Tunnels
Gateways
Webhooks
Bastion
Password Manager
Teams
Secrets
All project settings in one secure place!
Configure applications and environments simply and securely.
Secure storage of settings for your applications — running locally, in CI/CD, or in your test and production environments. A great alternative to env files and environment variables in CI/CD systems.
Available on all plans
Secrets
- For Developers
- To simplify environment setup and reduce the number of "magic" values in code.
- For DevOps Engineers
- For centralization and automation of configurations.
- For Teams
- For secure and controlled shared access to confidential data.
What are secrets?
A service for secure storage of confidential (and not only) data, convenient management of application configurations in any environment: locally, CI/CD, test and production environments.
It's a great alternative to .env files combined with direnv or environment variables in GitLab CI/CD / GitHub Actions.
Reviews about Secrets
How do secrets work?
We follow a generally accepted structure, so secrets storage is divided by projects, inside projects there are environments, and inside environments — configurations, main or child.
Inside configurations, there are many functions for working directly with secrets and access to them — audit and more.
When working in a Team, the roles section allows you to granularly distribute participant access to the necessary environments in projects.
Access to secrets is done through the web interface of your personal account, using the tuna console client, or through the API.
All secrets are stored in our database in encrypted form, and the encryption key is not stored in the database itself, so in case of a database leak, your secrets will remain anonymous.
But still, Secrets are not Passwords, here we don't apply the zero knowledge approach, so they are more convenient. Secrets allow you to conveniently manage sensitive application settings, like integration tokens with external services, database connection URLs, and other settings.
TUNA — platform for developers
TUNA
platform for developers
TUNA — platform for developers
TUNA
platform for developersPricing
Get 2 months free with annual subscription
Hobby
- 1 HTTP tunnel
- 30 minutes of operation
- Dynamic subdomains
- 1 project
- 5 environments per project
- 5 configs per environment
- 1 webhook
Free
InstallDeveloper
- 5 tunnels simultaneously
- 10 subdomains in tuna.am zone
- 1 static port
- 1 own domain
- No time limit
- All tunnel types
- 10 projects
- 10 environments per project
- 10 configs per environment
- 3 monitors (watch)
- 10 webhooks
299 RUB /month
2990 RUB /year
BuyTeam
- 10 tunnels simultaneously
- 10 subdomains in tuna.am zone
- 10 own domain
- 5 static ports
- Own domain zones
- Traffic policies
- IP access policies
- 20 projects
- 20 environments per project
- 20 configs per environment
- 5 monitors (watch)
- 10 webhooks
- 200 nodes per team i
599 RUB /month
5990 RUB /year
Buy
What's included in the plan
- Traffic policies i
- IP access policies
- Own domain zones (wildcard)
- IP address hiding in dynamic subdomains
- 10 tunnels simultaneously
- 10 own domains
- 5 static ports
- No time limit
- HTTP tunnels
- TCP tunnels (RAW, SSHd, Postgres, Redis)
- SSHd tunnels (built-in SSH server)
- Trigger tunnels (Webhook or Email)
- 10 subdomains in tuna.am zone
- Multiple regions
- Dynamic subdomains
- End-to-end encryption
- Let's Encrypt SSL/TLS certificates
- HTTP / Postgres / Redis requests inspector
- Basic authentication
- Access restrictions by IP/Api-Key/User-Agent
- Rate limiting
- CORS automation
- Websocket and Server-Sent Events (SSE) support
- Built-in file server
- WebDAV server
- Service creation management (background operation)
+1 Additional license
199 /
1990 /
- +1 active tunnel
- +1 subdomain in tuna.am zone
- +1 own domain
- +1 static port
What's included in the plan
- TCP tunnels (RAW, SSHd, Postgres, Redis)
- SSHd tunnels (built-in SSH server)
- Trigger tunnels (Webhook or Email)
- No time limit
- 5 tunnels simultaneously
- 10 subdomains in tuna.am zone
- 1 static port
- 1 own domain
- HTTP tunnels
- HTTP / Postgres / Redis requests inspector
- Multiple regions
- Dynamic subdomains
- End-to-end encryption
- Let's Encrypt SSL/TLS certificates
- Basic authentication
- Access restrictions by IP/Api-Key/User-Agent
- Rate limiting
- CORS automation
- Websocket and Server-Sent Events (SSE) support
- Built-in file server
- WebDAV server
- Service creation management (background operation)
+1 Additional license
99 /
990 /
- +1 active tunnel
- +1 subdomain in tuna.am zone
- +1 own domain
- +1 static port
What's included in the plan
- Multiple regions
- 1 HTTP tunnel
- Dynamic subdomains
- 30 minutes of operation
- End-to-end encryption
- Let's Encrypt SSL/TLS certificates
- HTTP requests inspector
- Basic authentication
- Access restrictions by IP/Api-Key/User-Agent
- Rate limiting
- CORS automation
- Websocket and Server-Sent Events (SSE) support
- Built-in file server
- WebDAV server
- Service creation management (background operation)
What's included in the plan
- 1 project
- 5 environments per project
- 5 configs per environment
- Secrets generator
- Change history
- Secrets synchronization across environments
- Compare secret values across environments
- Hidden secrets
- IP address access
- Service keys for specific configuration access
What's included in the plan
- 10 projects
- 10 environments per project
- 10 configs per environment
- 3 monitors (watch)
- Automatic application restart on secret change (watch)
- Secrets generator
- Change history
- Secrets synchronization across environments
- Compare secret values across environments
- Hidden secrets
- IP address access
- Service keys for specific configuration access
What's included in the plan
- 20 projects
- 20 environments per project
- 20 configs per environment
- 5 monitors (watch)
- Automatic application restart on secret change (watch)
- Secrets generator
- Change history
- Secrets synchronization across environments
- Compare secret values across environments
- Hidden secrets
- IP address access
- Service keys for specific configuration access
What's included in the plan
- 1 webhook
- View HTTP requests
- View Email
What's included in the plan
- 10 webhooks
- View HTTP requests
- View Email
What's included in the plan
- 10 webhooks
- View HTTP requests
- View Email
What's included in the plan
- Password storage using zero-knowledge model
- Secrets type separation
- TOTP support
- External sharing capability
What's included in the plan
- Password storage using zero-knowledge model
- Secrets type separation
- TOTP support
- External sharing capability
What's included in the plan
- Shared catalogs
- Password storage using zero-knowledge model
- Secrets type separation
- TOTP support
- External sharing capability
What's included in the plan
- 200 nodes per team i
- Zero-Trust SSH access to servers
- Mandatory (RBAC) access model
- Authentication using temporary RSA keys and PKI certificates
- Audit and observability (coming soon)
- SSO integration (coming soon)
What's included in the plan
- Traffic policies i
- Number of gateways is limited by the limit on static domains and subdomains in the tuna.am zone
What's included in the plan
- Role-based access control (RBAC)
- Event audit
- Invoice payment (RU)
How to start?
Start with installing and initial setup of the client - it will take no more than a minute
Frequently asked questions about Secrets
Currently, Secrets are available on all plans.
No, the number of Secrets can be unlimited.
Ways to work with Secrets with examples are described in detail in the corresponding section of our documentation.
Still have questions? Email us at info@tuna.am or ask a question in our Telegram community.
Unified platform for:
- accelerating development
- simplifying team collaboration
- improving security
- cost optimization
Tuna Desktop
A new way to manage tunnels without the console. Install on Windows, MacOS or Linux and get started in seconds.
Install