Secrets management

Open-source alternatives to commercial and source-available secrets managers.

HashiCorp Vault

HashiCorp Vault is a secrets manager now owned by IBM and released under the Business Source License since 2023. Pages here cover moving to OpenBao, its open-source fork.

CyberArk Conjur

CyberArk Conjur is CyberArk's secrets manager for machine identities, offered as LGPL Conjur Open Source and as commercial Secrets Manager products; CyberArk is now part of Palo Alto Networks. Pages here cover moving to OpenBao.

AWS Secrets Manager

AWS Secrets Manager is Amazon's managed secrets service, priced per secret and per API call. Pages here cover running self-hosted OpenBao instead.

Doppler

Doppler is a SaaS secrets manager that organizes secrets by project, environment and config and syncs them to apps, CI and cloud platforms through its dashboard, CLI and API; these pages cover replacing it with self-hosted Infisical or OpenBao.

Azure Key Vault

Azure Key Vault is Microsoft's managed service for secrets, keys and certificates, billed per operation, key and renewal. Pages here cover replacing it with self-hosted OpenBao or Infisical.

Google Cloud Secret Manager

Google Cloud Secret Manager is Google's managed secrets service, billed per active secret version, access operation and rotation notification. Pages here cover replacing it with self-hosted OpenBao or Infisical.

Akeyless

Akeyless sells a secrets, keys and certificates platform with a SaaS control plane and gateways in the customer's network. Pages here cover replacing it with self-hosted OpenBao or Infisical.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.
Book a callhello@deployopen.com