CipherTrust Secrets Management
cpl.thalesgroup.com
What it is
CipherTrust Secrets Management, powered by Akeyless Vault, centralizes secrets, credentials, certificates, API keys, and tokens for DevOps tools and cloud workloads. It can create, store, rotate, and remove these items, with use cases including automated credential rotation, secrets sharing, just-in-time secret generation, and audit logs of secret use. Thales describes support for hybrid and multi-cloud environments, multiple tenants, on-premises systems, and legacy systems. Named integrations include GitHub, Kubernetes, and OpenShift. The product supports dynamic secrets, CI/CD injection, secret rotation, Kubernetes integration, and audit logs. Authentication standards listed are FIDO2.1, U2F, and WebAuthn, with NFC support; biometric unlock is not supported. CSM is available through self-hosted and web access, with a cloud deployment model also listed. It can run independently or alongside CipherTrust Manager, but needs a separate license. Pricing is on request, and a 90-day free trial is available.
Spec sheet
- Purpose
- CipherTrust Secrets Management, powered by Akeyless Vault, protects and automates access to secrets across DevOps tools and cloud workloads.Read 3 Oct 2026 · cpl.thalesgroup.com
- Trial
- Thales offers a free 90-day trial of CipherTrust Secrets Management powered by Akeyless.Read 3 Oct 2026 · cpl.thalesgroup.com
- Integrations
- Named third-party integrations include GitHub, Kubernetes, and OpenShift, with more available.Read 3 Oct 2026 · cpl.thalesgroup.com
- Support
- The product page invites customers to contact a Data Security Specialist for questions about CSM.Read 3 Oct 2026 · cpl.thalesgroup.com
- Headquarters
- Meudon, FranceRead 28 Sep 2026 · cpl.thalesgroup.com
- Founded
- 2000Read 28 Sep 2026 · cpl.thalesgroup.com
- CipherTrust Manager access
- CSM is accessible through a tile in the CipherTrust Manager dashboard using the same credentials as CipherTrust Manager.Read 3 Oct 2026 · cpl.thalesgroup.com
- Deployment environments
- Thales says CSM works across hybrid and multi-cloud environments, multi-tenants, on-premises, and legacy systems.Read 3 Oct 2026 · cpl.thalesgroup.com
- Licensing
- CSM requires a separate license purchase from CipherTrust Manager and can be used independently or with a CipherTrust Manager license.Read 3 Oct 2026 · cpl.thalesgroup.com
- Lifecycle automation
- It automates creating, storing, rotating, and removing secrets.Read 3 Oct 2026 · cpl.thalesgroup.com
- Management
- The product provides centralized management for all secret types and is described as easy to use for DevSecOps.Read 3 Oct 2026 · cpl.thalesgroup.com
- Secret types
- The product covers secrets, credentials, certificates, API keys, and tokens.Read 3 Oct 2026 · cpl.thalesgroup.com
- Use cases
- Listed use cases include secrets storage, automated credential rotation, secrets sharing, just-in-time secret generation and management, and logs of secret use for auditing and compliance.Read 3 Oct 2026 · cpl.thalesgroup.com
Plans and prices
Strong points and limits
Strong points
- Automates secret creation, rotation, and removal
- Supports dynamic secrets and CI/CD injection
- Includes audit logs for secret use
- Works across hybrid and multi-cloud environments
- Offers a 90-day free trial
Limits
- Pricing is available only on request
- Requires a separate CipherTrust Manager license
- Biometric unlock is not supported
Who it suits
It suits DevSecOps and security teams managing secrets across hybrid, multi-cloud, on-premises, or legacy environments. Teams using GitHub, Kubernetes, or OpenShift may find the listed integrations relevant.
Verdict
CipherTrust Secrets Management provides centralized secret lifecycle controls, integrations, and auditing across varied deployment environments. Its separate licensing requirement and request-based pricing should be confirmed before purchase.
Where Specifiction places it
- Secrets Management Tools#18 of 467.7