# Veil

> Keep your secrets invisible to AI copilots, local sniffers, and cloud sync daemons.

Keep your secrets invisible to AI copilots, local sniffers, and cloud sync daemons. Hardware-enforced in-place file shielding anchored in Apple Silicon Secure Enclave with zero network sockets.

## Facts
- Website: https://veil.mcrudra.com
- Categories: Developer Tools
- LotsDirectory page: https://lots.directory/products/veil
- Listing state: Unclaimed. We listed this product from its public website, and its owner has not claimed it yet.

## Detailed info

## What is Veil?

Veil is a macOS app that seals .env and config files in place with the Apple Silicon Secure Enclave. It is Apple Notarized, and the download is a dmg. The future public price is $49 one-time.

## What Veil does

Right-click in Finder seals or unseals a file with Touch ID, Apple Watch, or a Mac password. It is described as preventing Cursor, Copilot, Windsurf, and Claude Code from indexing credentials into prompt context. A screen cloak is described for Zoom, Loom, and OBS. Copied secrets are auto-zeroed from the macOS pasteboard in 15s.

## Who Veil is for

It is for a Mac developer keeping production secrets out of AI coding tools. The app is listed for Apple Silicon M1-M4 and Intel. There is no cloud account and no background telemetry. Updates run on an explicit manual request.

## How Veil works

Veil run injects secrets into Node.js memory for a dev server, and the page says the disk stays encrypted. Decrypted buffers are pinned with mlock so macOS never writes plaintext to the swapfile. Master keys use CryptoKit P-256 and stay bound to the chip. The license is pay-once, with a 14-day guarantee. AES-256-GCM is described as in under 4ms.

## Key features

- In-place shielding for .env and config files, without moving them or breaking symlinks.
- Apple Silicon Secure Enclave, Touch ID, Apple Watch, or Mac password.
- Prevents Cursor, Copilot, Windsurf, and Claude Code from indexing credentials.
- Screen cloak for Zoom, Loom, and OBS, and a 15s pasteboard wipe.
- Offline, with no cloud, no accounts, and no background telemetry.
- veil run injects secrets into Node.js RAM. mlock pins decrypted buffers.
- Apple Notarized macOS app for Apple Silicon M1-M4 and Intel.
- Pay once. The future public price is $49 one-time, with a 14-day guarantee.

## Pricing

As listed on mcrudra.com, checked 15 October 2026. Prices can change; see the site for current terms.

- The future public price is $49 one-time.
- The license is described as pay-once perpetual ownership, with no recurring subscription.
- A 14-day guarantee is listed, and delivery is a dmg.
- AES-256-GCM shielding is described as in under 4ms.

## Facts from mcrudra.com, checked 15 October 2026

Written from Veil's own website ([Homepage](https://veil.mcrudra.com/)). The maker can claim this listing to edit it.

## FAQ

### What files does Veil seal?
It protects .env and config files directly inside repos, without moving them or breaking symlinks. A Finder right-click seals or unseals a file.

### What is the public price?
The page lists a future public price of $49 one-time. The license is pay-once, with a 14-day guarantee.

### Does Veil need an account or a cloud?
No. The page says there is no cloud, no accounts, and no background telemetry. Updates run on an explicit manual request.

### How does veil run handle secrets?
veil run spawns a dev server and injects secrets into Node.js memory. The page says the disk stays encrypted, and mlock pins decrypted buffers so macOS never writes plaintext to the swapfile.

---
Source: https://lots.directory/products/veil · Machine-readable context by LotsDirectory.