Free plan includes up to three projects and 100 secrets per environment. Team is $3.33/user/mo (annual) or $4.00 per user/month; new accounts get a 14-day Team-feature trial without a credit card.

Spec sheet

Product
KeyEnv is a secrets management platform for managing environment variables across development workflows.Read 2 Oct 2026 · keyenv.dev
Trial
New accounts get a 14-day Team-feature trial without a credit card, after which the account automatically switches to Free unless upgraded.Read 2 Oct 2026 · keyenv.dev
Integrations
The maker lists SDKs, GitHub Actions, Bitbucket Pipelines, serverless integrations, and framework integrations including Next.js, Django, Laravel, Spring Boot, and Rails.Read 2 Oct 2026 · keyenv.dev
Support
The Free plan includes community support, the Team plan includes priority support, and Enterprise includes dedicated support.Read 2 Oct 2026 · keyenv.dev
Access controls
KeyEnv offers role-based access, environment isolation, scoped revocable service tokens, and audit logging.Read 2 Oct 2026 · keyenv.dev
CLI workflow
Its CLI can run, inject, and manage secrets from the terminal.Read 2 Oct 2026 · keyenv.dev
Database rotation
It automatically rotates PostgreSQL and MySQL credentials on a schedule using a two-secret approach intended to avoid downtime.Read 2 Oct 2026 · keyenv.dev
Encryption
The maker says secrets are encrypted on the device using AES-256-GCM and that KeyEnv does not have access to the encryption keys or plaintext secrets.Read 2 Oct 2026 · keyenv.dev
Enterprise options
The Enterprise plan lists SSO / SAML, custom integrations, an SLA guarantee, and an on-premise option.Read 2 Oct 2026 · keyenv.dev
Environment management
KeyEnv supports separate development, staging, and production configurations with environment-specific overrides.Read 2 Oct 2026 · keyenv.dev
Infrastructure
The maker says its service runs on SOC 2 compliant cloud infrastructure and undergoes regular security audits and penetration testing.Read 2 Oct 2026 · keyenv.dev
Secret scanning
Its scanner detects hardcoded keys, tokens, and passwords across more than 149 patterns.Read 2 Oct 2026 · keyenv.dev
Transport security
The security page says data in transit is protected by TLS 1.3 and key derivation uses Argon2id.Read 2 Oct 2026 · keyenv.dev

Plans and prices

Free Free Up to 3 projects · Up to 100 secrets per environment · CLI access · End-to-end encryption · Community support Read 2 Oct 2026 · keyenv.dev
Team $4 a month $4 per user/month Unlimited projects · Unlimited secrets · Team collaboration · Role-based access control · Audit logs · Priority support Read 2 Oct 2026 · keyenv.dev
Team (annual billing) $40 a year $40/user/year Unlimited projects · Unlimited secrets · Team collaboration · Role-based access control · Audit logs · Priority support Read 2 Oct 2026 · keyenv.dev
Enterprise Priced on request Everything in Team · SSO / SAML · Custom integrations · Dedicated support · SLA guarantee · On-premise option Read 2 Oct 2026 · keyenv.dev

Every KeyEnv plan and price →

Strong points and limits

Strong points

  • CLI runs, injects, and manages secrets.
  • Separate development, staging, and production configurations.
  • Scans more than 149 hardcoded-secret patterns.
  • Scheduled PostgreSQL and MySQL credential rotation.
  • Free plan includes up to 100 secrets per environment.

Limits

  • Free plan is limited to three projects.
  • Team costs $3.33/user/mo with annual billing.
  • The Team-feature trial lasts 14 days.

Who it suits

KeyEnv suits development teams managing secrets across multiple environments or integrating secret injection into CI/CD workflows. Its self-hosted option and enterprise controls may suit organizations with specific deployment and access requirements.

Verdict

KeyEnv combines environment-specific secret management, scanning, rotation, and deployment integrations. The Free plan has project and secret limits, while Team adds unlimited projects and secrets for a listed per-user price.

Where Specifiction places it

Alternatives to KeyEnvAll alternatives →