Built by the team
behind Fyboard
FyVault is what happens when a team building enterprise software gets tired of scattered secrets, breached .env files, and security tools that protect storage but ignore runtime.
eBPF kernel-level, zero-copy
Same crypto on every tier
Vercel, AWS, Docker, and more
Our Mission
“Every developer — solo or enterprise — deserves secrets that protect themselves. Not secrets you protect. Secrets that are architecturally unreachable.”
Our Origin
Where FyVault comes from
Fybyte builds precision manufacturing systems and intelligent software. Fyboard — an all-in-one workspace for modern teams — is one of our flagship products.
While building Fyboard, the team kept running into the same problem: .env files everywhere, secrets in Slack, rotation policies nobody followed.
FyVault was built to solve their own problem first, then opened to everyone.
Our Difference
What makes FyVault different
Runtime, not storage
Most vaults encrypt at rest. FyVault protects secrets at the moment they are used — eBPF kernel injection, rotating handles, microsecond exposure windows. Your secrets never touch disk unencrypted, and they never stay in memory longer than they need to.
Honest about our limits
We publish our full threat model. 8 protected vectors, 1 partial, 1 documented limit. No security theater. No vague marketing claims. You read the model, you decide if we are good enough for your stack.
Generous by default
50 secrets free forever. Same encryption on every tier. Unlimited devices on every plan. We would rather have 10,000 indie devs than 100 locked-in enterprises.
Our Principles
The No List
What we refuse to do matters as much as what we build.
No security theater
We don’t claim to be invincible. We publish our full threat model — 8 protected vectors, 1 partial, 1 documented limit. You decide if we’re good enough.
No feature-gated encryption
AES-256-GCM on free tier. Same crypto as enterprise. We will never make safety a premium add-on.
No per-seat gotchas
Devices unlimited on every plan. Scale your team without scaling your bill.
No vendor lock-in
Import from Vault, Doppler, 1Password. Export anytime. Your secrets belong to you.
No secrets in our hands
Zero-knowledge mode means we literally cannot read your secrets. Not won’t — can’t.