Your API keys are in someone's chat history.

One safe place for the keys and settings your apps need. Change it once. It lands everywhere your code runs. Your team, your CI and your servers read from it; nobody pastes a key into a chat again.

Your app reads its settings exactly the way it used to. Your app keeps reading environment variables the way it does today. Penv puts the right values in front of it when it starts.

The server holds the envelope and can decrypt your values to serve your machines. That is what makes `penv pull` work. Each value is encrypted under its own key, and every reveal is written down with who, what, and when.

Up to three people free. Machines don't take a seat. Billed per human seat. Not per identity. Every plan is encrypted the same way; plans differ in how much you keep and for how long.