Skip to content
SPECIFICTION
Get listed

CipherTrust Secrets Management vs Phase

CipherTrust Secrets Management

cpl.thalesgroup.com

Phase

phase.dev

Side by side

FigureCipherTrust Secrets ManagementPhase
Price from—$10/mo
Free plan—Yes
Free trialYesYes
Open source——
WebYesYes
Windows—Yes
macOS—Yes
Linux—Yes
API—Yes
Self-hostedYesYes
Plans published13
Spec score · Secrets Management Tools7.7 (#18)8.1 (#11)
HeadquartersMeudon, FranceDover, Delaware, United States
IntegrationsNamed third-party integrations include GitHub, Kubernetes, and OpenShift, with more available.Listed integrations include AWS, Azure, HashiCorp Vault, Docker, Kubernetes, Cloudflare, GitHub, GitLab, Vercel and Railway.
SupportThe product page invites customers to contact a Data Security Specialist for questions about CSM.Pricing lists community, email and Slack support, with dedicated live support and SLAs as an optional add-on.

Plans

CipherTrust Secrets Management

  • 90-Day Free TrialFree

CipherTrust Secrets Management pricing →

Phase

  • FreeFree
  • Pro$10 a month
  • Enterprise$25 a month

Phase pricing →

In their own words

CipherTrust Secrets Management

CipherTrust Secrets Management, powered by Akeyless Vault, centralizes secrets, credentials, certificates, API keys, and tokens for DevOps tools and cloud workloads. It can create, store, rotate, and remove these items, with use cases including automated credential rotation, secrets sharing, just-in-time secret generation, and audit logs of secret use. Thales describes support for hybrid and multi-cloud environments, multiple tenants, on-premises systems, and legacy systems. Named integrations include GitHub, Kubernetes, and OpenShift. The product supports dynamic secrets, CI/CD injection, secret rotation, Kubernetes integration, and audit logs. Authentication standards listed are FIDO2.1, U2F, and WebAuthn, with NFC support; biometric unlock is not supported. CSM is available through self-hosted and web access, with a cloud deployment model also listed. It can run independently or alongside CipherTrust Manager, but needs a separate license. Pricing is on request, and a 90-day free trial is available.

Visit cpl.thalesgroup.com

Phase

Phase is an open-source platform for managing application secrets from development through production. It runs as a managed cloud service or on your infrastructure, including in air-gapped environments. Phase says end-to-end encryption is enabled by default, with servers storing ciphertext in that mode. Its CLI keeps secrets encrypted at rest locally and can inject them while offline; it also installs skills for Claude Code, Codex, Cursor, OpenCode, and VS Code Copilot to work with secrets using natural language. Teams can assign managed or custom roles by app and environment, set IP allow-lists, review records of access and changes, and use point-in-time rollback. Integrations include AWS, Azure, HashiCorp Vault, Docker, Kubernetes, Cloudflare, GitHub, GitLab, Vercel, and Railway. Phase lists SOC 2 Type 2 and penetration testing by Oneleet. The Free plan is limited to 5 users or service accounts, 3 apps, and 3 environments. Pro costs $10 per month, billed annually at $120 ($144 shown), with a 14-day trial.

Visit phase.dev