CipherTrust Secrets Management vs Doppler
CipherTrust Secrets Management
cpl.thalesgroup.comDoppler
doppler.comSide by side
| Figure | CipherTrust Secrets Management | Doppler |
|---|---|---|
| Price from | — | $8/mo |
| Free plan | — | — |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · Secrets Management Tools | 7.7 (#18) | 8.6 (#2) |
| Founded | 2000 | 2018 |
| Headquarters | Meudon, France | Covina, California, United States |
| Integrations | Named third-party integrations include GitHub, Kubernetes, and OpenShift, with more available. | Listed integrations include AWS Secrets Manager, Terraform Cloud, GitHub Actions, Kubernetes, GCP Secret Manager, Azure Key Vault, Vercel, and Okta. |
| Purpose | CipherTrust Secrets Management, powered by Akeyless Vault, protects and automates access to secrets across DevOps tools and cloud workloads. | Doppler is a secrets manager for securely storing and managing sensitive application secrets through a dashboard, API, and command-line tool. |
| Support | The product page invites customers to contact a Data Security Specialist for questions about CSM. | The Team plan includes priority support, while Enterprise offers enterprise support options. |
Plans
In their own words
CipherTrust Secrets Management
CipherTrust Secrets Management, powered by Akeyless Vault, centralizes secrets, credentials, certificates, API keys, and tokens for DevOps tools and cloud workloads. It can create, store, rotate, and remove these items, with use cases including automated credential rotation, secrets sharing, just-in-time secret generation, and audit logs of secret use. Thales describes support for hybrid and multi-cloud environments, multiple tenants, on-premises systems, and legacy systems. Named integrations include GitHub, Kubernetes, and OpenShift. The product supports dynamic secrets, CI/CD injection, secret rotation, Kubernetes integration, and audit logs. Authentication standards listed are FIDO2.1, U2F, and WebAuthn, with NFC support; biometric unlock is not supported. CSM is available through self-hosted and web access, with a cloud deployment model also listed. It can run independently or alongside CipherTrust Manager, but needs a separate license. Pricing is on request, and a 90-day free trial is available.
Doppler
Doppler is a secrets manager for storing and managing sensitive application secrets through a dashboard, API, and command-line tool. It centralizes secret management with config syncs, secret referencing, and automatic rotation on eligible plans. Its MCP server lets AI agents request secrets natively, and Doppler says per-seat pricing adds no fees for AI agents or other non-human identities. Developers can use a CLI, SDKs, API, webhooks, and a VS Code extension with two-way sync. Listed integrations include AWS Secrets Manager, Terraform Cloud, GitHub Actions, Kubernetes, GCP Secret Manager, Azure Key Vault, Vercel, and Okta. Security controls include scoped tokens, fine-grained access, breach detection, encrypted fallback files, and trusted IP allow lists. Doppler says it encrypts and tokenizes secrets using AES-256-GCM and is SOC 2 and ISO 27001 certified. Deployment is available in the cloud or on-prem. The Developer plan is free for three users, with additional users at $8 a month. Team costs $21 per user per month and is free for 14 days. Enterprise pricing is custom.