KeyVault Studio vs Ledge Notebook

Azure Key Vault, without the portal: KeyVault Studio is the native client for Mac, iPhone and iPad. Your secrets, keys and certificates are well protected in Azure. Managing them just takes too many clicks in the portal. KeyVault Studio turns that into a real Apple app: fast, focused and secured with Face ID / Touch ID. Want to look around first? Demo mode opens the complete app with sample data, no Azure account needed. SECRETS ▸ Create, view, update and delete, every value behind Face ID / Touch ID ▸ Full version history with side-by-side comparison ▸ Content types for JSON, XML, connection strings and API keys ▸ The app warns before anything expires, with thresholds you choose ▸ Copied values clear themselves from the clipboard KEYS ▸ Create RSA, EC and HSM-backed keys ▸ Crypto Playground: encrypt, decrypt, sign, verify, wrap, unwrap ▸ Rotation policies and one-tap rotation ▸ Import from JSON Web Key CERTIFICATES ▸ Issue self-signed and CA-signed certificates ▸ Import PFX/P12 and PEM, export the public certificate or the private key ▸ Manage policies, issuers, contacts and pending operations NETWORKING ▸ Configure the vault firewall, VNet rules and private endpoints ▸ Manage private DNS zones, record sets and VNet links ▸ Approve or reject private endpoint connections VAULTS ▸ Find vaults across all your Subscriptions in seconds ▸ Create a new vault with a guided wizard ▸ Backup and restore, AES-GCM encrypted if you want ▸ Recover or purge soft-deleted vaults and items AI ASSISTANT ▸ Ask questions about your own infrastructure: what expires soon, what is disabled ▸ Runs fully on device if you want: Apple Intelligence or Gemma, no cloud required ▸ Or bring your own key: Claude, OpenAI, Gemini, plus Ollama on your own network ▸ Naming suggestions per Cloud Adoption Framework, subnet and address space planning ▸ The assistant sees names and metadata, never secret values ▸ A visible token budget keeps API costs under control BUILT FOR APPLE PLATFORMS ▸ Mac, iPhone and iPad with the same feature set, tuned per size class ▸ Lightning-fast search across every vault and item, right on the device ▸ Several accounts side by side: Azure Commercial, US Government and China clouds ▸ No middleman servers: the app talks directly to Azure with your Microsoft Entra ID sign-in Bring your own app registration or use the built-in one. Your secrets never leave your device except to Azure.

Ledge is a Markdown notebook that runs the code in your notes. Write the commands for a deploy, a fix or a setup once, with the reasoning beside them, and run each block with a tap. The output appears right under the block. On iPhone and iPad, Ledge opens the notes on your own server: a Linux machine or a Mac running the free Ledge server, reached over SSH. Your notes, shells and commands stay on your machine. RUN ANYTHING • Shell, Python, Node, TypeScript, Ruby, PHP and Redis blocks run with the tools on your server • Add SQL or any other language by naming the command that runs it, such as psql or mysql • Prompt blocks hand a request to an AI agent on your server, such as Claude Code, which can read your notes • Answer a running command's prompts by typing into its output, with ^C, ^D, Esc and arrow keys above the keyboard • Each note keeps its own shell, so a cd or an exported variable carries into the next block • Give a note its own working directory, environment and secrets, kept outside the note • Run a note's blocks on another machine over SSH with one line at the top of the note • Mark a risky block to ask before it runs • A command keeps running on the server after you lock the phone, and its output is waiting when you come back WRITE AND ORGANIZE • Markdown with live preview, tables, checklists and images, including photos from the camera • Link notes to each other, with outline, backlinks and tags panels • Workspaces, folders, favorites and full-text search • Use the same notes from Ledge for Mac and from every phone and iPad you pair PRIVATE AND SECURE • You stay in control of your notes: they live on your own machine, not on our servers or anyone else's • No Ledge account, no sign-up and no third party in between • Sign in with a key made in the Secure Enclave that never leaves the device, or with a password kept in the keychain • Each server's host key is confirmed on the first connection and checked on every one after • Lock sensitive notes with a passphrase • Add a server by scanning the QR code it prints WHAT YOU NEED A Mac or a Linux machine you can reach over SSH, with the Ledge server installed. One command installs it, with no root access, no open port and no background service. The guide in the app walks you through it. Ledge is free and open source.