See every secret across your vaults. Spot drift. Edit safely.
VS Code, desktop and command line. Windows, Mac and Linux. One licence covers all three.
Browse Azure Key Vault secrets across all your vaults in one place, compare environments for drift, and edit with history and rules. Values are shown or copied only when you ask.
Sign in once and Benchdog lists every vault you can see across your subscriptions, with its region and secret count. Open one to see its secrets with values masked, then show or copy just the one you need. Values are never saved or logged.
Put dev beside prod and see which secrets exist on one side only. Turn on Compare values and vaults that share a value get the same letter, so you find drift without seeing a secret. Tick the rows and copy them across in one step.
Change a value with the rules checked and a Yes or No first, or rotate it with Replace without reading, so the old value is never read. Every save is a new version, and Roll back puts an earlier one back.
Write rules in a small benchdog.json beside your code: secrets every vault must have, allowed values, patterns, and secrets expected to differ. Benchdog checks every save against them, lists every problem, and in VS Code marks each one on its rule's line.
Search secret names across every vault at once, then open, copy or see the history of a match. In VS Code, hover over a Key Vault reference in your code to see which vaults hold that secret, and find every place your workspace uses it.
History shows each secret's versions newest first, with letters for the ones that share a value and, from the vault's audit logs, who made each change. Recent changes lists every change in a vault over the last 1, 7, 30 or 90 days.
Secrets that have expired, expire within 30 days, or have not changed for a year are tagged and counted in the header. Turn on Needs attention to see only those, and deal with them before they catch you out.
Changed a secret that apps read at start-up? Restart a web app, function app or a single slot after a Yes, and Benchdog waits for its health check path, then reports the status code and how long it took.