Alternatives to AWS Secrets Manager

Doppler

Doppler suits developers, DevOps, and security teams managing application secrets across workflows.

dotenvx suits software developers and teams managing application secrets, including teams working with coding agents.

Infisical suits organizations managing application credentials, certificates, and privileged access across environments.

KeyEnv suits development teams managing secrets across multiple environments or integrating secret injection into CI/CD workflows.

It suits developers and teams wanting an open-source, self-hosted secrets store with CI/CD injection, Kubernetes deployment options, versioning, and audit controls.

Oracle Cloud Infrastructure Secret Management

OCI Secret Management is aimed at application and cloud environment operators who need centrally managed credentials.

Phase

Phase suits teams that need to manage application secrets across development and production, whether through a managed service or self-hosting.

OpenBao

OpenBao suits teams that need self-managed secret storage, dynamic credentials, encryption services, and policy-based access.

secr

The Free plan is described for solo developers and small side projects.

SikkerKey

SikkerKey is aimed at software engineers, DevOps teams, and organizations managing application secrets.

Keyway

It suits developers or teams that want process-scoped secret injection with GitHub-based access.

PX Secrets suits developers, AI builders, homelabbers, and sysadmins who want a self-hosted local vault with CLI, API, or web access.

CipherTrust Secrets Management

It suits DevSecOps and security teams managing secrets across hybrid, multi-cloud, on-premises, or legacy environments.

CyberArk Secrets Manager

It suits security teams managing nonhuman credentials, and teams running applications, containers, CI/CD pipelines or other workloads.

Britive Secrets Manager

Britive Secrets Manager suits enterprise hybrid environments where stored secrets remain necessary alongside just-in-time access.

Barbican suits OpenStack operators who need to manage secrets through an API and configure software- or hardware-backed stores.

Stashbase may suit developers and teams managing application secrets across projects or environments.

Teller suits developers who need to manage secrets across development, testing, builds, or CI workflows.