Press: Crunu in brief, logo and facts
Ready-to-use descriptions of Crunu in three lengths, logo files, checked facts about the product and the company, and who to contact with questions.
Logo files
Use the logo as it is: don't recolor, stretch or redraw it, and leave clear space around it.
On this page
Everything you need to write about Crunu: a description in three lengths, the logo, facts we can back up, and how to reach us. You're welcome to quote the descriptions word for word.
Crunu in one line
Crunu is an end-to-end encrypted secrets manager for teams.
Crunu in one sentence
Crunu is an end-to-end encrypted secrets manager for teams: .env files, API keys and cloud credentials are encrypted on your devices, and the server stores only ciphertext.
Crunu in one paragraph
Crunu keeps a team's .env files, API keys and cloud credentials in one place without asking anyone to trust the server. Values are encrypted in the browser and in the crunu agent, and the server stores ciphertext, public keys and signed records, with no key that could decrypt them. Each environment, such as staging or production, has its own key, so people, servers and CI pipelines get exactly the environments they need. When someone leaves, Crunu rotates the keys they held, shows which versions they received and lists the values to reissue at each provider. Crunu runs at app.crunu.com, and Enterprise customers can host the server themselves.
Facts
| Fact | Details |
|---|---|
| Product | Crunu, an end-to-end encrypted secrets manager for teams |
| Company | KeepFlow L.L.C-FZ, Dubai, UAE; see about |
| Status | Early access, free during early access; see pricing |
| First release of the current platform | October 2026; every release since is in the changelog |
| Where it runs | The Crunu cloud at app.crunu.com; your own server on the Enterprise plan, under a signed agreement |
| Clients | Web app in Chrome 113+, Safari 17+ and Firefox 129+; the crunu agent on Linux and macOS, amd64 and arm64 |
| CI sign-in | GitHub Actions, GitLab CI, Bitbucket Pipelines and any OIDC issuer |
| Encryption | AES-256-GCM, X25519, Ed25519, HKDF-SHA256; account key from a password and a Secret Key |
| App languages | English and Russian |
What we don't claim, so please don't either: Crunu has no SOC 2 or ISO 27001 certification, has not published an external security audit, and its source code isn't published. It has no Windows agent, no mobile apps and no single sign-on. The limitations page lists what the design can't protect against.
Writing about Crunu
- The name. Write "Crunu", with a capital C, in text and headlines. The wordmark in the logo is lowercase,
crunu, and so are commands such ascrunu run. - The encryption claim. "End-to-end encrypted" and "the server stores only ciphertext" are accurate. Please don't call Crunu "zero-knowledge": the server can't read values, but it does see metadata such as names, email addresses and the audit log.
- Rotation. In Crunu, rotation means replacing the encryption keys of an environment. Values at providers, such as a payment API key, are reissued by people, and Crunu lists which ones.
How it works explains the design in plain language, and the security model goes into detail.
Contact
Write to support@crunu.com with press questions and requests, and to security@crunu.com about security issues. Every reply comes by email. We don't put individual names on the site; our editorial policy explains how we write about Crunu and other products.