Security & Compliance
Secrets Management
Tools for storing, managing, rotating, and distributing application secrets, certificates, keys, and privileged credentials.
Best Secrets Management tools by public signals
These picks are computed from scored public evidence. Use the openness column in the ranking to separate OSI-approved, source-available, open-core, proprietary, and unverified-license tools.
Use Case Rankings
Ordered by ToolVitals score, then health, shipping, confidence, GitHub stars, and name.
| # | Tool | Health | Shipping | Openness | Stars | Score | Status |
|---|---|---|---|---|---|---|---|
| 01 | Infisical Infisical is the open-source platform for secrets, certificates, and privileged access management. | 98 | 99 | OSI-approved OSS | 29.2k | 99 | Active |
| 02 | certd 开源SSL证书管理工具；全自动证书申请、更新、续期；通配符证书，泛域名证书申请；证书自动化部署到阿里云、腾讯云、主机、群晖、宝塔；https证书，pfx证书，der证书，TLS证书，nginx证书自动续签自动部署 | 95 | 96 | OSI-approved OSS | 5k | 96 | Active |
| 03 | OneCLI Open-source credential vault for AI agents. | 95 | 93 | OSI-approved OSS | 3.5k | 94 | Active |
| 04 | Phase Application secrets and configuration management for developers. | 94 | 94 | OSI-approved OSS | 917 | 94 | Active |
| 05 | OpenBao Operator Kubernetes operator for managing OpenBao clusters and secrets infrastructure. | 92 | 92 | OSI-approved OSS | 22 | 92 | Active |
| 06 | SecretZero Git-native secrets-as-code platform. | 83 | 86 | OSI-approved OSS | 8 | 84 | Active |
| 07 | Secutils Open source security toolbox for engineers and researchers. | 77 | 76 | OSI-approved OSS | 101 | 76 | Active |
| 08 | Shelve Open-source secret & environment management. Secure, simple, collaborative. CLI & Github Sync | 66 | 47 | OSI-approved OSS | 456 | 58 | Warning |
| 09 | Arcan Open-source secrets management platform. | 37 | 14 | OSI-approved OSS | 0 | 27 | Critical |
| 10 | Relic Encrypted secrets manager for sharing sensitive data. | 16 | 4 | OSI-approved OSS | 198 | 11 | Critical |
Not Scored
Tracked for context, but excluded from rankings because comparable open/source-visible evidence is unavailable.
Envy CLI
Open-source CLI for secret injection and management.
ToolVitals does not score proprietary or unknown-license tools because their public source evidence is not comparable to open/source-visible projects.Sigillo
Self-hostable secrets management platform and open-source Doppler alternative.
ToolVitals does not score proprietary or unknown-license tools because their public source evidence is not comparable to open/source-visible projects.Zexio ZMS
High-performance secrets management system.
ToolVitals does not score proprietary or unknown-license tools because their public source evidence is not comparable to open/source-visible projects.