Start free. Scale when ready.

Is the free tier really free?

Yes. No credit card, no time limit. You get 10 secrets, 1 agent, and 1,000 API calls per month with full encryption and scoped tokens. Use it as long as you need.

What happens when I hit the free tier limits?

You’ll see a clear notification in your dashboard. API calls beyond your limit return a 429 status. Upgrade to Pro anytime to unlock higher limits instantly — no data migration needed.

How does the encryption work?

We use envelope encryption: each secret is encrypted with a unique Data Encryption Key (AES-256-GCM). That DEK is itself encrypted by a per-tenant Key Encryption Key (KEK) managed by Google Cloud KMS. The KEK never leaves Google’s infrastructure.

Can I upgrade or downgrade at any time?

Yes. Upgrade to Pro from your dashboard and billing starts immediately. Downgrade back to Free anytime — your data is preserved, but limits apply once the billing period ends.

Is there a self-hosted option?

No. Agent Secret Store is hosted-only by design — managing your own KMS key hierarchy and audit pipeline defeats the purpose of a managed secret store. We handle the security infrastructure so you can focus on building agents.

What does Enterprise include beyond Pro?

Unlimited everything, SSO/SAML, custom approval workflows, 1-year+ audit retention, dedicated account management with SLAs, and priority support. Contact us to discuss your requirements.