Git-native environment and secrets management for developers
Website and code security scanning with automated fix reports
Stage
Not given
Not given
Founded
Not given
Not given
Based in
US
AU
Pricing model
Freemium
Freemium
Pricing
Ghostable CLI: Free forever with unlimited environments and team members. Ghostable Desktop: Personal $49 one-time (1 seat, 2 device activations), Team 5 $249 one-time (5 seats, 5 device activations), Team 10 $499 one-time (10 seats, 10 device activations). All Desktop licenses include one year of u
Free plan: A$0/month, 1 site, 1 public repository, one scan per month. Solo: A$29/month or A$290/year (2 months free), 1 site, 3 repositories, weekly rescans. Pro: A$99/month or A$990/year (2 months free), 3 sites, 10 repositories, daily rescans, 500 CI/API runs per month. Agency: A$299/month or A$2
Key features
Git-native storage with encrypted values and signed records
Device identities with granular access roles
Local encryption and decryption without hosted service
Reviewable configuration changes in Git
Access requests and revocation
Validation schemas and environment overrides
Process-only injection with output masking
Encrypted backups and portability
CI/CD integration with scoped credentials
Desktop app with visual workflow
27 read-only security checks across seven groups
Grades sites A to F with detailed fix reports
REST API for registering sites and starting scans
Ownership verification via DNS record or file
Automated scheduled rescans at plan frequency
CI/CD integration with GitHub Actions and CLI
AI code review with Claude-powered agents
Runtime SDK for Python and Node.js middleware
What makes it different
No account, subscription, or hosted vendor required
Secrets travel with code in Git, not with hosting provider
Configuration reviewed like code without exposing plaintext
Framework-agnostic and works with any stack
All features included in free CLI with no limits
First scan is free with no credit card required and no sign-up friction
Same ownership verification and credit system across both web app and API
Fail-open Runtime SDK that hashes client IPs before leaving your process
Automatic refunds for failed scans and code reviews