9
10 Comments

Feedback for SaaS MVP

https://infisical.com

A lot of software devs still send API keys over insecure channels to sync up their .env files, so we created a simple, end-to-end encrypted solution to help sync these files up.

Appreciate it a lot if y'all could check it out and give any feedback!

submitted this linkon September 2, 2022
  1. 2

    Wow this was much needed. Congrats on your launch

    1. 1

      Thank you. You should give it a spin!

  2. 2

    As a software developer that use .env files a lot, I can't get which problem your project solves. What really could help (that we solved by just writing a short script on Python) could be pushing the env variables to the hosting platform. For example, there is no UI on AWS Beanstalk that allow to change, upload, or create a bunch of variables at once (this is why we finally created that script). The same with other platforms.

    Good luck anyway!

    1. 2

      I echo this sentiment, but disclaimer: I do a ton of infra work as well so probably not the target audience.

      Our setup:

      • apps have defaults that work locally (or, for .env file context: copy from .backup or whatever)
      • beanstalk/ECS: we throw in the param store prefix as an env var, via terraform
      • prod/hosted environments pull from param store at boot (query $SSM_PREFIX/* -> populates env vars)
      • SSO + AWS IAM controls who can see what beyond that for debugging stuff (source of truth is maintained)

      For what it's worth, that site looks fantastic and conveys the solution statement really well. I was able to quickly tell it wasn't built for me, which I actually appreciate.

      1. 1

        Interesting @adrsch, I'll have to do more digging into how secret management is being done in production across companies of different scales; we've done some user interviews already but need far more to get a better picture.

    2. 1

      Thanks for the comment @Arig!

      Curious how big is your team size for whatever project/service you're working on?

      We're trying to solve the problem of secret sprawl (can read about it more in the link below) which scales with the size of a workforce and codebase.

      We've thought about pushing env variables to hosting platform too actually — definitely a direction we'd like to explore more!

      https://www.conjur.org/blog/what-is-secrets-sprawl-how-to-avoid-it-with-secrets-management

  3. 2

    @dangtony98 Congrats on the launch. Infisical hits the right problem. I took a look at the website, and here are my thoughts:

    1. The idea is incredibly useful, it could have a long roadmap of features your users would want.
    2. The design is super good. Straight to the point and appealing.
    3. The description under the main pitch mentions API-keys. But .env is used for other use-cases as well. Instead, you can mention .env itself? Devs would understand this even better.
    4. The image for the Secure section doesn't seem to convey anything right now. Maybe improve that area?
    5. The image for Simple section seems to have a screenshot of your Terminal. It would be even better if you can simply it and just show the commands in use.
    6. Love the explainer video as well.
    7. Add a FAQ section in the Pricing page, answering common questions.

    I build Hellonext (product feedback management tool), and I just launched a Free plan called Freeway. You could take advantage of that for feature request management. šŸ™Œ

    1. 1

      Thanks for all this feedback!

      Will definitely consider all of this advice as we work on improving our platform; we wanted to add more usage metrics as well to give prospective users more info on current platform usage and reliability. Hellonext would definitely be useful for getting feedback and will look into it.

      Would love to learn more about how you're dealing with .env files at Hellonext by the way!

  4. 2

    I’m definitely using this. Thanks for sharing!

    1. 1

      Thank you. Please do give it a spin!