Veil
Keep your secrets invisible to AI copilots, local sniffers, and cloud sync daemons.
Is this your product? Claim it to edit the listing, post updates and answer questions. Prove it with an email address at the product's domain (the listing becomes Claimed), or put the LotsDirectory badge on your website (the listing becomes Verified, and its link to your website is followed while the badge is live).
Description
Keep your secrets invisible to AI copilots, local sniffers, and cloud sync daemons. Hardware-enforced in-place file shielding anchored in Apple Silicon Secure Enclave with zero network sockets.
About Veil
What is Veil?
Veil is a macOS app that seals .env and config files in place with the Apple Silicon Secure Enclave. It is Apple Notarized, and the download is a dmg. The future public price is $49 one-time.
What Veil does
Right-click in Finder seals or unseals a file with Touch ID, Apple Watch, or a Mac password. It is described as preventing Cursor, Copilot, Windsurf, and Claude Code from indexing credentials into prompt context. A screen cloak is described for Zoom, Loom, and OBS. Copied secrets are auto-zeroed from the macOS pasteboard in 15s.
Who Veil is for
It is for a Mac developer keeping production secrets out of AI coding tools. The app is listed for Apple Silicon M1-M4 and Intel. There is no cloud account and no background telemetry. Updates run on an explicit manual request.
How Veil works
Veil run injects secrets into Node.js memory for a dev server, and the page says the disk stays encrypted. Decrypted buffers are pinned with mlock so macOS never writes plaintext to the swapfile. Master keys use CryptoKit P-256 and stay bound to the chip. The license is pay-once, with a 14-day guarantee. AES-256-GCM is described as in under 4ms.
Key features
- In-place shielding for .env and config files, without moving them or breaking symlinks.
- Apple Silicon Secure Enclave, Touch ID, Apple Watch, or Mac password.
- Prevents Cursor, Copilot, Windsurf, and Claude Code from indexing credentials.
- Screen cloak for Zoom, Loom, and OBS, and a 15s pasteboard wipe.
- Offline, with no cloud, no accounts, and no background telemetry.
- veil run injects secrets into Node.js RAM. mlock pins decrypted buffers.
- Apple Notarized macOS app for Apple Silicon M1-M4 and Intel.
- Pay once. The future public price is $49 one-time, with a 14-day guarantee.
Pricing
As listed on mcrudra.com, checked 15 October 2026. Prices can change; see the site for current terms.
- The future public price is $49 one-time.
- The license is described as pay-once perpetual ownership, with no recurring subscription.
- A 14-day guarantee is listed, and delivery is a dmg.
- AES-256-GCM shielding is described as in under 4ms.
Facts from mcrudra.com, checked 15 October 2026
Written from Veil's own website (Homepage). The maker can claim this listing to edit it.
Categories
Frequently asked questions
What files does Veil seal?
It protects .env and config files directly inside repos, without moving them or breaking symlinks. A Finder right-click seals or unseals a file.
What is the public price?
The page lists a future public price of $49 one-time. The license is pay-once, with a 14-day guarantee.
Does Veil need an account or a cloud?
No. The page says there is no cloud, no accounts, and no background telemetry. Updates run on an explicit manual request.
How does veil run handle secrets?
veil run spawns a dev server and injects secrets into Node.js memory. The page says the disk stays encrypted, and mlock pins decrypted buffers so macOS never writes plaintext to the swapfile.