Free during early access
Crunu charges nothing while it’s in early access. Every feature is included, and there’s no card to enter, because the product has no billing at all.
Nothing to buy yet. There are no plans for sale and no checkout. Every button on this page leads to sign-up.
The early access plan
Includes
- Every feature, with no higher tier
- Machines, CI service tokens and share links
- Access requests, offboarding and network rules
- Audit log and alerts
- Values encrypted on your devices
Limits
- 1 MB per environment
- The last 100 versions, up to 64 MB
- 500 projects, 50 environments in each
- 5,000 entries per environment access list
- No seat count
A self-hosted server has the same features and limits. Hosting it is billed by your platform provider.
How early access works
What you get now, and what you’ll hear about before anything changes.
Early access comes without an uptime guarantee or a service-level agreement.
Read the termsHosted and self-hosted, side by side
The same server runs at app.crunu.com and on your own infrastructure. Limits and features match. What differs is who runs it and who pays for hosting.
Swipe the table for both columns
| What | app.crunu.comNow | Self-hosted |
|---|---|---|
| Price | ||
| Cost | Free during early access | Billed by your platform provider. A team on Cloudflare needs Workers Paid |
| Limits | ||
| Content of one environment | Up to 1 MB | Up to 1 MB |
| Version history | Last 100 versions, up to 64 MB | Last 100 versions, up to 64 MB |
| Projects per organization | Up to 500 | Up to 500 |
| Environments per project | Up to 50 | Up to 50 |
| Access list of one environment | Up to 5,000 entries | Up to 5,000 entries |
| Audit log retention | 365 days by default. An organization can extend it | 365 days by default, set by whoever runs the server. An organization can extend it |
| Share link expiry and views | Up to 365 days and 1,000 views | Up to 365 days and 1,000 views |
| Service token uses | 1 to 1,000,000 | 1 to 1,000,000 |
| Features | ||
| Projects, environments, history and compare | Included | Included |
| Roles, access profiles and access requests | Included | Included |
| Offboarding with exposure report and key rotation | Included | Included |
| Machines with the crunu agent | Included | Included |
| CI service tokens with OIDC binding | Included | Included |
| Share links | Included | Included |
| Network rules | Included | Included |
| Audit log and alerts | Included | Included |
| Second factor: TOTP and passkeys | Included | Included |
| Operation | ||
| Who runs the server | Crunu, on Cloudflare Workers with D1 | You, on Docker, Cloudflare Workers, Vercel or Google Cloud Run, or on AWS App Runner in accounts that already use it |
| Who sees metadata | Crunu, as the operator | Whoever runs your server |
| Updates | Deployed by Crunu | The same deploy script, run by you |
| Your own copy of the data | Offline copy and .env export of what you can read | Full database archive, plus the same exports |
How the limits behave
What counts
The 1 MB limit covers every file and variable of one environment together, measured before encryption.
History counts the versions of each environment and the size of their ciphertext. The access list counts people, machines and service tokens with a role on that environment. Owners and admins aren’t listed, so they don’t count.
At a limit
The app won’t encrypt a version larger than 1 MB, so nothing oversized is saved. The server refuses a 501st project in an organization and a 51st environment in a project.
When you save a version beyond the history limit, the oldest one is removed in the same step.
Prefer your own infrastructure?
The server runs on your own Docker host or cloud account too.
See self-hostingSame features
Nothing is reserved for the hosted service.
Same limits
They’re written into the server itself.
Your hosting bill
Paid to your platform provider, not to Crunu.
Crunu and its alternatives
Side-by-side pages for 1Password, HashiCorp Vault, Doppler, Infisical and sharing .env files in chat.
Every comparison page cites where each fact comes from and when it was verified.
- 1PasswordVerified October 27, 2026Crunu vs 1Password for team secrets
- Chat and notesVerified October 27, 2026Crunu vs sending .env files in chat and notes
- DopplerVerified October 27, 2026Crunu vs Doppler for team secrets
- HashiCorp VaultVerified October 27, 2026Crunu vs HashiCorp Vault for team secrets
- InfisicalVerified October 27, 2026Crunu vs Infisical for team secrets
Cost, limits and billing
What teams ask before they move their secrets.
Another question? Email support@crunu.com.
Is Crunu really free?
Yes, during early access. Every feature is included, and the product has no billing, so there’s nothing to pay for.
Do I need a credit card?
No. Signing up asks for your email, a code from that email, your name and a team name. Your password and Secret Key are then created in your browser.
What happens when early access ends?
Prices for after early access aren’t set. If paid plans arrive, they’ll be announced at least 30 days in advance, and nothing is charged until you opt into one yourself.
Is there a limit on team members?
Crunu doesn’t count seats. The limit that matters is per environment: its access list holds up to 5,000 entries for people, machines and service tokens.
Can people sign in with single sign-on?
No. Crunu doesn’t offer single sign-on for people through SAML or OIDC, or sync with a user directory. People sign in with a password and Secret Key plus a second factor: a TOTP app or a passkey. OIDC is used only for CI jobs.
Is there an uptime guarantee?
No. Early access comes without a service-level agreement. Keep an offline copy of your environments: it opens with your password and Secret Key, without the server.
Can I delete my account and my data?
Yes. Deleting an account asks for your password and Secret Key again. If you’re the only owner of an organization, delete the organization or make someone else an owner first. Deleting an organization revokes its machines and stops its share links, and the server then removes its data.
Can I run Crunu on my own server instead?
The server runs on Docker, Cloudflare Workers, Vercel and Google Cloud Run, and on AWS App Runner in accounts that already use it. It isn’t published as a public download: write to support@crunu.com.
Start with your team’s first project
Create an account with your email. Keys are created in your browser, and the server only ever sees ciphertext.