GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing phase.dev — Phase | Open-source secrets manager for teams and AI agents ++ Secrets management for teams and AI agentsOpen source platform to securely access, manage and deploy application secrets, from development to production. Console HomeAccessSyncingLogsSettings Filter key value 1 HOST console.phase.dev 2 HTTP_PROTOCOL https:// 3 DEBUG false 4 SERVER_SECRET Sealed 5 DATABASE_URL •••••••••••••••••••••••••••• 6 REDIS_CONNECTION_STRING •••••••••••••••••••••••••••• 7 GOOGLE_CLIENT_ID 304857291046-p9r2vw5km63t08q.apps.googleusercontent.com 8 GOOGLE_CLIENT_SECRET •••••••••••••••••••••••••••• 9 SSO_PROVIDERS google,github,gitlab,okta-oidc,entra-id-oidc 10 STRIPE_SECRET_KEY •••••••••••••••••••••••••••• 11 NEXT_PUBLIC_BACKEND_API_BASE ${HTTP_PROTOCOL}${HOST}/service Product playground ++ Trusted by thousands of teams           ++ 01 — Agents 01 Agency without exposureAgents use freshly minted dynamic secrets with their own identity. If they run into any access issues, they automatically ping a team member and ask for higher privileges only when needed. Complete visibility throughout: destructive actions like SQL DROP get blocked and audit-logged. 01.1 — Agents get their own identity ❯ claude Claude Code Fable 5 · Claude Max ~/git/starlink/satcommand ❯ why is the logs table so slow? ↳ phase-cli skill detected · leased aws + postgres read-only creds · ttl 15m · aws cloudwatch get-metric-statistics \ --metric-name ReadLatency --namespace AWS/RDS ReadLatency p99 812ms CPUUtilization avg 34% · psql -c "SELECT count(*) FROM logs" count ---------- 41883306 (1 row) · 41.8M rows, seq scan on created_at — no index ↳ suggest: BRIN index on created_at · partition monthly ❯ rotate my stripe secret keys ↳ phase-cli skill detected · phase secrets rotate STRIPE_SECRET_KEY --env=prod ✗ access denied — rotation on prod needs elevated scope · read docs.stripe.com/keys/rotate.md · phase access request --scope=stripe --ttl=1h ⧗ pending approval from Rohan · 1h elevated lease ❯ scale the ecs cluster for tonight's launch ↳ phase-cli skill detected · aws ecs update-service --service api --desired-count 12 · leased aws sts session · ttl 60m service/api desiredCount 4 → 12 rollout IN_PROGRESS → STEADY_STATE ↳ scaled · 12/12 healthy · sts creds expired >_ OpenAI Codex (v0.52.0) model: gpt-5.6-codex high /model to change directory: ~/git/starlink/satcommand › why is the logs table so slow? Reading the phase-cli skill — checking CloudWatch before the DB • Ran aws cloudwatch get-metric-statistics --metric-name ReadLatency │ leased aws + postgres read-only creds · ttl 15m │ ReadLatency p99 812ms │ CPUUtilization avg 34% • Ran psql -c "SELECT count(*) FROM logs" │ count │ ---------- │ 41883306 │ (1 row) • Reads are slow, CPU is fine — 41.8M rows, seq scan on created_at. Suggest a BRIN index and monthly partitions. › rotate my stripe secret keys Rotating live payment keys — checking scope first • Ran phase secrets rotate STRIPE_SECRET_KEY --env=prod │ ✗ access denied — needs elevated scope • Read docs.stripe.com/keys/rotate.md • Ran phase access request --scope=stripe --ttl=1h │ ⧗ pending approval from Rohan · 1h elevated lease › scale the ecs cluster for tonight's launch Scaling the api service — STS session leases on demand • Ran aws ecs update-service --service api --desired-count 12 │ leased aws sts session · ttl 60m │ service/api desiredCount 4 → 12 │ rollout IN_PROGRESS → STEADY_STATE • Scaled to 12/12 healthy — STS creds expired after the run. Working (2s • esc to interrupt) › Ask Codex to do anything ? for shortcuts62% context left why is the logs table so slow? ⌄ Thought for 2s Read SKILL.md ~/.cursor/skills/phase-cli $ aws cloudwatch get-metric-statistics --metric-name ReadLatency SkipRun ⌘⏎ ✓ Ranleased aws + postgres read-only creds · ttl 15m ReadLatency p99 812ms CPUUtilization avg 34% $ psql -c "SELECT count(*) FROM logs" ✓ Rancount ---------- 41883306 (1 row) Reads are slow, CPU is fine — 41.8M rows with a seq scan on created_at. Suggest a BRIN index and monthly partitions. rotate my stripe secret keys ⌄ Thought for 1s $ phase secrets rotate STRIPE_SECRET_KEY --env=prod ✓ Ran✗ access denied — needs elevated scope Read rotate.md docs.stripe.com/keys $ phase access request --scope=stripe --ttl=1h ✓ Ran⧗ pending approval from Rohan · 1h elevated lease scale the ecs cluster for tonight's launch ⌄ Thought for 1s $ aws ecs update-service --service api --desired-count 12 ✓ Ranleased aws sts session · ttl 60m service/api desiredCount 4 → 12 rollout IN_PROGRESS → STEADY_STATE Scaled api to 12/12 healthy — the STS session expired after the run. Plan, search, build anything ∞ Agent · composer-3⏎ AI egress proxy Guardrails at the network edgeAgents use decoy secrets managed by Phase when making outbound requests to third-party services. The Phase AI proxy inspects each request and checks it against your policy — then injects the real secret mid-flight. ++ 02 — Deploy 02 Sync without sprawlCentralize, integrate and automate secret deployment pipelines across your infrastructure. ++ 03 — Govern 03 ACCESS & AUDIT Control without frictionManage authentication, role-based access control (RBAC) and network access policies from one place. 