Security & Backup — pay-once tools

Passwords, secrets, certificates, uptime and backups — infrastructure you control instead of renting by the seat.

Security and backup are the last things you should rent by the seat — yet passwords, certificates, uptime and backups are all sold per user, per month. This category is infrastructure you control instead. Vaultly is a zero-knowledge password vault with shared teams and TOTP, self-hosted with no per-seat fee. Keyloop is a desktop TOTP authenticator with an encrypted local vault and encrypted exports. Secretbox versions project secrets across environments with a CLI that pipes straight into your .env files. Certwatch performs real TLS handshake checks on a schedule with 30, 14, 7 and 1-day email and webhook alerts before anything expires. Syncvault encrypts backups client-side and pushes them to your own S3-compatible bucket or NAS. Upwatch monitors HTTP endpoints with an incident log and a branded 90-day status page, Upkeep Status publishes a full self-hosted status page with components and subscribers, and Logbin collects, tails and searches your logs. Own the safety net.