Stop Managing
Secrets Like It's 2012.

Scan for leaked secrets, clean git history, protect from AI tools, and sync across teams — all from one command.

~/my-saas-app
$

Free forever for solo devs. No infra to run. Works in 60 seconds.

Available onnpm

Every layer of secret security. One CLI.

Available today in the CLI, with the next layer already in progress.

Secret Scanner

53 patterns. One command. Find leaked AWS keys, Stripe secrets, GitHub tokens across files, git history, and MCP configs.

Git History Protection

Secrets committed 8 months ago are still in your history. Scan, audit, and clean with BFG — then block future leaks with a pre-commit hook.

AI Tool Firewall

Cursor, Claude Code, Copilot read your project files — including .env. One command generates all four ignore files.

Encrypted Sync

AES-256-GCM client-side. Every push creates a versioned snapshot. Roll back in one command. Server stores only ciphertext.

Audit Log & Drift Monitor

Full audit trail of every push, pull, share, and rollback. Compare environments side-by-side to catch drift before it becomes downtime.

Encrypted Share Links

One-time, self-destructing links with per-link AES-256-GCM keys. Set expiry, read limit, and password. Replaces Slack DMs.

Coming Soon

Native VS Code extension for inline secret warnings

GitHub Action for automated secret scanning on every PR

Slack and Teams notifications for stale or over-shared secrets

SAML SSO and on-premise deployment for enterprise teams

Trusted by developers shipping real products.

0+developers
/
0+variables managed
/
OSSopen-source friendly

Every developer has been here.

The .env problem never goes away. Until now.

  • Secrets committed to git — and still there 8 months later
  • AI coding tools read your .env by default
  • No visibility into which secrets are stale or over-shared
  • Onboarding a new engineer means copying secrets over Slack

SlickEnv fixes all of this. One install. One command.

Up and running in under 60 seconds.

Scan, protect, then sync. In minutes.

01

Install

One command. Works on macOS, Linux, and Windows WSL.

$ npm install -g slickenv

added 1 package in 3s

02

Scan

Find exposed secrets across files, git history, and MCP configs.

$ slickenv scan

Score: 94/100 — 0 critical, 0 high

03

Protect

Block secrets from AI tools and future git commits.

$ slickenv ai protect && slickenv git protect

✓ AI ignore files created ✓ Pre-commit hook installed

04

Sync

Push encrypted, linted variables to the remote store.

$ slickenv push

✓ Pushed 14 variables — version 5 created

Start reading. Start shipping.

Everything you need to go from install to synced. No account required to read the docs.

Common questions

Things developers ask before switching to SlickEnv.

Install once. Never lose a secret again.

No servers to run. No YAML to write. Works with any language, any framework.