Cipherchest

Cipherchest stores API keys, tokens and certificates behind access policies and audit logs, and hands them to services at runtime — so secrets stop living in env files and git history.

Worth knowing before you commit:

• Dynamic, short-lived credentials beat long-lived ones where supported.
• The audit log answers "what read this secret, when".
• Unsealing procedures need documenting before you need them.

Adult secrets hygiene, sized for infrastructure smaller than a datacenter.