03.1 — Teams Group members and service accounts into Teams, then grant a Team access to apps scoped to specific environments. Environment keys are provisioned automatically when someone joins and revoked when they leave — with team-owned service accounts and optional role overrides. 03.2 — Role-based access control Managed and custom roles with a granular permission matrix, per-environment and per-path scoping, service accounts for machines. DevOps Engineer app permissionscustom role ResourceAccessreadcreateupdatedelete SecretsFull access EnvironmentsCustom access IntegrationsRead access MembersNo access Service accountsCustom access LogsRead access 03.3 — Network access policies Restrict access to your secrets by IP address or CIDR range with network access policies for users and service accounts. 203.0.113.0/24aws vpc · us-east-1198.51.100.42azure bastion100.64.0.0/10office tailnet2001:db8:85a3::/48colo egress · ipv6 03.4 — Audit logs & versioning Every CRUD operation logged with actor, source, and diff. Point-in-time rollback for any secret. AWS_ACCESS_KEY_ID history View the chronological history of changes made to this secret.
++ SecurityS.01 – S.03 Trust, but verifyEvery control here is cryptographically enforced, independently audited, or open to inspection. S.01 Strong encryptionEnd-to-end encryption for all secrets. High-entropy keys for every environment, user, agent and machine. Access is controlled by encryption keys that only you hold. XCHACHA20-POLY1305 · X25519 · ARGON2ID S.02 SOC 2 Type 2Independently audited under SOC 2 Type 2, with controls examined continuously. Penetration tested regularly by Oneleet, an independent security firm. Reports are available in our trust center. SOC 2 TYPE 2 · EXTERNALLY PENTESTED S.03 No telemetryEvery line of code that secures your secrets is public and auditable. Run on Phase Cloud or your own infrastructure: Docker, Kubernetes, any cloud, or fully air-gapped. No outbound usage analytics or telemetry. AIR-GAPPABLE · PRIVATE · SELF-MANAGED E2EE by default · SOC 2 Type 2 · Pentested · Open sourceExplore the security model ++ PlatformBatteries included Batteries included.Global search, offline mode, dynamic secrets, machine identity. The parts of a secrets manager you would otherwise build yourself. Global secret searchFind any secret across every app, environment and folder in your organization. Search runs client-side: values are never decrypted. stripe⌘K STRIPE_SECRET_KEYsatcommand · Production STRIPE_WEBHOOK_SECRETbilling · Staging STRIPE_PUBLISHABLE_KEYstorefront · Development Work offlineThe CLI caches secrets locally, encrypted at rest. Set no network $ PHASE_OFFLINE=1 phase run -- ./server [phase] Offline mode: decrypting from local cache 🚀 Injected 14 secrets from the Production environment. Rotating secretsPhase mints, exposes, and revokes third-party credentials on a schedule — your app picks up fresh values with no code changes. OpenAIrotation healthy OPENAI_API_KEYsk-proj-a7Xf9K2p•••• active — minted just nowprevious revokes in 6h next rotation in 22h Secret referencingCompose configuration from other secrets, across environments, folders and apps. References resolve at inject time. DATABASE_URL postgresql://${db.PG_USER}:${db.PG_ db.PG_PASSWORD↩ db.PG_HOST db.PG_PORT Authentication for humans and machinesExternal identities for workloads: no bootstrap credential to provision, rotate, or leak. SSO with SCIM provisioning for people. Machines — external identities Workloads authenticate with their platform identity: an AWS SigV4-signed request or an Azure managed-identity JWT. Phase verifies the identity upstream with AWS STS or Microsoft Entra, matches it against your trusted principals, and returns a short-lived scoped token straight to the workload. AWS principalarn:aws:iam::123456789012:role/prod-api Azure principal6a3f9c21-8d4e-4b7a-9f10-2c5e8b7d4a90 Humans — SSO Single sign-on through your identity provider. Users are provisioned and deprovisioned over SCIM v2: Entra ID, Okta, JumpCloud, or any compatible directory. Dynamic secretsLease short-lived AWS IAM credentials on demand. Renew within the max TTL, or revoke instantly.  