Secrets Management
10 providers in this category.
Secrets managers store and broker API keys, database credentials, certificates, and encryption keys, replacing secrets scattered across config files and environment variables. The stronger tools issue dynamic, short-lived credentials and rotate them automatically. Key choices are open-source versus managed delivery, self-hosting, dynamic-secret support, and compliance.
Companies
Neutral ordering. Not a recommendation.
Akeyless
www.akeyless.io
Akeyless is a SaaS-based 'Vaultless' secrets management and machine-identity platform that handles static, rotated, and dynamic just-in-time secrets, keys, and certificates with zero standing privileges.
AWS Secrets Manager
aws.amazon.com/secrets-manager
AWS Secrets Manager is Amazon's fully managed service for storing, rotating, and retrieving secrets such as database credentials and API keys.
Azure Key Vault
azure.microsoft.com/en-us/products/key-vault
Azure Key Vault is Microsoft's managed service for storing and managing secrets, keys, and certificates with access control, including HSM-backed key protection on its premium tier.
CyberArk Conjur
www.conjur.org
CyberArk Conjur is an open-source secrets management tool focused on securing secrets for applications, CI/CD pipelines, and containers.
Doppler
www.doppler.com
Doppler is a SecretOps platform that centralizes environment variables and secrets, syncing them across applications, environments, and clouds.
Google Secret Manager
cloud.google.com/secret-manager
Google Secret Manager is Google Cloud's managed service for storing API keys, passwords, and certificates with versioning and access control.
HashiCorp Vault
www.hashicorp.com/products/vault
HashiCorp Vault is a secrets management tool for storing, accessing, and dynamically generating secrets, with encryption-as-a-service and fine-grained access control.
Infisical
infisical.com
Infisical is an open-source secrets management platform for storing and syncing secrets across applications, with the option to self-host.
Pangea
pangea.cloud
Pangea, now part of CrowdStrike, is an API-first security-services platform whose Vault service provides managed secrets and key management.
Teleport
goteleport.com
Teleport is an infrastructure identity and privileged-access platform that replaces static secrets such as SSH keys, database passwords, kubeconfigs, and cloud tokens with short-lived certificates issued by a built-in certificate authority.