Doppler vs SikkerKey
Doppler
doppler.com
SikkerKey
sikkerkey.comSide by side
| Figure | Doppler | SikkerKey |
|---|---|---|
| Price from | $8/mo | $29/mo |
| Free plan | — | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 3 | 3 |
| Spec score · Secrets Management Tools | 8.6 (#2) | 8.0 (#14) |
| AI access | Doppler says its MCP server lets AI agents request secrets natively without custom scripts or hardcoded credentials. | Its MCP server gives AI agents a separate identity class that cannot retrieve plaintext secret values. |
| CLI platforms | Doppler documents CLI installation for macOS and Windows and says its CLI supports major operating systems, including Linux. | The packaged CLI supports Linux x64 and ARM64, macOS Intel and Apple Silicon, and Windows x64. |
| Compliance | Doppler says it is SOC 2 certified and has achieved ISO 27001 certification. | The service processes data in the EEA and states that GDPR safeguards apply to its processing and transfers. |
| Encryption | Doppler states that it encrypts and tokenizes customer secrets and uses AES-256-GCM encryption. | Secrets use three-layer envelope encryption with per-secret AES-256-GCM data keys, per-project master keys and a separate root key. |
| Headquarters | Covina, California, United States | Denmark |
| Integrations | Listed integrations include AWS Secrets Manager, Terraform Cloud, GitHub Actions, Kubernetes, GCP Secret Manager, Azure Key Vault, Vercel, and Okta. | SikkerKey integrates through its CLI, SDKs or signed HTTP with CI/CD, containers, app platforms, serverless functions, servers and on-premise systems. |
| Support | The Team plan includes priority support, while Enterprise offers enterprise support options. | Direct in-dashboard support is included on every plan. |
Plans
In their own words
Doppler
Doppler is a secrets manager for storing and managing sensitive application secrets through a dashboard, API, and command-line tool. It centralizes secret management with config syncs, secret referencing, and automatic rotation on eligible plans. Its MCP server lets AI agents request secrets natively, and Doppler says per-seat pricing adds no fees for AI agents or other non-human identities. Developers can use a CLI, SDKs, API, webhooks, and a VS Code extension with two-way sync. Listed integrations include AWS Secrets Manager, Terraform Cloud, GitHub Actions, Kubernetes, GCP Secret Manager, Azure Key Vault, Vercel, and Okta. Security controls include scoped tokens, fine-grained access, breach detection, encrypted fallback files, and trusted IP allow lists. Doppler says it encrypts and tokenizes secrets using AES-256-GCM and is SOC 2 and ISO 27001 certified. Deployment is available in the cloud or on-prem. The Developer plan is free for three users, with additional users at $8 a month. Team costs $21 per user per month and is free for 14 days. Enterprise pricing is custom.
SikkerKey
SikkerKey is a secrets manager and vault for application and infrastructure credentials. It supports standard, structured, managed, leased, certificate, canary, and TTL secrets, as well as secret rotation and dynamic secrets. Machines authenticate by signing each request with an Ed25519 private key that stays on the host. Teams can connect it to CI/CD, containers, app platforms, serverless functions, servers, and on-premise systems through its CLI, SDKs, or signed HTTP. Official SDKs are available for Go, Python, Node.js,.NET, Kotlin, and PHP. Its CLI supports Linux x64 and ARM64, macOS Intel and Apple Silicon, and Windows x64. The service describes a three-layer encryption design; its MCP server gives AI agents a separate identity class that cannot retrieve plaintext secret values. SikkerKey says its vault, secrets, and audit trail stay in the EU and are operated from Denmark. The free Developer plan is free and includes 10 machines; paid plans start at $29/mo. Every plan includes direct in-dashboard support and unlimited secret, project, read-volume, and rotation counts.