Optional commercial tooling for .env files – Dotenvx Ops.
Everything around .env files, we're solving it.
Sync. Keep .env files in sync across teammates, servers, and CI/CD — secure, automatic, and merge-free.
DB. Centralize every secret with full version history and visibility across repos and environments.
Team. Manage roles and access in one place — preventing production access and/or access to private keys.
Radar. Runtime observability for secrets. Detect drift, misconfigurations, and unused variables early.
Automation. Program your secrets. Automate rotation and syncs with Vercel, Heroku, AWS, and more.
Compliance. Log every change and generate audit-ready reports for SOC 2, ISO, and internal reviews.
Changelog
2025-10-24
Surface associated private key(s) in .env* view.
2025-10-23
Add ability to delete any key from Ops DB.
2025-10-19
Set access controls per project per team member.
2025-10-14
DB is populated with all synced and observed keys now.
DB smartly links up different keypairs to te project > file > version they belonged to.
Foundational features – Sync, Observe, and Audit – are completed. Price will increase soon.
2025-10-07
Teams can sync project .env* files.
Team can force sync with `dotenvx-ops sync --force` when conflicts occur.
2025-09-29
Users can request an invitation to an existing organization.
Change a user's role.
2025-09-26
List any invitations under user settings.
2025-09-25
Invite members to your team.
Remove members from your team.
2025-09-22
Added ability to create organizational accounts.
Early access for org accounts is $490/year.
2025-09-18
Rename Dotenvx Radar to Dotenvx Ops.
Radar becomes a feature of Dotenvx Ops.
2025-09-17
Introduce organizational accounts.
2025-08-25
Smart reuse of existing tokens by device.
Added ability to delete token.
Create env files when syncing.
2025-08-23
Added organizations – to make way for teams.
Moved projects to organizational ownership schema.
Added ability to delete account.
Added list of personal oauth tokens to settings page.
Mark device during cli login handshake.
Connected devices to users in schema.
Connected devices to oauth requests in schema.
2025-08-18
Added `dotenvx-ops sync` command.
2025-08-16
Laid foundations for sync system.
2025-08-14
Simplified observations system.
2025-08-13
Added basic search to observations, keys, and projects.
2025-08-12
Changed UI to three sections - Radar, DB, and Sync.
2025-08-01
Added administration system.
2025-07-27
Added Pay page.
Wired Stripe webhook and callbacks up to Pay page and supporting endpoints.
2025-07-23
Added backups section and download.
2025-07-22
Improved UI display of key/values.
Added logic to handle observations from different git branches.
2025-07-21
Moved observations system to a schedule.
Added billing section to settings page.
Added system for locking out unpaid users.
2025-07-19
Added `dotenvx-ops status` command.
2025-07-16
Added observations system for idempotentently generating .env files, key/values, and projects from observation data.
2025-07-15
Added `dotenvx-ops status` command.
Added `dotenvx-ops settings` command.
Added observation of git and systeminfo to `dotenvx-ops observe` command.
2025-07-14
Added `dotenvx-ops logout` command.
Added bearer token support to `dotenvx-ops observe` command.
Added `dotenvx-ops login` command.
Added oauth token system to API and UI.
Added API logout system.
Added observations UI.
2025-07-11
Added API observe system.
2025-07-09
Added `dotenvx-ops observe` command.
Added `observe()` function.
2025-07-09
Added `dotenvx-ops observe` command.
Added `observe()` function.
2025-07-08
Added authentication system to API and UI.
Added error monitoring to API and UI.
Stood up production hosting infra.
Added BI tool.
Added background queuing system.
2025-07-01
Added `install.sh` script.
Added hosting for `install.sh` script.
Added automated publishing for `install.sh` at dotenvx.sh/ops.
Added automated publishing of builds for darwin-amd64, darwin-x86_64, darwin-arm64, linux-amd64, linux-x86_64, linux-arm64, linux-aarch64, linux-armv7l, windows-amd64, and windows-x86_64 on tagged releases.
First lines of Ops code 🏰.