Secret rotation with a grace window

Rotate signing secrets with dual signatures for up to seven days. The dashboard shows which endpoints have not switched yet.

During the grace window each request carries signatures for both the old and the new secret. The audit log records the rotation, and alerts fire for endpoints still verifying with the old secret when the window closes.

Buy this template

$49