secr
What it is
secr is a cloud service for managing secrets and non-human identities in development teams. Its command-line workflow injects secrets directly into processes instead of writing them to .env files. Teams can keep separate development, staging, and production values, compare environments, and promote them. Role-based access controls apply at the environment level. A scanner detects more than 20 credential patterns and can install a pre-commit hook to block leaks before they reach git. AI agents can receive scoped credentials, secret allowlists, and conditional access policies. Integrations include GitHub Actions, VS Code, Vercel, Netlify, Terraform, Slack, Telegram approvals, MCP servers, and SDKs for Node.js, Python, and Go. Projects use AES-256-GCM keys wrapped by an external KMS. The free plan includes three projects, 100 secrets, one AI agent, and seven-day audit retention. Paid plans start at $6 a month.
For and against
For
- Injects secrets without writing .env files
- Supports separate deployment environments
- Scans for 20+ credential patterns
- Offers environment-level role permissions
- Includes AI-agent access controls
Against
- Free plan allows 100 secrets
- Free audit retention lasts seven days
- Formal SOC 2 Type II certification is roadmap-only
- Enterprise pricing is custom
The verdict
secr focuses on secret delivery, environment controls, leak prevention, and machine identities. Its free tier covers small projects, while paid plans expand environments and audit retention.
Who it suits
The Free plan is described for solo developers and small side projects. Growing teams shipping to production can consider paid plans with more environments and longer audit retention.
Plans and prices
Free
3 projects · 100 secrets · 1 AI agent · 7-day audit log
Read 9 Oct 2026 · secr.dev
Pro
Unlimited projects and secrets · 5 custom environments · 30-day audit log · 14-day free trial
Read 9 Oct 2026 · secr.dev
Team
Unlimited projects and secrets · 20 custom environments · 90-day audit log · 14-day free trial
Read 9 Oct 2026 · secr.dev
Enterprise
365-day audit retention · Dedicated infrastructure · SLA and onboarding
Read 9 Oct 2026 · secr.dev
On the record
- Access control
- The product provides role-based access control with environment-level permissions.secr.dev · read 9 Oct 2026
- AI agents
- AI agent identities can use scoped credentials, secret allowlists, and conditional access policies.secr.dev · read 9 Oct 2026
- Audit logs
- Mutations to secrets, projects, and membership are recorded in an immutable audit log; retention depends on the plan.secr.dev · read 9 Oct 2026
- CLI workflow
- Its CLI injects secrets directly into a process so they do not need to be written to .env files.secr.dev · read 9 Oct 2026
- Encryption
- Each project uses an AES-256-GCM encryption key wrapped by an external KMS; the site lists AWS KMS, GCP Cloud KMS, and Azure Key Vault.secr.dev · read 9 Oct 2026
- Environments
- Teams can manage separate development, staging, and production secrets and compare or promote them.secr.dev · read 9 Oct 2026
- Imports
- The integrations page lists imports from Render, Heroku, Supabase, Railway, AWS, Cloudflare, DigitalOcean, Fly.io, and GitHub.secr.dev · read 9 Oct 2026
- Integrations
- Listed integrations include OpenClaw, MCP servers, Slack and Telegram approvals, LangChain, CrewAI, VS Code, GitHub Actions, Vercel, Netlify, Terraform, and Node.js, Python, and Go SDKs.secr.dev · read 9 Oct 2026
- Intended users
- The Free plan is described as intended for solo developers and small side projects; Pro is described for growing teams shipping to production.secr.dev · read 9 Oct 2026
- Product
- secr provides secrets management and non-human identity controls for modern development teams.secr.dev · read 9 Oct 2026
- Secret scanning
- Its scanner detects 20+ credential patterns and can install a pre-commit hook to block leaks before they reach git.secr.dev · read 9 Oct 2026
- SOC 2 status
- The security page describes its SOC 2 control mapping as a self-assessment and says formal SOC 2 Type II certification is on its roadmap.secr.dev · read 9 Oct 2026
- Support
- The Team plan lists priority support, while the Enterprise plan lists SLA and onboarding.secr.dev · read 9 Oct 2026
