About KeySentry
KeySentry is a rule-based configuration and secrets platform built by SKYBIN AI VENTURES LLP for teams that manage configuration across environments, regions, and services.
Most teams solve config with environment files, feature flag services, or HashiCorp Vault. Each approach has real costs: redeploys for value changes, operational overhead, or category errors when secrets land in the wrong tool.
KeySentry fills that gap. Store a config key once, attach conditional rules that say who gets what value, and let applications fetch a fully-resolved JSON document over a single authenticated HTTP call. Values marked as secrets are encrypted before they leave the server. Zero-knowledge mode lets customers hold their own key pair so the server never sees private key material.
What we believe
- Config without redeploys. Change a value in the dashboard, push it to every consumer via ETag caching. No pipeline, no rollout.
- Secrets, not slogans. AES-GCM encryption with envelope key wrapping. Zero-knowledge mode with customer-held RSA key pairs. Ciphertext only on the wire and at rest.
- Rules over scattered files. Conditional rules evaluated by priority. Default values as fallback. One endpoint token per consumer.
- SDK-native, not locked in. .NET, Node.js, Next.js, PHP, and Laravel each use the same protocol and headers, so switching frameworks does not mean rewriting your client code.
Architecture
KeySentry runs two services: the dashboard API (auth, project management, rule engine) and the public config delivery endpoint (unauthenticated GET, optimized for latency). Both share the same PostgreSQL database and encryption layer. External traffic routes through the YARP Gateway at gateway.skybin.io.
Get in touch
Questions, feedback, or partnership ideas: hello@keysentry.in