Pricing

Simple pricing for effortless security.

We've updated our pricing — Service Accounts are now free
Free
$0
All core platform features
Up to 5 Users or Service Accounts
Up to 3 Apps
3 Environments - dev, staging, prod
Google/GitHub/GitLab OAuth SSO
Pro
$10/ month / user
$144 $120 billed annually
Everything in Free
Unlimited Users & Service Accounts
Unlimited Apps
10 Custom Environments
Custom Roles (RBAC)
Network Access Policies
Point-in-time Recovery
90-day Audit Logs
Enterprise
$25/ month / user
$360 $300 billed annually
Everything in Pro
Unlimited Custom Environments
OIDC, SAML & SCIM SSO
Dynamic Secrets
Automated Secret Rotation
Global Network Access Policies
Audit Log Forwarding
SIEM Integration
SOC 2 Type 2 Audit Report
External Penetration Testing Reports

trusted by

Phantom
Zeiss
Alchemy
GSA
AoPS
StoryLLP
Magneto
NaroIQ
Sellhub
Compare plans
Users
Organization members
5
Apps
Number of applications
3
Environments
Development, CI, QA, Staging, Production, etc.
3
Automatic Secret Versioning
Track changes to secrets over time by various users in Git-style diffs
One-click Secret Recovery
Restore previous secret versions instantly
One-click Secret Access
Securely generate a temporary token + bash one-liner command to quickly access secrets on any machine
Secret Referencing
Create secrets that point to the value of other secrets across different paths, environments and apps
Lockbox Secret Sharing
Securely share secrets with those outside your organization via a link
Personal Secrets & Overrides
Override the value of a secret that is unique to you, without affecting others on your team
Secret Generation
Securely generate secret values
Secret Folders
Organize secrets into folders and paths
Secret Tags
Organize and filter secrets using custom tags
Phase Shell
Securely create a virtual shell environment with secrets exposed as environment variables
REST API
Programmatically create, read, update, delete secrets using any HTTP client
Docker & Docker Compose Integration
Inject secrets into Docker containers
Secret Sync Integrations
Automate secret deployment to GitHub Actions, AWS Secrets Manager, Cloudflare, Vercel, Railway etc.
Kubernetes Operator
Securely sync secrets to Kubernetes cluster. Automate pod redeployments after secret or configmap changes
Terraform Provider
Securely access secrets in your IaC. Manage resources in Phase via Terraform
SDKs
Securely manage secrets from your application. Support for Python, Node, Golang, more coming soon
Webhooks
Notify external systems on changes to secrets. Integrate with Slack, Discord, PagerDuty, etc.
SIEM Integration
Send secret audit logs to your SIEM. Integrate with Splunk, Elastic, Datadog, etc.
External Identity Provider
Programmatically authenticate Users and Service Accounts via external third party identity providers
Access Control (RBAC)
Define roles, policies and enforce permissions
Basic
OAuth 2.0 SSO
OAuth 2.0 Single-sign-on authentication identity provider
OpenID Connect (OIDC) SSO
OpenID Connect (OIDC) Single-sign-on authentication identity provider
SAML SSO
SAML 2.0 Single-sign-on authentication identity provider
SCIM Provisioning
System for Cross-domain Identity Management (SCIM) automated user provisioning and deprovisioning
Network Access Policies
Manage access control to resources by filtering access based on client IPv4/v6 ranges and CIDR blocks
Global Network Policies
Enforce network access policies across all resources in your organization
Point-in-time Recovery
Restore an environment state to a given point in time
Secret Rotation
Automatically rotate database credentials, API keys etc.
Dynamic Secrets
Generate short-lived on-demand unique secrets for each retrieval with automated lease management
Audit Log Retention
How long audit logs are kept
24 hours
Audit Log Forwarding
Ship secret audit logs to an external data store or a log management platform
SOC 2 Type 2 Audit Report
Latest report & findings from independent third-party SOC 2 Type 2 audit
External Penetration Testing Reports
Latest report & findings from independent third-party external penetration testing
Rate Limits
API request per minute limits across an organization
120/minute
Uptime SLA
Service availability and uptime guarantees
Community Support
Over GitHub Discussions & #phase-help Slack channel
Email Support
Priority support via email
Slack Support
Dedicated private Slack channel
Dedicated Live Support & SLAs
Prioritized support & response times
Standalone Dedicated Instance
Single tenant instance on infrastructure of your choice, managed by us
Request a feature

We build features based on community requests and feedback.
Looking for a specific feature or have a use-case in mind? Reach out to us!

Frequently asked questions

CLOUD

The fastest and easiest way to get started with Phase. Spin up an app in seconds. Hosted in the 🇪🇺

SELF-HOSTED

Run Phase on your own infrastructure and maintain full control. Perfect for customers with strict compliance requirements.