| Doppler | Doppler describes SDKs for fetching secrets at runtime.[1] | Not documented[2] | Doppler lists integrations for cloud platforms, developer tools, Kubernetes, and identity providers.[1] | Doppler describes cloud and on-prem deployment options.[2] |
|---|
| Infisical | Infisical lists Secrets Management as a product offering on its developer security platform.[3] | Not documented[4] | Not documented[4] | Not documented[4] |
|---|
| AWS Secrets Manager | AWS Secrets Manager centrally stores credentials and API keys for applications.[5] | Secrets Manager supports rotation that uses a Lambda function to update supported secrets.[6] | AWS documents a Lambda function for rotating supported secrets.[6] | AWS describes Secrets Manager as a managed cloud service.[5] |
|---|
| Azure Key Vault | Azure Key Vault securely stores secrets used by cloud applications, including API keys and passwords.[7] | Not documented[7] | Microsoft documents Azure Monitor for Key Vault logging.[8] | Microsoft describes Azure Key Vault as an Azure cloud service.[7] |
|---|
| Google Secret Manager | Google Secret Manager stores API keys, passwords, certificates, and other sensitive data.[9] | Google documents using Cloud Functions to automate Secret Manager rotation.[9] | Google documents Cloud Functions for rotation and Cloud Audit Logs for activity.[9] | Google Secret Manager is offered as a Google Cloud service.[9] |
|---|
| Pulumi ESC | Pulumi ESC centralizes secrets and provides access through CLI, API, SDKs, and Kubernetes operators.[10] | Pulumi pricing lists automatic secrets rotation.[11] | Pulumi ESC lists integrations with HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and 1Password.[10] | Not documented[10] |
|---|
| Securden Password Vault for Enterprises | Securden documents DevOps secrets management through tools, CLI, and SDKs.[12] | Not documented[12] | Not documented[12] | Securden documents SaaS and on-premises deployment models.[12] |
|---|
| Psono | Psono API keys can integrate stored passwords into build pipelines or startup scripts.[13] | Psono’s Security Report audits password age, complexity, and length.[13] | Psono documents browser support and multifactor authentication with YubiKey, Duo, TOTP apps, and FIDO WebAuthn.[14] [13] | Psono offers self-hosted deployment and SaaS.[14] |
|---|
| Password Depot | Password Depot lists SSH keys, API tokens, and DevOps automation workflows.[15] [15] | Not documented[15] | Password Depot names Active Directory, Microsoft Entra ID, and a REST API for DevOps workflows.[15] | Password Depot supports on-premises operation and deployment in a customer Azure tenant.[15] |
|---|
| Passwork | Passwork lists secrets management and CI/CD workflows.[16] | Not documented[16] | Passwork lists Active Directory, LDAP, SSO integration, and API access.[16] | Passwork describes on-premise deployment and cloud infrastructures.[17] |
|---|
