Alternatives to AWS Secrets Manager in 2026

SOPS getsops

Simple and flexible tool for managing secrets

Developer tool Production-ready You keep infrastructure config in Git and want secrets encrypted alongside it, often with Flux or Helm.

★ 24k MPL-2.0 Go Active, pushed today

OpenBao openbao

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

Complete system Production-ready You need Vault-style secrets management but want to avoid HashiCorp's BSL license.

★ 8.8k MPL-2.0 Go Active, pushed today

Dotenvx dotenvx

a secure dotenv—from the creator of `dotenv`

Developer tool Production-ready Your team shares .env files and wants them encrypted in the repo without adopting a secrets server.

★ 5.9k BSD-3-Clause JavaScript Active, pushed 3 days ago

Git-secret sobolevn

:busts_in_silhouette: A bash-tool to store your private data inside a git repository.

Developer tool Usable A small team wants a few secret files in Git and already uses GPG.

★ 4.1k MIT Shell Active, pushed 35 days ago

Secretspec cachix

A declarative interface for every secret provider.

Developer tool Experimental You want one declaration of required secrets that works across developer machines and CI with different backends.

★ 1.6k Apache-2.0 Rust Active, pushed today

Pwd.sh drduh

Manage secrets with Bash and GnuPG symmetric encryption

Developer tool Usable You want a tiny, auditable shell-based secret store that can be decrypted with plain GnuPG.

★ 1.6k MIT Shell Active, pushed 15 days ago

WrongSecrets OWASP

Vulnerable app with examples showing how to not use secrets

List, course or other material Production-ready You run security training or want developers to learn secrets-management mistakes hands-on.

★ 1.5k AGPL-3.0 HTML Active, pushed today

Berglas GoogleCloudPlatform

A tool for managing secrets on Google Cloud

Developer tool Production-ready You run workloads on Google Cloud and want a simple way to load secrets into Cloud Run or GKE apps.

★ 1.3k Apache-2.0 Go Active, pushed 12 days ago

FreeIPA freeipa

Mirror of FreeIPA, an integrated security information management solution

Complete system Production-ready You manage many Linux servers and need centralised logins, sudo rules and certificates, often alongside Active Directory.

★ 1.3k GPL-3.0 Python Active, pushed today

Kingfisher mongodb

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

Developer tool Usable You want fast secret scanning with live validation in pre-commit hooks or CI.

★ 1.3k Apache-2.0 Rust Active, pushed 4 days ago

Teller tellerops

Cloud native secrets management for developers - never leave your command line for secrets.

Developer tool Usable Developers need secrets from several providers locally without copying them into .env files.

★ 3.2k Apache-2.0 Rust Slowing, pushed 9 months ago

React-native-dotenv dotenvx

Load .env into React Native - with support for multiple .env files.

Developer tool Production-ready You configure a React Native app per environment with .env files.

★ 858 MIT JavaScript Active, pushed today

Keyshade keyshade-xyz

Realtime secret and configuration management tool

Complete system Usable A small team wants a Doppler-style secrets manager they can self-host.

★ 768 MIT TypeScript Active, pushed 3 days ago

Keypaste notinferred

A KeePass-compatible password and secrets manager for people who work with AI agents.

Complete system Experimental You use AI coding agents and want them to use API keys only with your approval.

★ 752 AGPL-3.0 C# Active, pushed yesterday

Onepassword-operator 1Password

The 1Password Connect Kubernetes Operator provides the ability to integrate Kubernetes Secrets with 1Password. The operator also handles autorestarting deployments when 1Password items are updated.

Integration Production-ready Your organisation keeps secrets in 1Password and runs workloads on Kubernetes.

★ 627 MIT Go Active, pushed 10 days ago

Purse drduh

Manage secrets with Bash and GnuPG asymmetric encryption (YubiKey)

Developer tool Usable You have a YubiKey with GPG keys and want a minimal hardware-backed secret store.

