Oracle Cloud Infrastructure Secret Management vs PX Secrets

Oracle Cloud Infrastructure Secret Management stores, retrieves, rotates, and manages credentials used by applications and cloud environments. It supports database passwords, access tokens, third-party API keys, SSH private keys, application configuration secrets, and OAuth2 or JWT signing credentials. Administrators and applications can access secrets through APIs, SDKs, the CLI, and OCI Console. OCI Vault keys encrypt secrets, while OCI manages encryption, decryption, access control, and audit logging; OCI IAM policies provide granular permissions. Automatic rotation can run at intervals from one to 12 months and integrates with Autonomous AI Database and OCI Functions. Secrets can be replicated to as many as three destination regions, where replicas are read-only and inherit changes from the source. A tenancy can contain up to 5,000 secrets, with up to 30 active versions and 30 versions pending deletion per secret. The service is aimed at applications and cloud environments that need centrally managed secrets rather than credentials embedded in source code or configuration files. It is listed as free, though no price is provided.

PX Secrets is a free, open-source secrets manager that stores an encrypted vault on the user’s machine. SOPS and AGE encrypt the vault on disk, while the project says the private AGE key is read directly by SOPS rather than handled by PX Secrets. A dark web interface offers search and service grouping, with an optional native desktop window through pywebview. The CLI lists services and retrieves named secrets for scripts. A local API supports runtime retrieval by scripts and AI agents, and the application can run headlessly as a background service. Docker deployment and CI/CD use are documented. The project states that it makes no network calls and collects no telemetry, analytics, usage tracking, or crash reports. Clipboard copies clear after 30 seconds, and temporary plaintext files are deleted after encryption. Linux and macOS are supported; Windows may work but is untested. Requirements include Python 3.9+, SOPS, and AGE. The software is licensed under AGPL-3.0.