Dimension scores are derived from public data and fields; weighted into the composite. Reference only.
Ghostable is a “desktop-first” environment variable and secrets management tool designed to reduce the chaos of teams passing around .env files, searching chat history for keys, or temporarily hardcoding configuration. It centralizes organizations, projects, environments, and variables into a single workspace, with support for search, table/grouped views, metadata inspection, .env import and export, and a clear positioning: humans manage secrets through the desktop app, while automation is handled through the CLI and deploy tokens.
Functionally, Ghostable covers several key parts of environment variable management: variable review and editing, change activity logs, version history, restoring old values, environment configuration validation, and deployment automation. Its validation is based on a shared .ghostable schema file, which can define global rules as well as environment-specific overrides to detect missing keys, incorrect values, or unexpected configuration. On the security side, the site states that it uses client-side encryption: environment data is encrypted before leaving a trusted client, and the server only sees ciphertext. Human access is tied to linked devices, while automation access uses scoped deploy tokens.
According to the official description, Ghostable works with environment-variable-driven stacks such as Laravel, Node, Python, Ruby, and Go. Its current integrations lean toward Laravel and compliance-oriented use cases, including Laravel Forge, Laravel Cloud, Laravel Vapor, OpenClaw, and Vanta. Vanta can sync members, roles, and MFA information, while Drata is marked as coming soon. The CLI can be used for scripts, CI, deployment hooks, and non-macOS workflows.
Pricing is straightforward: Free is free, supports up to 2 users and 5,000 API Operations, and already includes the CLI, CI/CD, secrets management, encrypted backups, validation, and version tracking. Standard costs $29/month for up to 5 users, adding advanced permissions, 30 days of audit history, and Vanta. Scale costs $99/month for up to 10 users, with 60 days of audit history and Signed Audit Webhooks. Enterprise needs require contacting sales.
The main advantages are that Ghostable is thoughtfully designed around everyday .env collaboration pain points, has a highly usable free plan, and clearly separates the boundary between human UI access and automated credentials. The drawbacks are that only a macOS desktop download is explicitly provided, while open-source status, self-hosting support, and supported payment methods are not disclosed; the integration ecosystem is also not yet very broad. It is best suited for development teams that need multi-environment collaboration, pre-deployment validation, secret rotation tracking, and compliance auditing, especially Laravel/SaaS teams.
The collected information does not include details on access from mainland China, payment support, or compliance deployment, so its availability status is unknown. Teams operating in domestic Chinese network environments should first test whether installation, API sync, and CLI deployment workflows are stable. Alternatives worth evaluating include Doppler, Infisical, HashiCorp Vault, AWS Secrets Manager, 1Password Secrets Automation, and dotenvx.
⚠ This review is compiled from public sources and does not constitute a purchase recommendation. Verify all facts on the vendor's official site. Verify on ghostable.dev official site.
ghostable.dev is an Unknown Dev Tools provider. TG4G tracks its product information, an overall rating of 7.0/10, and a China-accessibility score of China direct-connect friendly. Click "Visit Official Site" to reach ghostable.dev directly.