Envless is an open‑source secret‑management platform that encrypts environment variables end‑to‑end and stores them in a git‑style repository with unlimited branching, enabling versioning and rollback alongside code. It provides role‑based access controls, two‑factor authentication, and sub‑second global synchronization via edge‑distributed infrastructure, with a native CLI for seamless terminal integration.
Funding
Funding not disclosed
Founders
Product
Problem
Development teams often struggle to share and manage application secrets (API keys, tokens, credentials) securely across environments and collaborators. Traditional secret stores lack granular access controls, versioning, and fast cross‑region synchronization, leading to accidental leaks, configuration drift, and reduced productivity.
Solution
Envless delivers an open‑source secret‑management platform that encrypts environment variables end‑to‑end and enforces role‑based read/write permissions. Secrets are stored in a git‑style repository, allowing unlimited branches so developers can version and roll back configuration changes alongside code. The service runs on edge‑distributed infrastructure, providing low‑latency global sync so every team member sees the latest values instantly. A native CLI integrates secret operations directly into existing terminal workflows, eliminating context switches. Optional two‑factor authentication and audit‑log retention add compliance‑ready traceability.
Target Audience
Primary customers are software engineering teams—ranging from early‑stage SaaS startups to large enterprises—that need secure, versioned secret management integrated into CI/CD pipelines.
Features
- End‑to‑end AES‑256 encryption with per‑secret public‑key cryptography, ensuring only authorized users can decrypt values.
- Fine‑grained RBAC (read, write, admin) tied to team members and service accounts.
- Git‑like branching and commit history for environment variables, supporting unlimited branches per project.
- Edge‑hosted API and database layer that replicates secrets across geographic regions for sub‑second access.
- Full‑featured CLI (`envless`) for project creation, team invites, secret CRUD, and branch management without leaving the terminal.
- Two‑factor authentication (TOTP) and configurable audit‑log retention (1 month to unlimited).
- Language‑agnostic SDKs and runtime‑agnostic support for any framework, container, or serverless platform.
- Open‑source core on GitHub with contribution guidelines and transparent security roadmap.