AWS Secrets Manager vs Envy

AWS Secrets Manager

Figure	AWS Secrets Manager	Envy
Price from	$0.40/mo	$125/mo
Free plan	Yes	—
Free trial	—	—
Open source	—	—
Web	Yes	Yes
API	Yes	Yes
Self-hosted	—	Yes
Plans published	2	3
Spec score · Secrets Management Tools	8.5 (#3)	7.6 (#21)
Access control	AWS Identity and Access Management provides fine-grained IAM and resource-based policies for controlling access to secrets.	Envy has workspace roles, project roles, and environment access grants, so workspace administrator status does not automatically grant access to production secrets.
Encryption	Secrets Manager encrypts secrets at rest with AWS Key Management Service keys and transmits retrieved secrets over TLS.	Secrets are encrypted on the client before they are sent, and the backend stores ciphertext rather than plaintext secret values.
Purpose	AWS Secrets Manager manages access to applications, services, IT resources, database credentials, API keys, and other secrets throughout their lifecycle.	Envy is self-hosted secrets management for engineering teams sharing secrets across environments and CI/CD pipelines.

AWS Secrets Manager has no write-up on Specifiction yet; its figures are above.

Envy has no write-up on Specifiction yet; its figures are above.