Secrets, docked.

Doppler-simple secrets management with a one-binary self-host — and an AI-agent-aware local dev mode nobody else owns. For teams that outgrew .env files but don't want to operate HashiCorp Vault.

See pricing Read the docs

GitGuardian found 4,576 exposed n8n tokens in public GitHub (Aug 2026). A leaked Gemini API key burned $82,314 in 48 hours. Tokens in git is still the #1 secrets failure mode.

CDCipherDock — Vault console

Sample vault

Sample · Projects & environments

Every secret, in its place. Every value, masked.

Projects and environments scope who can reach what. Secret values are never printed in this console — they are shown as dots, and injected as process environment variables when a service runs.

webapp

production · staging · development

3 environments

billing-api

production · staging

2 environments

agent-sandbox

staging only · agent tokens land here

Staging-bound

Secret	Environment	Value	Access
DATABASE_URL	production	••••••••••••	ci · developer
STRIPE_KEY	staging	••••••••••	developer
SESSION_SECRET	production	••••••••••••••	ci only
DATABASE_URL	staging	••••••••••	agent token · read-only

Envelope-encrypted at rest. AES-256-GCM with per-project keys — a masked value in the console is an encrypted value on disk.

Access & audit rail

Who read what, when

developer · read STRIPE_KEY

webapp · staging · 09:41

Logged

ci token · read DATABASE_URL

webapp · production · 09:38

Logged

agent token · read DATABASE_URL

webapp · staging · 15-min token · 09:36

Logged

agent token · production read

Out of scope · denial recorded · 09:36

Denied

Hash-chained audit log. Append-only and tamper-evident — every grant, read, rotation and denial is recorded, and the log is exportable.

Self-host

One binary · your metal, your VPC

Sample vault — project, environment and secret names are illustrative; values are masked dots only.Secrets, docked.

Secrets sprawl is how breaches start

The fastest-growing consumer of secrets is also the leakiest:

Developers paste production keys into AI agent chats, where they land in prompts, logs, and tool traces.
Doppler is cloud-only — if compliance, clients, or paranoia require secrets on your own metal, it can't help.
HashiCorp Vault is cluster-grade infrastructure with a G2 ease-of-setup score of 6.7/10 (vs Doppler's 9.5).
HashiCorp shut down HCP Vault Secrets, forcing a live migration wave with nowhere obvious to land.

Doppler's UX, your metal, agent-aware

CipherDock sets up like Doppler and runs anywhere — including a single binary on your own server. It mints scoped, single-environment, 15-minute tokens for coding agents and injects secrets as process env vars without touching disk or prompts. And when you're mid-migration off HCP Vault Secrets, cipherdock migrate moves you in one command.

Self-host

One-binary self-host

A single process on your metal, your VPC, even air-gapped. No cluster to operate.

Agent mode

AI-agent-aware tokens

Scoped, single-environment, 15-minute tokens for agents; secrets injected as env vars without touching disk or prompts.

Crypto

AES-256-GCM envelope encryption

Per-project 256-bit DEKs wrapped by a PBKDF2-HMAC-SHA256 (600k iteration) KEK. Tamper → InvalidTag, no silent corruption.

Access

RBAC that fails closed

Roles (owner/admin/developer/viewer/ci) scoped to project + environment. Denials are audit-logged.

Audit

Hash-chained audit log

Append-only, tamper-evident event log. Export it to immutable storage for compliance.

Migrate

One-command migration

cipherdock migrate imports HCP-Vault-Secrets-style JSON, kv-JSON, or dotenv — plus a migration concierge on Enterprise.

How it works

Init and serve
cipherdock init, then python -m cipherdock serve. One process, SQLite-backed, loopback by default.
Create projects, set secrets
cipherdock project-create webapp; cipherdock secret-set webapp staging STRIPE_KEY. Values are envelope-encrypted at rest.
Grant scoped access
Roles per project + environment. CI gets ci-scoped tokens; developers get exactly their env.
Hand agents 15-minute tokens
cipherdock agent-token webapp staging --ttl 900, then agent-exec injects secrets as env vars — never into prompts.

Secrets, docked.

Every secret, in its place. Every value, masked.

Who read what, when

Secrets sprawl is how breaches start

Doppler's UX, your metal, agent-aware

One-binary self-host

AI-agent-aware tokens

AES-256-GCM envelope encryption

RBAC that fails closed

Hash-chained audit log

One-command migration

How it works

Init and serve

Create projects, set secrets

Grant scoped access

Hand agents 15-minute tokens

Dock your secrets before they end up in git.