Envshed From $5/mo · Free plan 9.3 Visit 
secr
secr.dev
What it is
secr manages secrets and non-human identities for development teams, with a cloud service and a CLI that injects secrets directly into a process instead of requiring them in.env files. Teams can separate development, staging, and production secrets, compare or promote environments, and apply role-based permissions by environment. A scanner detects 20+ credential patterns and can install a pre-commit hook to block leaks before they reach git. AI agents can use scoped credentials, secret allowlists, and conditional access policies. Integrations include development tools, approval channels, cloud platforms, and SDKs for Node.js, Python, and Go. The Free plan costs nothing and includes 3 projects, 100 secrets, 1 AI agent, and a 7-day audit log. Pro is $6 a month and Team is $14 a month, each with a 14-day trial. Enterprise pricing is custom. The security page calls its SOC 2 control mapping a self-assessment; formal Type II certification is on its roadmap.
Spec sheet
- Product
- secr provides secrets management and non-human identity controls for modern development teams.Read 9 Oct 2026 · secr.dev
- Intended users
- The Free plan is described as intended for solo developers and small side projects; Pro is described for growing teams shipping to production.Read 9 Oct 2026 · secr.dev
- Integrations
- Listed integrations include OpenClaw, MCP servers, Slack and Telegram approvals, LangChain, CrewAI, VS Code, GitHub Actions, Vercel, Netlify, Terraform, and Node.js, Python, and Go SDKs.Read 9 Oct 2026 · secr.dev
- Support
- The Team plan lists priority support, while the Enterprise plan lists SLA and onboarding.Read 9 Oct 2026 · secr.dev
- Access control
- The product provides role-based access control with environment-level permissions.Read 9 Oct 2026 · secr.dev
- AI agents
- AI agent identities can use scoped credentials, secret allowlists, and conditional access policies.Read 9 Oct 2026 · secr.dev
- Audit logs
- Mutations to secrets, projects, and membership are recorded in an immutable audit log; retention depends on the plan.Read 9 Oct 2026 · secr.dev
- CLI workflow
- Its CLI injects secrets directly into a process so they do not need to be written to .env files.Read 9 Oct 2026 · secr.dev
- Encryption
- Each project uses an AES-256-GCM encryption key wrapped by an external KMS; the site lists AWS KMS, GCP Cloud KMS, and Azure Key Vault.Read 9 Oct 2026 · secr.dev
- Environments
- Teams can manage separate development, staging, and production secrets and compare or promote them.Read 9 Oct 2026 · secr.dev
- Imports
- The integrations page lists imports from Render, Heroku, Supabase, Railway, AWS, Cloudflare, DigitalOcean, Fly.io, and GitHub.Read 9 Oct 2026 · secr.dev
- Secret scanning
- Its scanner detects 20+ credential patterns and can install a pre-commit hook to block leaks before they reach git.Read 9 Oct 2026 · secr.dev
- SOC 2 status
- The security page describes its SOC 2 control mapping as a self-assessment and says formal SOC 2 Type II certification is on its roadmap.Read 9 Oct 2026 · secr.dev
Plans and prices
Free Free $0 forever 3 projects · 100 secrets · 1 AI agent · 7-day audit log Read 9 Oct 2026 · secr.dev
Pro $6 a month $6/user/mo Unlimited projects and secrets · 5 custom environments · 30-day audit log · 14-day free trial Read 9 Oct 2026 · secr.dev
Team $14 a month $14/user/mo Unlimited projects and secrets · 20 custom environments · 90-day audit log · 14-day free trial Read 9 Oct 2026 · secr.dev
Enterprise Priced on request Custom 365-day audit retention · Dedicated infrastructure · SLA and onboarding Read 9 Oct 2026 · secr.dev
Strong points and limits
Strong points
- CLI injects secrets directly into processes
- Environment-level role-based permissions
- Scanner detects 20+ credential patterns
- Scoped credentials and policies for AI agents
- Integrates with AWS, Cloudflare, GitHub, and more
Limits
- Free plan is limited to 100 secrets
- Free audit log retention is 7 days
- Formal SOC 2 Type II certification is on its roadmap
Who it suits
The Free plan is described for solo developers and small side projects. Pro is aimed at growing teams shipping to production, while teams needing longer audit retention or dedicated infrastructure can review the listed Team and Enterprise details.
Verdict
secr combines environment-specific secret management with scanning, access controls, and support for AI agent identities. The Free plan has stated project, secret, agent, and audit-log limits; formal SOC 2 Type II certification is not yet in place.
Where Specifiction places it
- Secrets Management Tools#13 of 468.0
Alternatives to secrAll alternatives →
Envshed From $5/mo · Free plan 9.3 Visit 
Doppler From $8/mo 8.6 Visit 
AWS Secrets Manager From $0.40/mo · Free plan 8.5 Visit