Doppler is a SaaS secrets manager that organizes secrets by project, environment and config and syncs them to apps, CI and cloud platforms through its dashboard, CLI and API; these pages cover replacing it with self-hosted Infisical or OpenBao.
Compares Doppler's hosted projects, environments, configs and syncs with self-hosted Infisical, which keeps a similar project and environment model, CLI, Kubernetes operator and secret syncs: open-core licensing, features that need an Infisical enterprise license, and Infisical's built-in Doppler importer.
Compares Doppler's developer-focused SaaS with OpenBao, the open-source fork of HashiCorp Vault: path-based KV secrets, dynamic secrets, leases and policies instead of projects and config syncs, the work of running OpenBao with HA storage and unsealing, and which teams each option suits.
Infisical's documented Doppler import: connecting with a Doppler service account token, pulling root and branch configs into chosen Infisical environments and folders one environment at a time, the permissions involved, and what to recreate by hand.
A rebuild path, since OpenBao has no Doppler importer: exporting each Doppler config as JSON with the CLI, writing it to OpenBao KV paths, mapping projects and environments to mounts and policies, and replacing Doppler syncs and dynamic secrets.
Doppler's per-seat Team and Enterprise fees and add-ons against self-hosted Infisical or OpenBao: servers, databases or storage backends, HA, backups, upgrades, an Infisical enterprise license if SSO is needed, and the staff time to run it.
Getting secrets out of Doppler config by config with the CLI or the download API: the supported file formats, name transformers, rate and size limits, encrypted fallback files, and handling dynamic secrets and plain-text exports safely.
Why Doppler's cloud does not meet an EU-only hosting rule, since its servers run in Google Cloud us-central1 and Enterprise Key Management leaves sealed secrets on Doppler's infrastructure, and how Doppler On-prem, Infisical's EU cloud and self-hosted Infisical or OpenBao compare.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.