Doppler vs Keyway

Doppler is a secrets manager for storing and managing sensitive application secrets through a dashboard, API, and command-line tool. It centralizes secret management with config syncs, secret referencing, and automatic rotation on eligible plans. Its MCP server lets AI agents request secrets natively, and Doppler says per-seat pricing adds no fees for AI agents or other non-human identities. Developers can use a CLI, SDKs, API, webhooks, and a VS Code extension with two-way sync. Listed integrations include AWS Secrets Manager, Terraform Cloud, GitHub Actions, Kubernetes, GCP Secret Manager, Azure Key Vault, Vercel, and Okta. Security controls include scoped tokens, fine-grained access, breach detection, encrypted fallback files, and trusted IP allow lists. Doppler says it encrypts and tokenizes secrets using AES-256-GCM and is SOC 2 and ISO 27001 certified. Deployment is available in the cloud or on-prem. The Developer plan is free for three users, with additional users at $8 a month. Team costs $21 per user per month and is free for 14 days. Enterprise pricing is custom.

Keyway is an open-source secrets manager that injects environment variables into a running process instead of storing them in a project.env file. Its `keyway run` command makes secrets available while that process runs; they disappear when it stops. Keyway says AI agents reading files from disk cannot see secrets injected this way. Access follows GitHub repository permissions, so removing a person’s repository access also revokes their Keyway access.

Secrets use AES-256-GCM encryption with a unique random IV for each secret. An isolated crypto service holds the encryption key, which Keyway says does not touch its API server or database; connections among the CLI, API, crypto service, and database use TLS 1.3. An audit trail records who accessed which secrets, when, and from where. Documented provider workflows cover Vercel, Netlify, and Railway. CLI binaries are listed for macOS, Linux, and Windows, and the full stack can be self-hosted with Docker Compose. The Free plan includes unlimited public repositories, one private repository, three environments per repository, two provider integrations, and unlimited collaborators. Paid plans are Pro at €9 a month, Team at €19 a month, and Business at €39 a month.