New: SDK v2.0 — Real-time sync & auto-refresh

Docs
AES-256-GCM encrypted · Zero-knowledge architecture

Your secrets.
Encrypted. Protected.
Always secure.

No .env file. No API key. No copy-paste. Your app calls new ZeonVault() and gets secrets — identity is established automatically via Docker labels, K8s service accounts, cloud IAM, or local session.

10
SDKs
iOS & Android
Mobile Apps
AES-256
Encryption
99.9%
Uptime
THE PROBLEM

.env files and API keys are the problem

Every .env file is an unencrypted secret dump. Every API key in an environment variable is one docker inspect away from exposure.

Secrets in chat messages

“Hey, can you send me the database password?” — Sound familiar? API keys and credentials shared over Slack, email, and sticky notes.

.env files & leaked keys

.env files on dev laptops, API keys in CI/CD environment variables, tokens copy-pasted into Docker configs — all plaintext, all exposed, no rotation.

No audit trail

Who changed the Stripe key last week? When was the DB password last rotated? Nobody knows, and there's no way to find out.

THE SOLUTION

Identity-based access. Zero configuration.

Your app never knows HOW it authenticates. Docker containers, K8s pods, cloud VMs, and local dev machines all get secrets the same way: new ZeonVault().

1

Create Projects

Group your infrastructure into projects — each with its own team, permissions, and audit log.

E-Commerce Platform8 services
Analytics Dashboard3 services
Mobile App5 services
2

Add Services

Register each microservice. Each gets its own variables scoped by environment (dev, staging, prod).

auth-service24 vars
api-gateway18 vars
payment-service12 vars
3

Access Directly

Use our SDK in your code. Call vault.get() and get your variable. That's it.

// That's literally it
const db = await
  vault.get('DATABASE_URL');

// Works in any environment
// dev, staging, production
// Always the right value
SDKs FOR EVERY LANGUAGE

Your language.
Your framework.
Our SDK.

One line to connect. One call to access any secret. No API key, no token, no .env file — identity is established automatically. Available for Node.js, Python, Go, Java, PHP, .NET, Ruby, Rust, Kotlin (Android), and Swift (iOS).

Auto-refresh

Variables update automatically when changed in the dashboard

Environment-aware

Automatically resolves dev/staging/production based on context

File & certificate support

Download SSL certs, SSH keys, and config files directly

Zero-knowledge encryption

AES-256-GCM — we can never see your secrets

npm install @zeonvault/sdk
const ZeonVault = require('@zeonvault/sdk');

// No API key needed. Identity is automatic.
const vault = new ZeonVault();

// Access any secret directly
const dbUrl = await vault.get('DATABASE_URL');
const openai = await vault.get('OPENAI_KEY');
const config = await vault.getAll();

// Auto-refresh when secrets change
vault.enableAutoRefresh(300);
PLATFORM

Everything you need to manage secrets

From solo developers to enterprise teams — ZeonVault scales with your infrastructure.

Project → Service → Variable

Hierarchical organization that mirrors your actual infrastructure. Every variable belongs to a service, every service to a project.

Multi-Environment

Development, staging, production — each environment gets its own set of variables. Switch with a single config flag.

Global Variables

Shared secrets that apply across all services — like your company Stripe key or shared API credentials. Set once, use everywhere.

Activity Audit Log

Every access, every change, every download — logged with timestamps, IP addresses, and user identity. Full compliance-ready audit trail.

Team Access Control

Owner, Admin, Member, Viewer — fine-grained RBAC so each team member only sees what they need. Invite by email with role assignment.

Version History

Every variable change is versioned. Roll back to any previous value instantly. Compare changes across versions with diff view.

Watchtower Security

Continuous security monitoring with risk scoring. Get alerted about weak secrets, old keys, and potential vulnerabilities.

Import & Export

Migrate from any provider — 1Password, LastPass, Bitwarden, Chrome, or plain CSV. Export securely whenever you need.

Secure Sharing

Share individual secrets via time-limited, view-limited links. Auto-expire after set time or number of views.

DASHBOARD PREVIEW

Your secrets. Organized beautifully.

A clean, intuitive dashboard to manage all your variables. Click to reveal, one-click copy, instant search.

E-Commerceauth-service
production
DATABASE_URL
JWT_SECRET
REDIS_HOST
STRIPE_SECRET_KEY
SMTP_PASSWORD
AWS_ACCESS_KEY_ID
6 of 24 variables shown
AES-256-GCM encrypted
MOBILE APPS

Your vault. In your pocket.

Native iOS and Android apps with biometric unlock, offline access, and real-time sync. Manage passwords, view secrets, and share securely — from anywhere.

ZeonVault for iOS

iPhone & iPad

Face ID & Touch ID unlock
iCloud Keychain integration
AutoFill passwords in Safari & apps
Apple Watch companion app
Offline vault access
Siri Shortcuts support

ZeonVault for Android

Phones & Tablets

Fingerprint & Face unlock
Android Autofill Framework
Wear OS companion app
Material You dynamic theming
Offline vault access
Quick Settings tile for quick copy

Real-time sync

Changes on any device sync instantly across all platforms

End-to-end encrypted

Your secrets are encrypted before leaving your device

Browser extensions

Chrome, Firefox, Safari, Edge, and Brave extensions

Desktop apps

Native macOS, Windows, and Linux desktop applications

Built for security. Designed for developers.

Zero-Knowledge

We encrypt everything client-side. We can never see your secrets.

AES-256-GCM

Military-grade encryption for every variable, at rest and in transit.

SOC 2 Type II

Fully audited and compliant. Enterprise-ready from day one.

99.9% Uptime

Distributed infrastructure ensures your variables are always accessible.

USE CASES

Built for teams like yours

Startups & Solo Devs

Run zeonvault login + zeonvault link and you're done. No .env files to copy, no API keys to manage. Free tier included.

Start building

Growing Teams

New dev joins? 2 commands: zeonvault login and zeonvault link. No config files to share. RBAC ensures they only see what they need.

Explore team features

Microservice Architectures

8 services, 3 environments, 200+ variables? ZeonVault's project → service → variable hierarchy was built for exactly this.

See how it works

Enterprise & Compliance

Full audit logs, IP whitelisting, domain restrictions, SOC 2 compliance, and SSO integration. Everything your security team requires.

Enterprise features

No .env file. No API key.
Just new ZeonVault().

New developer onboarding = 2 commands. Identity-based auth means zero config for your app code. Free forever for personal use.

npm install @zeonvault/sdk