Features
Vault features
Vault Features
Encrypted secrets storage
All secrets encrypted at rest with AES-256-GCM. Access requires authentication — no plain-text secrets in environment files, CI logs, or Slack messages.
Encrypted at rest
AES-256-GCM encryption for every secret — no plain-text exposure.
Environment promotion
Promote secrets from development → staging → production with a single click and an approval step. No copy-paste, no drift, no "forgot to update prod" incidents.
Promote without copy-paste
One-click promotion with approval steps prevents environment drift.
Audit logging
Every secret access, rotation, and permission change is logged with timestamp, actor, and IP. Full trail for compliance reviews and incident post-mortems.
Full trail
Every access and change logged with actor, timestamp, and IP.
CI/CD integration
Native integrations for GitHub Actions, GitLab CI, CircleCI, and more. Secrets injected as environment variables at runtime — never stored in your CI config.
Secrets in CI, not config
Native GitHub Actions and GitLab CI integrations inject secrets at runtime.