Zero-Trust secrets management with CLI-first workflow. Encrypt environment variables locally, share securely across teams, and inject secrets directly into your applicationsno .env files needed.
curl -fsSL https://install.nvolt.io/latest/install.sh | bash
███╗ ██╗██╗ ██╗ ██████╗ ██╗ ████████╗
████╗ ██║██║ ██║██╔═══██╗██║ ╚══██╔══╝
██╔██╗ ██║██║ ██║██║ ██║██║ ██║
██║╚██╗██║╚██╗ ██╔╝██║ ██║██║ ██║
██║ ╚████║ ╚████╔╝ ╚██████╔╝███████╗██║
╚═╝ ╚═══╝ ╚═══╝ ╚═════╝ ╚══════╝╚═╝
Monthly fees for Vault, Doppler, or AWS Secrets Manager add up quickly. You're paying for infrastructure you shouldn't need.
Storing secrets in .env files is risky. One accidental commit and your credentials are exposed forever.
GPG-based tools like git-crypt require manual key management. Adding or removing team members is painful.
Cloud secret managers lock you into their ecosystem. Migration is complex and risky.
Zero-Trust cryptography meets Git-native storage
Each machine (laptop, CI server, production) gets a unique RSA-4096 keypair. Private keys never leave the machine.
$ nvolt init
Secrets are encrypted with AES-256-GCM using a project master key. The master key is wrapped for each authorized machine.
$ nvolt push -f .env.production -e production
Encrypted secrets are committed to Git. Git controls who can access the ciphertext, nvolt controls who can decrypt it.
$ git push origin main
Authorized machines unwrap the master key with their private key, then decrypt secrets locally.
$ nvolt run npm start
All encryption happens locally on your machine. No backend servers, no API keys, no trust required.
Encrypted secrets live in Git alongside your code. Use your existing GitHub/GitLab infrastructure.
Grant or revoke access per machine and environment. CI gets staging, production servers get production.
Separate secrets for dev, staging, and production. Each environment has its own access controls.
Rotate master keys without re-encrypting all secrets. Remove compromised machines instantly.
Every secret change is tracked in Git history. See who added what, when, and why.
Beautiful terminal UI with color-coded output. Perfect for CI/CD pipelines and local development.
No monthly fees, no usage limits, no credit card required. Use it forever, for free.
Choose the right tool for your needs
| Feature | nvolt | HashiCorp Vault | Doppler | Akeyless | git-crypt | SOPS |
|---|---|---|---|---|---|---|
| Monthly Cost | Free | $$$ | $$ | $$ | $0 | $0 |
| Zero-Knowledge | Self-hosted only | |||||
| No Backend | ||||||
| No Login/Auth Required | ||||||
| Per-Machine Access | GPG only | GPG only | ||||
| Environment-Based Access | ||||||
| Git-Native Storage | ||||||
| Multi-Project Support | Limited | Limited | ||||
| Active Maintenance | BSL License | Unmaintained |
No monthly costs, no infrastructure to maintain. Get enterprise-grade security without the enterprise price tag.
Securely share secrets across laptops and CI/CD. Everyone uses the tools they already know: Git and CLI.
Zero-Trust architecture ensures no single point of failure. All cryptography happens on machines you control.
Grant CI servers access to specific environments. Secrets are loaded at runtime, never stored in CI config.
curl -fsSL https://install.nvolt.io/latest/install.sh | bash
git clone https://github.com/iluxav/nvolt.git
cd nvolt
go build -o nvolt ./cmd/nvolt
sudo mv nvolt /usr/local/bin/
nvolt init
nvolt push -f .env
nvolt push -k ENV1=secret1 -k ENV2=secret2
nvolt run npm start