Best Secrets Management tools by public signals

These picks are computed from scored public evidence. Use the openness column in the ranking to separate OSI-approved, source-available, open-core, proprietary, and unverified-license tools.

Use Case Rankings

Ordered by ToolVitals score, health, shipping, confidence, and then adoption as a tie-breaker.

# Tool Health Shipping Openness Stars Score Status
01 Infisical
Infisical is the open-source platform for secrets, certificates, and privileged access management.
100 100 OSI-approved OSS 28.4k 100 Active
02 OneCLI
Open-source credential vault for AI agents.
91 89 OSI-approved OSS 2.9k 93 Active
03 Phase
Application secrets and configuration management for developers.
90 89 OSI-approved OSS 899 92 Active
04 certd
开源SSL证书管理工具;全自动证书申请、更新、续期;通配符证书,泛域名证书申请;证书自动化部署到阿里云、腾讯云、主机、群晖、宝塔;https证书,pfx证书,der证书,TLS证书,nginx证书自动续签自动部署
87 95 OSI-approved OSS 4.9k 92 Active
05 OpenBao Operator
Kubernetes operator for managing OpenBao clusters and secrets infrastructure.
80 84 OSI-approved OSS 18 84 Active
06 SecretZero
Git-native secrets-as-code platform.
72 76 OSI-approved OSS 6 81 Warning
07 Sigillo
Self-hostable secrets management platform and open-source Doppler alternative.
63 65 License unknown 40 73 Warning
08 Shelve
Open-source secret & environment management. Secure, simple, collaborative. CLI & Github Sync
65 40 OSI-approved OSS 437 66 Warning
09 Relic
Encrypted secrets manager for sharing sensitive data.
44 10 OSI-approved OSS 194 47 Critical
10 Arcan
Open-source secrets management platform.
39 17 OSI-approved OSS 0 44 Critical
11 Dotenv Vault
Secrets syncing platform for environment files.
36 0 OSI-approved OSS 1.2k 37 Critical
12 Zexio ZMS
High-performance secrets management system.
28 4 License unknown 0 37 Critical
13 EnvSecrets
Open-source, end-to-end encrypted CLI-first management of your environment secrets.
31 0 OSI-approved OSS 96 33 Critical
14 Envy CLI
Open-source CLI for secret injection and management.
28 0 License unknown 7 33 Critical
15 Envie
Self-hostable secrets manager and .env replacement.
15 0 OSI-approved OSS 127 28 Critical