Two operations tools, and no promise we cannot keep.
Musubi is the brand behind Musubi Vault — a password manager whose server cannot read what it stores — and Musubi OnCall — alerting and on-call rotations that ring when they have to. Both are under construction, and this page says exactly where each one stands.
Two of them, kept separate on purpose.
Each product has its own organization, members and roles. An organization called “acme” in Vault and one in OnCall are not the same organization: the only thing they share is your identity, and that is enough.
Musubi Vault
WaitlistPasswords, keys, TOTP seeds and notes for an organization, encrypted before they leave the device.
See the productMusubi OnCall
Private betaAlerts, rotations and escalation: whatever nobody handled rings again, and all of it is on the record.
See the productThree decisions that run through both.
They are not features a plan turns on: they are the shape of the product, which is why they live here and not in the pricing table.
Authorization and confidentiality are two separate boundaries
The server decides who may call. The keys decide who may read. OnCall needs the first; Vault needs both, and neither one substitutes the other. With authorization alone, a database dump reads the whole organization.
The active organization lives in the address, not in the browser
You can keep two organizations open at once, in two windows, without one overwriting the other. It is not a stored preference: it is part of the URL, which is why a link you share opens what you were looking at.
Hiding a button is not isolation
The server authorizes every organization on every call. The interface shows what applies, but it is not the security boundary and we do not use it as one.
You cannot pay for this yet, and saying so now is cheaper.
Musubi Vault has its cryptographic core, its schema and its authorization built and tested; most of the interface is still missing. Musubi OnCall takes alerts, notifies, escalates and has an Android app, and today it runs for a single organization. The prices on this site are launch prices: they are published so they can be argued with, not so they can be charged tomorrow.