Chamber vs SikkerKey
Chamber
github.com
SikkerKey
sikkerkey.comSide by side
| Figure | Chamber | SikkerKey |
|---|---|---|
| Price from | Free | $29/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 1 | 3 |
| Spec score · Secrets Management Tools | 8.2 (#8) | 8.0 (#14) |
| Encryption | The project specifies Argon2id key derivation and ChaCha20-Poly1305 encryption with 256-bit keys and 96-bit nonces. | Secrets use three-layer envelope encryption with per-secret AES-256-GCM data keys, per-project master keys and a separate root key. |
| Secret types | Supported types include passwords, API keys, environment variables, SSH keys, certificates, database credentials, and notes. | The platform supports standard, structured, managed, leased, certificate, canary and TTL secrets. |
Plans
In their own words
SikkerKey
SikkerKey is a secrets manager and vault for application and infrastructure credentials. It supports standard, structured, managed, leased, certificate, canary, and TTL secrets, as well as secret rotation and dynamic secrets. Machines authenticate by signing each request with an Ed25519 private key that stays on the host. Teams can connect it to CI/CD, containers, app platforms, serverless functions, servers, and on-premise systems through its CLI, SDKs, or signed HTTP. Official SDKs are available for Go, Python, Node.js,.NET, Kotlin, and PHP. Its CLI supports Linux x64 and ARM64, macOS Intel and Apple Silicon, and Windows x64. The service describes a three-layer encryption design; its MCP server gives AI agents a separate identity class that cannot retrieve plaintext secret values. SikkerKey says its vault, secrets, and audit trail stay in the EU and are operated from Denmark. The free Developer plan is free and includes 10 machines; paid plans start at $29/mo. Every plan includes direct in-dashboard support and unlimited secret, project, read-volume, and rotation counts.