AWS IAMlease activeAWS_ACCESS_KEY_IDAKIA2F7X9K3MQP1Z•••• AWS_SECRET_ACCESS_KEY•••••••••••• leases AKIA8D2VN5RQ0WJ4revoked AKIA3M9QF4XK7PZ2expired 2h ago AKIA6H8XW1PT4KDZexpired 1h ago AKIAY6R2W8H0LDC5expires in 3m AKIA4Q0BM7SJ2VNCexpires in 22m AKIA2F7X9K3MQP1Zexpires in 54m max ttl 1h Audit logsEvery management action captured org-wide — actor, timestamp, and before/after diffs — built for compliance and incident response. 33 events FilterRefresh ActorEventResourceDescriptionTime Actorclaude ResourceMEMBER Resource ID31286f55-c2bd-48db-8945-30a3856cd0cd IP Address172.18.0.1 User Agentcurl/8.11.1 Event IDd52d4e3f-644f-408d-ba6f-f45a70c032d7 Timestamp2026-03-18T11:15:38.991Z Changes role:changed from Sealed secretsWrite-only secrets: once saved, the plaintext is never visible or editable in the UI again — ideal for signing keys and tokens. ROOT_SIGNING_KEY[redacted] write-once · plaintext redacted server-side after save Kubernetes OperatorDeclare a PhaseSecret and the operator keeps native Kubernetes secrets in sync, auto-redeploying your workloads on change.  phase-secret.yamlkind: PhaseSecret spec: phaseApp: 'satcommand' phaseAppEnv: 'production' managedSecretReferences: - secretName: 'api-secrets' ++ Stories Trusted by buildersEngineers across a wide range of industries use Phase to build world-class software and secure critical infrastructure. #phase — field reports  ShivamLead Product Engineer @ Chatwoot#01 I tried out Phase a while back and was pretty impressed. The DX is amazing, especially the CLI. Managing secrets has been such a pain, I am definitely gonna use Phase for projects I work on going forward. … Super easy for me to recommend it to my peers.  AshSecurity Services Team Lead @ Arctic Wolf#02 Phase has one of the most well thought out security architectures I've seen. The encryption implementation is one I show my students as a benchmark for robust cryptography in a real-world application.  MaryCo-founder @ Voxify#03 Phase looks like a solid tool for managing secrets in a secure and efficient way. I've used similar tools, but the ease of integration with other services like GitHub and AWS really sets this apart.  NicolaSenior Frontend Developer @Tiledesk#04 Phase is a valuable resource for any engineering team looking to improve their security practices and deployment processes. Highly recommended for those looking for robust solutions!  ChristoferMailfox#05 This is a great tool. When you work with a distributed team it is always a real pain to share secrets and credentials. I also love the fact that you offer a self-hosted version. Especially in Europe a lot of companies insist on hosting on premise 😅  MaxSystems Engineer @ Defined Once#06 Great work with Phase, such a delightful piece of software.  EliasSystems Engineer @ LJZ Digital Solutions#07 Great work with Phase, it's a blast to use.  YukiMorph#08 Awesome one. This is what I've been looking for!  NumanWeb Developer#09 We have started using phase to inject secrets into our deployment app… Awesome product btw Shivam Lead Product Engineer @ Chatwoot I tried out Phase a while back and was pretty impressed. The DX is amazing, especially the CLI. Managing secrets has been such a pain, I am definitely gonna use Phase for projects I work on going forward. … Super easy for me to recommend it to my peers. Ash Security Services Team Lead @ Arctic Wolf Phase has one of the most well thought out security architectures I've seen. The encryption implementation is one I show my students as a benchmark for robust cryptography in a real-world application. Mary Co-founder @ Voxify Phase looks like a solid tool for managing secrets in a secure and efficient way. I've used similar tools, but the ease of integration with other services like GitHub and AWS really sets this apart. Nicola Senior Frontend Developer @Tiledesk Phase is a valuable resource for any engineering team looking to improve their security practices and deployment processes. Highly recommended for those looking for robust solutions! Christofer Mailfox This is a great tool. When you work with a distributed team it is always a real pain to share secrets and credentials. I also love the fact that you offer a self-hosted version. Especially in Europe a lot of companies insist on hosting on premise 😅 Max Systems Engineer @ Defined Once Great work with Phase, such a delightful piece of software. Elias Systems Engineer @ LJZ Digital Solutions Great work with Phase, it's a blast to use. Yuki Morph Awesome one. This is what I've been looking for! Numan Web Developer We have started using phase to inject secrets into our deployment app… Awesome product btw ++ ChangelogLatest updates ++ DeploymentSelf-hosted / Cloud Get started Keep your secretsSelf-host or start on fully managed Cloud in under a minute. Self-hosted Run Phase on your own infrastructure. Free and open source. AI agent deployment skill $ npx skills add phasehq/ai ++ |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |
