Stop rebuildingto rotate secrets.

Dynamic, zero-knowledge secret management for the serverless era. Rotate API keys in seconds, not deployments. Powered by Upstash Redis.

Get Started
$ bun add -g @redenv/cli
End-to-end encrypted
Works with any framework
Zero-knowledge
redenv — bash
redenv setup
Connected to Upstash Redis
redenv register my-app
Creating encrypted vault...
Project my-app registered
redenv add DATABASE_URL "postgres://..."
Encrypting with AES-256-GCM
Secret DATABASE_URL added to production
connectedproduction
3 secretsAES-256-GCM
Features

Built for modern teams

Everything you need to manage secrets securely, without the complexity.

Zero-Knowledge Architecture

Your secrets are encrypted client-side using AES-256-GCM. We never see plaintext - total privacy, even if we're breached.

Your DeviceUpstash Redis
Plaintext (Local Only)
DATABASE_URL="postgres://..."
Encrypted (Unreadable)
aGVsbG8gd29ybGQhIHRoaXMgaXMgYSB0ZXN0

Global Edge Network

Secrets replicated globally via Upstash Redis. Fetch from the nearest edge node.

US-East
0ms
EU-West
0ms

Version History

ROLLBACK

Every change is versioned. Instantly rollback to any previous state.

Smart Type Casting

Parse secrets as integers, booleans, or typed JSON. Graceful handling of missing keys — no crashes, ever.

app.ts
1
2
3
4
5
6
7
The Journey

From secret to secure

See how Redenv protects your secrets at every step.

terminal
$
value:sk-proj-x7Kj9mN2pQ4r
AES-256-GCM
0%
aGVsbG8gd29ybGQ=...
Receiving...
US-East
EU-West
Asia
US-West
Australia
<50ms global latency
api/route.ts

Write your secret

Add secrets via CLI. Simple, fast, secure.

How It Works

Three steps to secure secrets

From zero to production-ready in under 60 seconds.

01

Connect

Link your Upstash Redis database with a single command. Your secrets stay yours.

$
02

Encrypt

Add secrets with AES-256-GCM encryption. Zero-knowledge — we never see plaintext.

$
03

Ship

Fetch secrets at runtime. No rebuilds, no redeployments. Just ship.

$
Open Source & Free Forever

Ready to secure
your secrets?

Get started in under 60 seconds.Just you, your terminal, and zero-knowledge encryption.

$ bun add -g @redenv/cli