SECR

Name

SECR

Legal name

SECR

Website

https://secr.dev

Company type

Private

Operating status

Operating

Headcount range

11–50 employees

Ownership category

akta.pro rank

Product category

Secrets Management Software

akta.pro primary industry

Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD)

Keywords

• Secrets management software
• Developer security tooling
• Non-human identity management
• CI/CD credential injection
• Envelope encryption platform

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Subscription - Per-Seat SaaS: Tiered per-seat subscription model with monthly and annual billing. Pro at $6/user/month, Team at $14/user/month. Billing is prorated. Enterprise custom pricing based on organization requirements.
2. Freemium Entry Tier: Free tier provides 3 projects, 100 secrets, 1 AI agent, version history, dev+staging environments, 7-day audit log. No credit card required. Generates conversion funnel to paid tiers.

Pricing tiers

Go-to-market motion2 records

Distribution channels5 records

Marketing channels4 records

Core offering

SECR provides a CLI-first secrets management platform that encrypts, syncs, and injects application secrets and environment variables for development teams. Core capabilities include the secr CLI for zero-disk runtime secret injection, secret scanning, and pre-commit guards; a web Dashboard for visual secret and team management; a REST API; and SDKs for Node.js, Python, and Go. The platform also brokers scoped credentials to AI coding agents via an MCP server and OpenClaw plugin, and enforces role-based access control with immutable audit logs across environments.

Product overview

SECR is a CLI-first secrets management platform built for modern development teams. The core offering consists of the secr CLI (for zero-disk runtime injection, secret scanning, and pre-commit hooks), a web Dashboard (for visual management, audit logs, and team administration), and a REST API (for programmatic access). The platform integrates with AI coding agents via @secr/mcp (MCP server) and an OpenClaw plugin, providing scoped agent tokens with per-agent secret allowlists and conditional access. SDKs are available for Node.js, Python, and Go. A VS Code extension provides in-editor secret management. Machine tokens and AI agent identities manage non-human access. Secret scanning and pre-commit guards prevent credential leaks. Provider import supports migration from Render, Vercel, Heroku, Netlify, Supabase, Railway, AWS Secrets Manager, and AWS Parameter Store.

Differentiator

Problem solved

Functional benefit

Products and services

• secr CLI Command-line interface for secrets management that provides `secr run` for zero-disk runtime injection, `secr set/get/delete` for CRUD, `secr scan` for credential detection, `secr guard` for pre-commit hooks, and `secr init/pull/promote` for workflow management. Targeted at developers and DevOps engineers.
• secr Dashboard Web-based UI for managing secrets, environments, team members, audit logs, webhooks, and billing. Provides visual environment comparison, secret promotion, and token management for team admins and developers.
• Node.js SDK Official Node.js/JavaScript SDK for integrating secr into Node.js applications, serverless functions, and build pipelines.
• Python SDK Official Python SDK for integrating secr into Python applications, data pipelines, and build workflows.
• Go SDK Official Go SDK for integrating secr into Go services, CLIs, and infrastructure tooling.
• @secr/mcp MCP Server Model Context Protocol server that brokers secrets from secr to AI coding agents (Claude Code, Cursor, Continue, Copilot, Windsurf). Provides get_secret, list_secrets, set_secret, delete_secret, and list_environments tools with scoped agent tokens and per-agent secret allowlists.
• OpenClaw Plugin Native plugin for OpenClaw that provides tool-call gating and approval queues for AI agent credential brokering, with scoped credentials and conditional access policies.
• VS Code Extension VS Code extension providing sidebar tree view for environments and secrets, secret CRUD, version history, environment switching, .env pull/import, secret scanning with 22 patterns, audit log viewer, promote secrets, environment diff, search/filter, and integrated terminal with secrets injected.
• secr REST API REST API at https://api.secr.dev/v1 with endpoints for auth, projects, secrets, organizations, templates, webhooks, members, audit logging, and billing. Supports session cookie and bearer token authentication, with HMAC-SHA256 signed webhooks and a public OpenAPI 3.1 spec.
• secr GitHub Action Composite GitHub Action (secr-dev/secr-action@v1) that pulls secrets from secr and exports them as environment variables for the duration of the CI job, with values automatically masked in GitHub Actions logs.

Quantifiable outcome

• Average data breach cost $4.88M in 2024
• +2 more outcomes

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration18 records

Feature8 records

Partnerships

Two partnerships are on record, tiered core.

• WorkOScoreTechnology or IntegrationEnterprise authentication powered by WorkOS provides SSO via SAML & OIDC, SCIM directory sync, social login, MFA, and passkey support across all enterprise plan features.
• StripecoreTechnology or IntegrationStripe powers billing and payment processing for subscription management, checkout, and customer portal. Enterprise customers can pay by invoice.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• AWS Secrets Manager: Cloud-native secrets management service from AWS with deep integration into the AWS ecosystem. SECR's provider-import feature explicitly supports migration FROM AWS Secrets Manager, positioning it as both a competitor and a source of inbound customers.
• Google Secret Manager: GCP-native secrets management service. Functions as both a competitor (where developers run on GCP) and a migration source via SECR's provider-import capability.
• HashiCorp Vault: Established enterprise secrets and identity management platform with deep policy/transit features. SECR's homepage lists a 'vs Vault' comparison page; Vault is the incumbent benchmark SECR positions itself against for the enterprise segment.
• Microsoft Azure Key Vault: Cloud-vendor secrets and key management service natively integrated into Azure. A broad incumbent that SECR competes against for enterprise workloads and whose ecosystem-fragmentation pain SECR's import tools are designed to absorb.

Direct peers

• Doppler: Developer-focused secrets management platform offering centralized secret sync, CLI tooling, and per-seat pricing. Explicitly compared by SECR as a direct competitor in its alternative/comparison pages; both target the same developer-team ICP with PLG motion.
• Infisical: Open-source secrets management platform with a self-hostable server, CLI, and team collaboration features. Directly comparable to SECR on developer-first positioning, .env replacement workflow, and SOC 2/enterprise tier.
• Akeyless: SaaS secrets management offering with vault-less architecture and broad CI/CD integration. Competes directly for the same developer and enterprise customers, with a similar freemium-to-enterprise motion.
• Bitwarden Secrets Manager: Secrets management offering from Bitwarden targeting developer teams with scoped machine tokens and CI/CD integration. Comparable on per-seat pricing and developer-CLI workflow.

Emerging players

• GitGuardian: Code secret scanning and detection platform — SECR cites GitGuardian's 23.8M secrets-leaked-on-GitHub statistic. Overlaps with SECR's secret-scanning and pre-commit hook capabilities but from a detection-only (not management) angle.
• 1Password (Developer / CLI): Password and credential manager that has expanded into developer secrets via 1Password CLI and Secrets Automation. Competes for the same end-user developers, though its core franchise is consumer/team password management.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights5 records

Customer concentration

• GitHubgithub.com/Gerardmcc/secr
• LinkedInlinkedin.com/company/secrdev

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about SECR