Pricing
Free for small teams. One price when you grow.
Developer
$0up to 3 people, then $6 per extra seat
Everything you need to take secrets out of .env files: the CLI, the API and the MCP server, every environment and project.
- 7-day audit history
- Up to 25 people with paid seats
- Email support
Team
$15per person, per month
Everything in Developer, plus what a growing team needs to prove who did what.
- Team members: Unlimited
- SSO (SAML / OIDC)
- Audit history: 90 days
- Audit log export
- Access reviews
- API token lifetime: Up to 365 days
- Priority support
Compare plans
Every difference, side by side.
| Developer | Team | |
|---|---|---|
| Secrets Management | ||
| Projects | Unlimited | Unlimited |
| Secrets per project | Unlimited | Unlimited |
| Environments | Unlimited | Unlimited |
| Secret versioningSecret versioningEach environment keeps its last 10 saved versions, so a recent change can be rolled back. | Included | Included |
| Secret referencingSecret referencingBuild a value from other secrets with ${KEY}, such as a database URL from its parts. | Included | Included |
| Bulk import/exportBulk import/exportPaste or drop a .env into the dashboard; export as env, compose, docker, JSON or YAML. | Included | Included |
| Access & Security | ||
| Team members | 3 free, up to 25 | Unlimited |
| Role-based accessRole-based accessOwner, admin, developer, operator, viewer and billing. Protected environments accept writes from owners and admins only. | 6 roles | 6 roles |
| Passkey authentication | Included | Included |
| SSO (SAML / OIDC)SSO (SAML / OIDC)Sign in through your identity provider over SAML 2.0 or OIDC, with domain verification. | — | Included |
| Audit & Compliance | ||
| Audit historyAudit historyHow long every value read and every change stays searchable in the audit log. | 7 days | 90 days |
| Audit log export | — | Included |
| Access reviewsAccess reviewsA report of who can reach each team and project, and how many people can reach production. | — | Included |
| Integrations | ||
| CLI tool | Included | Included |
| REST API | Included | Included |
| API tokensAPI tokensCredentials for pipelines, scripts and custom agents instead of a person. Scoped to chosen projects and environments, read-only unless you choose write. | Unlimited | Unlimited |
| API token lifetimeAPI token lifetimeEvery token expires. This is the longest expiry you can choose when you create one. | Up to 90 days | Up to 365 days |
| Works in any CIWorks in any CIThe CLI and API tokens run in any CI system, with no plugin to install. | Included | Included |
| Support | ||
| Email support | Included | Included |
| Priority support | — | Included |
Questions
Before you ask.
Can I try varsafe before paying?
Yes, on the Developer plan. It is free for up to 3 users with no time limit and no card, and includes the CLI, the API and the MCP server. The Team plan is billed from the day you upgrade.
What happens when I exceed the Developer plan limits?
You can add extra seats at $6/user/month up to 25 users. For larger teams, upgrade to the Team plan for unlimited users, extended audit history, and priority support.
Can I switch between plans?
Absolutely. You can upgrade or downgrade at any time. When downgrading, your current features remain active until the end of your billing period.
Do you offer discounts for startups or non-profits?
Yes! We offer special pricing for startups, educational institutions, and non-profit organizations. Contact our sales team to learn more.
How is billing calculated?
Team plans are billed per user per month. Developer plans include 3 free users with $6/user for additional seats. Annual billing saves you 20%.
Try it on the repo you have open.
Install the CLI, sign in from the browser, then put varsafe run -- in front of your dev command.
$ curl -fsSL https://varsafe.dev/install.sh | bash