Cloak
Encrypts .env secrets and replaces them with fake values on disk, while allowing real values to be injected into child processes via CLI.
Cloak is a security tool that encrypts secrets in .env files, replacing them with sandbox values on disk while allowing developers to see real credentials in their editor. It solves the problem of AI coding agents reading sensitive API keys, database passwords, and tokens from local files. The product targets developers and IT teams using AI-assisted coding tools like VS Code, Cursor, and Copilot, across companies of all sizes. It is positioned as an open-source, zero-cloud solution that works locally, with no servers or network calls, and offers a free tier.
Key features
- AES-256-GCM encrypted vault
- Sandbox replacement values on disk
- Editor extension for VS Code, Cursor, Windsurf
- CLI for terminal and process injection
- Recovery key with PBKDF2-SHA256
- Pattern matching and entropy analysis
- Zero cloud, no servers or accounts
- Open source and free forever
Social posts
- No social media activity within the last 30 days
GTM channels
- Marketplace
ICP
- Software developers
- Engineering teams
- DevOps sre teams