SECRETS MANAGEMENT

Your secrets,
actually locked away.

Encrypted storage, access-key authentication, IP allowlisting, and a full audit trail — store or retrieve a secret with a single HTTP call.

get-secret.sh
$ curl https://airlock.fastapicloud.dev/api/get-secret/ \
    -H "access-key: $ACCESS_KEY" \
    -H "secret-name: DATABASE_PASSWORD"

{"success": "••••••••••••••••••"}
  • AES-128Fernet encryption at rest
  • O(1)access key lookup
  • Per-keyIP allowlisting
  • Every callaudit-logged

BUILT FOR REAL INFRASTRUCTURE

Secured by default, not by afterthought.

Encrypted at rest

Fernet (AES-128-CBC with HMAC authentication) protects every stored value.

Bring your own key

Use a custom Fernet key per secret for additional isolation, if you need it.

IP-restricted access

Lock an access key to specific IPs, or leave it open — your call, per key.

Rate limited by default

Per-IP limits on reads and writes, managed by Network14.cloud, stop brute-force attempts cold.

Stop pasting secrets into Slack.

Every service gets its own scoped, revocable access key. Encrypted secrets, one call away.