The Identity-Driven
Secret Manager.
Centralized governance for your team's daily passwords, environment variables, and infrastructure certificates - backed by Zero-Persistence architecture.
Time Machine (Versioning)
Every change is immutable. Rollback to any version of your configuration instantly. See who changed what and when.
Detailed Audit Logs
Track every access event. Whether it's a developer copying a key or a Kubernetes agent syncing a payload.
Shared Workspaces & Granular RBAC.
Create Shared Workspaces for baseline engineering collaboration - strictly isolated within your authenticated SSO boundary.
For critical infrastructure, enforce Granular RBAC. Assign strict Read, Write, or Admin roles to specific users and service identities.
Built for teams of every size
Developer/DevOps
Free Forever
Perfect for side projects and learning. Stop keeping secrets in your git history.
- Up to 3 Users
- 1 Workspace
- 100 Secrets
- Kubernetes Agent
Team
Growing Startups
Collaborate securely. Monitor changes and get notified instantly.
- 1,000 Secrets / workspace
- Audit Logs (30 days)
- Alerts integrations
- Workspace access control
- 3 Kubernetes Agents Included
Enterprise
Custom Scale
Bank-grade security and limitless scalability for the enterprise.
- Unlimited Secrets
- Unlimited Versions
- Unlimited Workspaces
- 10 Kubernetes Agents Included
- BYOK (GCP/AWS KMS)
How teams use Ennote
A true 1Password alternative for engineering teams.
Ennote supports 3 distinct types of secrets to organize your entire company's workflow:
- Passwords: Store team credentials for SaaS tools, AWS Root accounts, and database admins. (Available via PWA & Web).
- Secure Notes: Encrypted text files for SSL certificates, SSH keys, or disaster recovery codes.
- Environment Variables: Standard key-value pairs synced directly to your K8s clusters.
Share 2FA codes with the team.
Stop asking "Can you send me the SMS code?" in Slack.
Add the TOTP secret to Ennote, and generate 2FA codes directly in the dashboard. Permissions are handled via RBAC-only authorized members can generate codes.
Native Kubernetes Sync.
Don't deal with external secret stores or sidecars. Ennote utilizes an outbound gRPC stream to sync your environment variables directly to Kubernetes Native Secrets in <1s.
Your applications consume them natively. Zero code changes required.
Learn about K8s Agent
Share safely with contractors.
Need to share a credential outside your organization? Don't paste it in Teams.
Generate an end-to-end encrypted One-Time Link. Set it to expire after 1 view or 1 hour. Once opened, the data is cryptographically destroyed forever.
Install it anywhere.
Native performance.
Ennote is built as a Progressive Web App (PWA). This means you can install it as a native application on any operating system without complex installers.
Just click "Add to Home Screen"
Upgrade to the Identity-Driven Secret Manager.
Join thousands of teams who have replaced their fragmented password managers and legacy infrastructure vaults with a single, unified platform.