★ 616 MIT Shell Active, pushed 14 days ago

Tomb dyne

the Crypto Undertaker

Developer tool Usable You want simple encrypted folders on Linux managed from the shell.

★ 1.6k GPL-3.0 Shell Slowing, pushed 11 months ago

GitHound tillson

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

Developer tool Usable Your security team needs to find your organisation's own secrets leaked on public GitHub.

★ 1.5k MIT Go Slowing, pushed 9 months ago

Prismor PrismorSec

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)

Developer tool Experimental You let coding agents run commands and want a policy check and audit dashboard in front of them.

★ 472 Apache-2.0 Python Active, pushed today

Shelve HugoRCD

Open-source secret & environment management. Secure, simple, collaborative. CLI & Github Sync

Complete system Usable A small team wants a simple shared place for environment variables that it can self-host.

★ 461 Apache-2.0 TypeScript Active, pushed today

Terraform-provider-onepassword 1Password

Use the 1Password Terraform Provider to reference, create, or update items in your 1Password Vaults.

Integration Production-ready Your infrastructure code in Terraform needs secrets stored in 1Password.

★ 406 MIT Go Active, pushed 4 days ago

CLI DopplerHQ

The official CLI for interacting with your Doppler secrets and configuration.

Developer tool Production-ready Your team uses Doppler for secrets management.

★ 401 Apache-2.0 Go Active, pushed 11 days ago

Secretless Broker cyberark

Secure your apps by making them Secretless

Building block Usable You use CyberArk Conjur and want apps on Kubernetes to reach databases without handling passwords.

★ 396 Apache-2.0 Go Active, pushed 2 months ago

Load-secrets-action 1Password

Load secrets from 1Password into your GitHub Actions jobs

Integration Production-ready You keep CI secrets in 1Password instead of GitHub's own secret store.

★ 356 MIT TypeScript Active, pushed 5 days ago

Kloak spinningfactory

Cloud native zero trust security for AI agents run environments

Building block Experimental You run untrusted code or AI agents on Kubernetes that must call APIs without holding the keys.

★ 296 AGPL-3.0 C Active, pushed today

Vault-plugin-secrets-onepassword 1Password

Hashicorp Vault plugin integrates with 1Password Connect to allow for the retrieval, creation, and deletion of items stored in 1Password.

Integration Usable Your applications read secrets from Vault but your team manages them in 1Password.

★ 239 MIT Go Active, pushed 10 days ago

Connect-sdk-python 1Password

Python SDK for 1Password Connect

Building block Production-ready A Python service needs secrets from 1Password and you already run Connect.

★ 234 MIT Python Active, pushed 6 days ago

Scrt loderunner

A command-line secret manager for developers, sysadmins, and devops.

Developer tool Experimental You want a minimal personal CLI vault for scripts and sysadmin work.

★ 229 Apache-2.0 Go Active, pushed today

KubeVault kubevault

:closed_lock_with_key: KubeVault Documentation

List, course or other material Usable You are evaluating KubeVault and need its docs; the operator code lives in other repositories.

★ 223 Apache-2.0 Shell Active, pushed 5 days ago

Hashicorp-vault-plugin jenkinsci

Jenkins plugin to populate environment variables from secrets stored in HashiCorp's Vault.

Integration Production-ready You run Jenkins and keep build secrets in Vault or OpenBao.

★ 222 MIT Java Active, pushed 3 months ago

HashiCorp Vault Enterprise HashiCorp

Building block Production-ready A large organisation needs central secrets management across many teams and clouds, with compliance features.

Commercial

1Password Secrets Automation AgileBits

Securely store, manage, automate, and share secrets for your applications and infrastructure where and when you need them. 1Password secrets management has you covered.

Developer tool Production-ready Your company already uses 1Password and wants infrastructure secrets in the same place as staff passwords.

Commercial

Doppler Doppler

Doppler's secrets management platform helps teams secure, sync, and automate secrets across cloud and on-prem environments with security and developer-friendly workflows.

Developer tool Production-ready A development team wants to stop passing .env files around and sync secrets to many platforms easily.

Commercial