Pricing

Simple pricing foreffortless security.

TL;DR — only pay for human users, with a flat pricing option for unlimited users.

Plans
2 months free
Free
$0

Try Phase without any commitments. Great for personal and hobby projects.

  • All core platform features
  • Up to 5 Users or Service Accounts
  • Up to 3 Apps
  • 3 Environments - dev, staging, prod
  • Google/GitHub/GitLab OAuth SSO
  • AI Agent Skill (skill.md)
Pro
$10/ month / user
$144 $120 billed annually
14 days free

For teams and AI agents to deploy and secure secrets across all environments.

  • Everything in Free
  • Unlimited Users & Service Accounts
  • Unlimited Apps
  • 10 Custom Environments
  • Teams
  • Custom Roles (RBAC)
  • Network Access Policies
  • Point-in-time Recovery
  • Automated Secret Rotation
  • 90-day Audit Logs
Enterprise
$25/ month / user
$360 $300 billed annually
14 days free

For organizations in need of advanced access control and visibility of secrets across teams.

  • Everything in Pro
  • Unlimited Custom Environments
  • OIDC SSO
  • SCIM Provisioning
  • Dynamic Secrets
  • Global Network Access Policies
  • Audit Log Forwarding
  • SIEM Integration
  • SOC 2 Type 2 Audit Report
  • External Penetration Testing Reports
Compare
Features
Limits
Users
Organization members
Unlimited
Apps
Number of applications
Unlimited
App Readme
Private documentation for critical application and project related instructions
Included
Environments
Development, CI, QA, Staging, Production, etc.
Unlimited
Core features
Automatic Secret Versioning
Track changes to secrets over time by various users in Git-style diffs
Included
One-click Secret Recovery
Restore previous secret versions instantly
Included
One-click Secret Access
Securely generate a temporary token + bash one-liner command to quickly access secrets on any machine
Included
Secret Referencing
Create secrets that point to the value of other secrets across different paths, environments and apps
Included
Global Secret Search
Securely search secrets across all Apps, Environments, and Folders in your organization from the command palette
Included
Lockbox Secret Sharing
Securely share secrets with those outside your organization via a link
Included
Personal Secrets & Overrides
Override the value of a secret that is unique to you, without affecting others on your team
Included
Secret Generation
Securely generate secret values
Included
Secret Folders
Organize secrets into folders and paths
Included
Secret Tags
Organize and filter secrets using custom tags
Included
Phase Shell
Securely create a virtual shell environment with secrets exposed as environment variables
Included
CLI Monorepo Support
Maintain project context across nested directories in a monorepo with a single root config
Included
CLI & SDK Offline Mode
Access an encrypted local cache fallback for secrets & configs via the CLI and SDKs when the network is unavailable
Included
REST API
Programmatically create, read, update, delete secrets using any HTTP client
Included
Integrations
Docker & Docker Compose Integration
Inject secrets into Docker containers
Included
Secret Sync Integrations
Automate secret deployment to GitHub Actions, AWS Secrets Manager, Cloudflare, Vercel, Railway etc.
Included
Kubernetes Operator
Securely sync secrets to Kubernetes cluster. Automate pod redeployments after secret or configmap changes
Included
Terraform Provider
Securely access secrets in your IaC. Manage resources in Phase via Terraform
Included
SDKs
Securely manage secrets from your application. Support for Python, Node, Golang, more coming soon
Included
AI Agent Skill
Native skill-based integration for — Claude Code, Cursor, VS Code Copilot, Codex, OpenCode etc.
Included
Webhooks
Notify external systems on changes to secrets. Integrate with Slack, Discord, PagerDuty, etc.
Included
SIEM Integration
Send secret audit logs to your SIEM. Integrate with Splunk, Elastic, Datadog, etc.
Included
Security & access control
External Identity Provider
Programmatically authenticate Users and Service Accounts via external third party identity providers
Included
Teams
Group members into teams for cleaner permission management and scoped access
Included
Access Control (RBAC)
Define roles, policies and enforce permissions
Custom Roles
OAuth 2.0 SSO
OAuth 2.0 Single-sign-on authentication identity provider
Included
OpenID Connect (OIDC) SSO
OpenID Connect (OIDC) Single-sign-on authentication identity provider
Included
SCIM Provisioning
System for Cross-domain Identity Management (SCIM) automated user provisioning and deprovisioning
Included
Network Access Policies
Manage access control to resources by filtering access based on client IPv4/v6 ranges and CIDR blocks
Included
Global Network Policies
Enforce network access policies across all resources in your organization
Included
Operations & reliability
Point-in-time Recovery
Restore an environment state to a given point in time
Included
Secret Rotation
Automatically rotate database credentials, API keys etc.
Included
Dynamic Secrets
Generate short-lived on-demand unique secrets for each retrieval with automated lease management
Included
Audit Log Retention
How long audit logs are kept
Custom
Audit Log Forwarding
Ship secret audit logs to an external data store or a log management platform
Included
Rate Limits
API request per minute limits across an organization
Custom
Uptime SLA
Service availability and uptime guarantees
99.99%
Compliance
SOC 2 Type 2 Audit Report
Latest report & findings from independent third-party SOC 2 Type 2 audit
Included
External Penetration Testing Reports
Latest report & findings from independent third-party external penetration testing
Included
Support
Community Support
Over GitHub Discussions & #phase-help Slack channel
Included
Email Support
Priority support via email
Included
Slack Support
Dedicated private Slack channel
Included
Dedicated Live Support & SLAs
Prioritized support & response times
Optional Addon
Standalone Dedicated Instance
Single tenant instance on infrastructure of your choice, managed by us
Optional Addon
Trusted by thousands of teams
Phantom
Zeiss
Alchemy
GSA
AoPS
StoryLLP
Magneto
NaroIQ
Sellhub
theFactor.e
Roadmap
Request a feature

We build features based on community requests and feedback. Looking for a specific feature or have a use-case in mind? Reach out to us.

Feature request
FAQ

Frequently asked questions

Deployment
Get started

Keep your secrets

Self-host or start on fully managed Cloud in under a minute.

Self-hosted

Run Phase on your own infrastructure. Free and open source.

AI agent deployment skill
$ npx skills add phasehq/ai
Cloud

Fully managed. From signup to your first secret in 60 seconds.

Sign up with