LSD Framework
Cipher · secrets management

Secrets, without the spreadsheet.

Cipher is an end-to-end-encrypted secrets manager that integrates with every cloud, every CI provider, and every developer workflow.

Live preview
Features

Everything you need, nothing you don't.

End-to-end encrypted

Even Cipher can't see your secrets. Open-source encryption, audited annually.

Universal integrations

AWS, GCP, Azure, Vercel, Netlify, GitHub Actions, GitLab CI, Bitbucket — all native.

Role-based access

Granular permissions per project, per environment, per secret.

Audit trail

Every read, every write, every share — logged immutably.

Auto-rotation

Schedule rotations or trigger them via webhook. AWS keys, DB passwords, API tokens.

Developer-first CLI

Fast, scriptable, and self-documenting. Tab-complete every command.

Trusted by teams shipping faster

Pricing

Pay only for what you ship.

Hobby

$0/mo

For personal projects.

  • ✓ Unlimited secrets
  • ✓ 3 environments
  • ✓ 1 user
  • ✓ Community support
Start free
Most popular

Team

$10/user/mo

For working teams.

  • ✓ Unlimited environments
  • ✓ RBAC
  • ✓ SSO
  • ✓ Audit logs
  • ✓ Slack alerts
Start trial

Enterprise

Custom/mo

For regulated industries.

  • ✓ Private deployment
  • ✓ SOC2 + HIPAA
  • ✓ Customer-managed keys
  • ✓ 24/7 support
Contact sales
What customers say

Loved by builders worldwide.

"Cipher killed our internal "secrets-bot" overnight. The CLI is the best part."
Plover Hexstrom · Platform Eng, Voltlane
"The audit trail saved us in a SOC2 audit. Worth the price ten times over."
Plover Hexstrom · CTO, Northbeam
"Migration from Vault took an afternoon. We haven't looked back."
Plover Hexstrom · DevOps, Quill
FAQ

Questions, answered.

How does encryption work?
Client-side AES-256 with per-user keys. Cipher servers never see plaintext. Read our cryptography whitepaper.
Can I self-host?
Yes — Enterprise customers can deploy in their own VPC. We provide Terraform and Helm charts.
What happens if I lose my key?
You can be re-invited by an admin and re-grant access via shared encryption keys.

Stop emailing .env files.

Free for hobby use. 14-day trial on Team.