Passive daemon
A lightweight background client authenticates once via SSO and serves secrets over a local socket. No wrapper commands, no per-session login.
Zero-friction secrets for every developer, every stack
Authenticate once. Every project on your machine works forever - no prefix commands, no .env files, no Slack-DM'd credentials.
Core platform
Built for developers and the teams behind them
Zero workflow change
F5 in your IDE, npm run dev, dotnet run - secrets inject before your app starts. The developer experience stays exactly the same.
Language-native SDKs
Thin clients for .NET, Node.js, Python, Java, Go, and Ruby. Each package injects secrets idiomatically for its runtime.
SSO on every plan
Google, Microsoft Entra, GitHub, and GitLab from day one. SAML 2.0 and SCIM available on Business and Enterprise tiers.
Organization management
Projects, environments, RBAC, and immutable audit logs. Built for teams from 2 to 2,000 developers.
Secret versioning
Every change is versioned with full rollback. Bulk import and export from .env format, with every export audit-logged.
Integrations
From local dev to production pipelines
CI/CD pipelines
Machine identities for GitHub Actions, GitLab CI, Azure DevOps, CircleCI, Jenkins, and more. Scoped, short-lived access tokens.
Kubernetes Operator
Sync secrets from Kryptic into Kubernetes Secret objects on a schedule you control. Available on Team plan and above.
Cloud provider sync
Push secrets to AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, Vercel, Netlify, and Railway.
IDE extensions
VS Code, JetBrains, Visual Studio, and Rider plugins show daemon status, environment context, and secret count in the status bar.
One daemon, thin SDK per language
Passive detection - if the daemon isn't running, your app still starts with existing env vars. Zero production dependency.
| Language | Registry | Package | Injection target |
|---|---|---|---|
| .NET / C# | NuGet | krypticdev | IConfiguration |
| Node.js | npm | krypticdev | process.env |
| Python | PyPI | krypticdev | os.environ |
| Java | Maven | krypticdev | Spring Environment |
| Go | pkg.go.dev | krypticdev | os.Environ |
| Ruby | RubyGems | krypticdev | ENV |
| PHP | Packagist | krypticdev | $_ENV |
| Rust | crates.io | krypticdev | std::env |
// ASP.NET Core - entire integration
builder.Configuration.AddKryptic();Security
Security by design, not by checkbox
Encrypted at rest, open source
Envelope encryption with AES-256-GCM: per-organization data keys, context-bound ciphertexts, rotatable keys. The open-source engine shows exactly how.
Local socket only
Daemon-to-SDK communication never leaves your machine. Tokens live in the OS keychain; secrets stay in memory only.
Secret scanning
140+ secret patterns detected via pre-commit hooks, CI steps, or the kryptic scan CLI command.
Immutable audit logs
Every action logged with timestamp, actor, and IP. Logs cannot be modified or deleted - exportable as CSV or JSON.
Use cases
How teams use Kryptic
Developer onboarding
Invitation, install daemon, SSO login, clone repo, run. Under 10 minutes to a working local environment. No Slack DMs.
Multi-project developers
Freelancers and agency devs switch between client projects seamlessly. The daemon fetches the right secrets for whichever project is running.
Environment promotion
Override the environment for a single run with KRYPTIC_ENV=staging or a kryptic.json default - no config file changes needed.
Secret rotation
Update a secret in the dashboard. Every daemon, CI pipeline, and K8s operator picks up the new value automatically within minutes.
Incident response
Revoke a user's access instantly. Refresh tokens invalidate within 15 minutes. No secrets on disk - nothing to recover from a lost laptop.
Self-hosted compliance
Run the full platform in your infrastructure. Air-gapped deployment with offline license validation for regulated industries.
Why teams choose Kryptic
| Kryptic | Typical CLI tools | |
|---|---|---|
| Dev workflow | Passive daemon - zero workflow change | CLI wrapper every run |
| SSO on free tier | Yes | Often paid add-on |
| .NET integration | Native IConfiguration | Generic env injection |
| Open source client | MIT daemon & SDKs | Varies |
| Self-hosted | Free community edition | Often unavailable |
| IDE experience | VS Code, JetBrains, Visual Studio | None |