CipherDock started where most secrets disasters start: a .env file, a git push, and a very bad week. Tokens in git is still the #1 secrets failure mode — and now developers paste production keys into AI agent chats, where they land in prompts and logs.
We wanted Doppler's ease with our own metal underneath: AES-256-GCM envelope encryption, RBAC that fails closed, a hash-chained audit log — and first-class tokens for the agent era. One binary, no cluster, no hype words like “military-grade”.
Our security claims match the code. What's roadmap is labeled roadmap, on this site and in the repo.
