CipherTrust Secrets Management vs Phase
CipherTrust Secrets Management
cpl.thalesgroup.comPhase
phase.devSide by side
| Figure | CipherTrust Secrets Management | Phase |
|---|---|---|
| Price from | — | $10/mo |
| Free plan | — | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · Secrets Management Tools | 7.7 (#18) | 8.1 (#11) |
| Headquarters | Meudon, France | Dover, Delaware, United States |
| Integrations | Named third-party integrations include GitHub, Kubernetes, and OpenShift, with more available. | Listed integrations include AWS, Azure, HashiCorp Vault, Docker, Kubernetes, Cloudflare, GitHub, GitLab, Vercel and Railway. |
| Support | The product page invites customers to contact a Data Security Specialist for questions about CSM. | Pricing lists community, email and Slack support, with dedicated live support and SLAs as an optional add-on. |
Plans
In their own words
CipherTrust Secrets Management
CipherTrust Secrets Management, powered by Akeyless Vault, centralizes secrets, credentials, certificates, API keys, and tokens for DevOps tools and cloud workloads. It can create, store, rotate, and remove these items, with use cases including automated credential rotation, secrets sharing, just-in-time secret generation, and audit logs of secret use. Thales describes support for hybrid and multi-cloud environments, multiple tenants, on-premises systems, and legacy systems. Named integrations include GitHub, Kubernetes, and OpenShift. The product supports dynamic secrets, CI/CD injection, secret rotation, Kubernetes integration, and audit logs. Authentication standards listed are FIDO2.1, U2F, and WebAuthn, with NFC support; biometric unlock is not supported. CSM is available through self-hosted and web access, with a cloud deployment model also listed. It can run independently or alongside CipherTrust Manager, but needs a separate license. Pricing is on request, and a 90-day free trial is available.
Phase
Phase is an open-source platform for managing application secrets from development through production. It runs as a managed cloud service or on your infrastructure, including in air-gapped environments. Phase says end-to-end encryption is enabled by default, with servers storing ciphertext in that mode. Its CLI keeps secrets encrypted at rest locally and can inject them while offline; it also installs skills for Claude Code, Codex, Cursor, OpenCode, and VS Code Copilot to work with secrets using natural language. Teams can assign managed or custom roles by app and environment, set IP allow-lists, review records of access and changes, and use point-in-time rollback. Integrations include AWS, Azure, HashiCorp Vault, Docker, Kubernetes, Cloudflare, GitHub, GitLab, Vercel, and Railway. Phase lists SOC 2 Type 2 and penetration testing by Oneleet. The Free plan is limited to 5 users or service accounts, 3 apps, and 3 environments. Pro costs $10 per month, billed annually at $120 ($144 shown), with a 14-day trial.