Nicheloom visits: 58,069 all-time · 7,637 in the last 7 days

The opportunity tracker for new startups.

Today: 1,953 launches · Niche of the day: specialized calculation tools · See what launched today →

SecretEnv

Run any process with secrets from all your backends

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Want to reach these readers? Sponsor an issue.

Hi Guys,I built SecretEnv to help solve one common thing that I have seen at every org, that I have worked at.We always had more than one password/credential manager. Service tokens maybe in Vault, AWS SSM etc and some team specific service account or temp account credentials being store in another password store such as 1Password or Keeper, there was never one single credential store.This is where SecretEnv comes in play, it runs any command with secrets injected as env vars, sourced from whatever combination of backend your team already uses.I am sure there are other tools as well that do a similar thing, which is run a command and inject secret. However SecretEnv does one thing differently.The key idea is separating two items which are most of the time combined. Think of SecretEnv's resolution structure like an Address Book.- Your repo gets a secretenv.toml file which has labels in there as values against ENV Vars. These can be literally anything. DB_URL, STRIPE_KEY whatever.- You have a registry that lives in your backend that you/your company uses. This registry holds the actual paths so the credentials.- You have a config file on your machine called config.toml that secretenv uses to grab the aliases from secretenv.toml and resolve against registry that lives in your backend.So imagine if you are a Platform Engineer and need to migrate password stores to different backend.You can now migrate secrets from AWS to Vault or change the naming conventions in one central place (registry) without devs having to touch their code or update config file.What this means is if the credential is used by 10, 15 or even 20 repos. All you need to do is update the alias in the registry and all repos pick up the changes.No need to open PR's, involve dev teams.The whole idea was abstracting and decoupling the dependency.The tool currently supports 14 backends already which covers most of the ground.Would love your feedback and if there is any backends or workflow that this does not cover.https://github.com/TechAlchemistX/secretenv

HN · launched May 5, 2026 · 5 upvotes (top 89%) · 0 views

Niche: credential management and security tools · 78 launches, 14 in the last 7 days ▲ +56% · Explore this niche →

Category and tags

  • Horizontal
  • Dev tools
  • Developer
  • Not AI
  • Commercial product

Visit website ↗ Source listing ↗

Could you build this?

Yes It is a CLI wrapper utility that fetches key-value secrets from external services (Vault, AWS SSM) via their SDKs and spawns a child process with those environment variables injected.

Discussion

8 comments analyzed.

Competitors mentioned: varlock, fnox, mise

Concerns raised: Encryption/decryption dependency creates coordination burden for password rollouts across multiple repos, Scaling password store migrations requires updating multiple repositories instead of single source, User offboarding complexity when secrets are stored in repos vs centralized IAM

Feature requests: Compose with varlock for validation on top of backend fetching, KMS integration support documentation

Competitors

Other products that read as similar to this one : 301 launches clear the similarity bar, closest 8 shown.

Attention rank: #277 of 302 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 187 days after the earliest competitor.

  • KeyEnv · hn · 2026-01-18 · 5 upvotes · similarity 0.66
  • KeyEnv · ph · 2026-10-12 · 1 upvotes · similarity 0.58
  • SnapEnv · ph · 2026-09-14 · 3 upvotes · similarity 0.53
  • Liberty · hn · 2026-01-14 · 7 upvotes · similarity 0.52
  • Lockenv · hn · 2025-12-08 · 105 upvotes · similarity 0.52
  • I just fixed .env once and for all · hn · 2025-11-23 · 8 upvotes · similarity 0.51
  • better-env · hn · 2025-11-23 · 6 upvotes · similarity 0.48
  • Agent Vault · hn · 2026-04-22 · 156 upvotes · similarity 0.47

The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.