Secure configuration and secrets management for modern CI/CD pipelines. Replace environment-specific values automatically — no secrets in your repos, no secrets in your pipelines.
From configuration to deployment — in four simple steps.
Create environments (Dev, Test, Production) and assign configuration keys with their values — strings, booleans, JSON, or YAML.
Tokenizer generates unique tokens for each configuration key. Use them as placeholders in your config files (e.g. appsettings.json).
The Azure Pipelines plugin authenticates with a private API key, fetches tokens from Tokenizer, and replaces placeholders with real values.
Your application is deployed with correct, environment-specific configuration. Secrets never leave the secure vault until the moment of tokenization.
Everything you need to manage configuration and secrets across environments.
Manage separate configurations for Dev, Test, and Production. Each environment has its own set of keys and values — switch between them effortlessly.
Store booleans, strings, full JSON structures, or YAML snippets. Tokenizer handles any configuration format your application needs.
Mark keys as secure — they are encrypted at rest in the database and only decrypted at tokenization time. Secrets are never exposed in plain text.
Generate tokens for configuration keys and use them as placeholders in your files. Tokenizer replaces them with real values during deployment.
A dedicated plugin for Azure Pipelines. Authenticate with a private API key, fetch tokens, and replace config values — all within your existing pipeline.
No more secrets stored in pipeline variables or YAML files. Tokenizer keeps secrets centralized and encrypted, away from your source code.
Tokenizer was built with security at its core. Your secrets stay protected at every stage.
Secure keys are encrypted in the database
Private API keys for pipeline authentication
No secrets in repos or CI/CD configs
Fine-grained API access control
A dedicated plugin integrates Tokenizer directly into your Azure DevOps pipeline. Authenticate, fetch, and replace — all in one step.
{
"ConnectionStrings": {
"Default": "#{DatabaseConnection}#"
},
"Jwt": {
"Secret": "#{JwtSecret}#",
"Issuer": "#{JwtIssuer}#"
},
"Logging": {
"Level": "#{LogLevel}#"
},
"FeatureFlags": {
"EnableBeta": #{EnableBeta}#
}
}
Tokens like #{DatabaseConnection}# are replaced with real values at deployment time.
See how configuration flows from Tokenizer to your deployed application.
Define keys & values per environment
Generate tokens as placeholders
Plugin fetches & replaces tokens
App deployed with correct config
Centralize your configuration, encrypt your secrets, and automate your deployments with Tokenizer.