Skip to content
SPECIFICTION
Get listed

CipherTrust Secrets Management

cpl.thalesgroup.com

Free trial WebSelf-hosted

What it is

CipherTrust Secrets Management, powered by Akeyless Vault, centralizes secrets, credentials, certificates, API keys, and tokens for DevOps tools and cloud workloads. It can create, store, rotate, and remove these items, with use cases including automated credential rotation, secrets sharing, just-in-time secret generation, and audit logs of secret use. Thales describes support for hybrid and multi-cloud environments, multiple tenants, on-premises systems, and legacy systems. Named integrations include GitHub, Kubernetes, and OpenShift. The product supports dynamic secrets, CI/CD injection, secret rotation, Kubernetes integration, and audit logs. Authentication standards listed are FIDO2.1, U2F, and WebAuthn, with NFC support; biometric unlock is not supported. CSM is available through self-hosted and web access, with a cloud deployment model also listed. It can run independently or alongside CipherTrust Manager, but needs a separate license. Pricing is on request, and a 90-day free trial is available.

Spec sheet

Purpose
CipherTrust Secrets Management, powered by Akeyless Vault, protects and automates access to secrets across DevOps tools and cloud workloads.Read 3 Oct 2026 · cpl.thalesgroup.com
Trial
Thales offers a free 90-day trial of CipherTrust Secrets Management powered by Akeyless.Read 3 Oct 2026 · cpl.thalesgroup.com
Integrations
Named third-party integrations include GitHub, Kubernetes, and OpenShift, with more available.Read 3 Oct 2026 · cpl.thalesgroup.com
Support
The product page invites customers to contact a Data Security Specialist for questions about CSM.Read 3 Oct 2026 · cpl.thalesgroup.com
Headquarters
Meudon, FranceRead 28 Sep 2026 · cpl.thalesgroup.com
Founded
2000Read 28 Sep 2026 · cpl.thalesgroup.com
CipherTrust Manager access
CSM is accessible through a tile in the CipherTrust Manager dashboard using the same credentials as CipherTrust Manager.Read 3 Oct 2026 · cpl.thalesgroup.com
Deployment environments
Thales says CSM works across hybrid and multi-cloud environments, multi-tenants, on-premises, and legacy systems.Read 3 Oct 2026 · cpl.thalesgroup.com
Licensing
CSM requires a separate license purchase from CipherTrust Manager and can be used independently or with a CipherTrust Manager license.Read 3 Oct 2026 · cpl.thalesgroup.com
Lifecycle automation
It automates creating, storing, rotating, and removing secrets.Read 3 Oct 2026 · cpl.thalesgroup.com
Management
The product provides centralized management for all secret types and is described as easy to use for DevSecOps.Read 3 Oct 2026 · cpl.thalesgroup.com
Secret types
The product covers secrets, credentials, certificates, API keys, and tokens.Read 3 Oct 2026 · cpl.thalesgroup.com
Use cases
Listed use cases include secrets storage, automated credential rotation, secrets sharing, just-in-time secret generation and management, and logs of secret use for auditing and compliance.Read 3 Oct 2026 · cpl.thalesgroup.com

Plans and prices

90-Day Free Trial Free 90 days Trial duration: 90 days Read 3 Oct 2026 · cpl.thalesgroup.com

Every CipherTrust Secrets Management plan and price →

Strong points and limits

Strong points

  • Automates secret creation, rotation, and removal
  • Supports dynamic secrets and CI/CD injection
  • Includes audit logs for secret use
  • Works across hybrid and multi-cloud environments
  • Offers a 90-day free trial

Limits

  • Pricing is available only on request
  • Requires a separate CipherTrust Manager license
  • Biometric unlock is not supported

Who it suits

It suits DevSecOps and security teams managing secrets across hybrid, multi-cloud, on-premises, or legacy environments. Teams using GitHub, Kubernetes, or OpenShift may find the listed integrations relevant.

Verdict

CipherTrust Secrets Management provides centralized secret lifecycle controls, integrations, and auditing across varied deployment environments. Its separate licensing requirement and request-based pricing should be confirmed before purchase.

Where Specifiction places it

Alternatives to CipherTrust Secrets ManagementAll alternatives →