Launching now

Doug Niccum Founder ★★★★★ · 1 week ago

Last year when I onboarded a new developer on the team I was managing, I quickly ran into a couple issues with the onboarding process. First, I realized our documentation was pretty bad and scarce, but if you are in software development, chances are yours is too. The second issue was environment setup. He started asking questions about which database connection he should be using and which API key he should be using for this service. Naturally, his next question, "can you send me your environment file in Slack?" This happened three or four more times. So in a ten-minute period we had dumped a couple hundred environment variables into our team's chat without really thinking twice about it. What made the situation worse were we discovered several credentials were out of date or no longer active, forcing the entire team to drop what they were doing and help our new developer get unblocked.

It was at this point I realized we needed to change. Our onboarding experience needed to get better, our documentation needed to get written, but most importantly, our security HAD to get better. That's why I came up with SecretStash.Slack, Teams, Jira, Linear, and Clickup are all collaboration tools. So as it turns out, my false sense of security that I get by using Slack or Teams is just that: a false sense of security. Any sensitive information that I share with a co-worker could still be compromised no matter the protocols or safeguards that are in place by myself, the company, or those IT guys.

When I went about building SecretStash, I wanted to take the approach of building something developers want to use because it fits into their workflow. Again, I know there are other solutions out there, but they are subject to unnecessary enterprise bloat and are built for cloud architects that manage infrastructure, not building the software.

I hope you enjoy this product and find it working for you and your organization.