License

kovra is proprietary software, published by Kaeus Inc. The kovra core is free to use; the enterprise tier is a paid subscription.

What that means in practice

The core is free. Download the installer from kovra.sh and use kovra — the CLI, the vault, the Wrapper, the MCP server — for personal, internal, and commercial use, at no cost.
Enterprise is a subscription. The organizational features (centralized management, team vaults, fleet governance, and more) are licensed commercially.
kovra is closed-source: the source code is not publicly distributed.

How you can still trust a secrets tool you can’t fork

Auditability matters for a tool you trust with secrets. We provide it through controlled verification rather than public source:

Independent security audits by reputable firms, with the reports published.
Source review under NDA for enterprise customers who require it before or during a deployment.
Source escrow for continuity — so an enterprise customer is never stranded if Kaeus stops maintaining the software.
Reproducible builds — so the binaries you install verifiably correspond to the reviewed source.

Third-party components

kovra includes open-source components — Rust crates, the Rust standard library, the fonts and data grid of the Web UI, and detection rules adapted from gitleaks — each under its own license. Their notices ship inside the app. In Finder, right-click kovra.app → Show Package Contents and open Contents/Resources/THIRD-PARTY-NOTICES.txt, or from a terminal:

open -e /Applications/kovra.app/Contents/Resources/THIRD-PARTY-NOTICES.txt