SnapEnvSecure environment variables for dev teams

Encrypted at rest, pulled anywhere — CLI, Kubernetes, GitHub Actions, Docker.

🔐

AES-256-GCM encryption

Every variable is encrypted before any database write. Each project has a unique derived key — a breach of one project exposes nothing else.

🚀

CLI, Kubernetes operator, GitHub Actions, Docker, init containers. One access token, every environment.

👥

Workspace roles, project roles, and per-environment permissions. Every action is in the append-only audit log.

🔄

Every change is versioned. View old values and restore any variable to a previous state in one click.

🔔

Trigger deploys when variables change. Set expiry dates on credentials so rotation never gets missed.

☸️

The SnapEnv operator auto-syncs variables into native Kubernetes Secrets — no init containers or custom scripts.