Security & Compliance
Secrets Management
Tools for storing, managing, rotating, and distributing application secrets, certificates, keys, and privileged credentials.
Best Secrets Management tools by public signals
These picks are computed from scored public evidence. Use the openness column in the ranking to separate OSI-approved, source-available, open-core, proprietary, and unverified-license tools.
Use Case Rankings
Ordered by ToolVitals score, health, shipping, confidence, and then adoption as a tie-breaker.
| # | Tool | Health | Shipping | Openness | Stars | Score | Status |
|---|---|---|---|---|---|---|---|
| 01 | Infisical Infisical is the open-source platform for secrets, certificates, and privileged access management. | 100 | 100 | OSI-approved OSS | 28.4k | 100 | Active |
| 02 | OneCLI Open-source credential vault for AI agents. | 91 | 89 | OSI-approved OSS | 2.9k | 93 | Active |
| 03 | Phase Application secrets and configuration management for developers. | 90 | 89 | OSI-approved OSS | 899 | 92 | Active |
| 04 | certd 开源SSL证书管理工具;全自动证书申请、更新、续期;通配符证书,泛域名证书申请;证书自动化部署到阿里云、腾讯云、主机、群晖、宝塔;https证书,pfx证书,der证书,TLS证书,nginx证书自动续签自动部署 | 87 | 95 | OSI-approved OSS | 4.9k | 92 | Active |
| 05 | OpenBao Operator Kubernetes operator for managing OpenBao clusters and secrets infrastructure. | 80 | 84 | OSI-approved OSS | 18 | 84 | Active |
| 06 | SecretZero Git-native secrets-as-code platform. | 72 | 76 | OSI-approved OSS | 6 | 81 | Warning |
| 07 | Sigillo Self-hostable secrets management platform and open-source Doppler alternative. | 63 | 65 | License unknown | 40 | 73 | Warning |
| 08 | Shelve Open-source secret & environment management. Secure, simple, collaborative. CLI & Github Sync | 65 | 40 | OSI-approved OSS | 437 | 66 | Warning |
| 09 | Relic Encrypted secrets manager for sharing sensitive data. | 44 | 10 | OSI-approved OSS | 194 | 47 | Critical |
| 10 | Arcan Open-source secrets management platform. | 39 | 17 | OSI-approved OSS | 0 | 44 | Critical |
| 11 | Dotenv Vault Secrets syncing platform for environment files. | 36 | 0 | OSI-approved OSS | 1.2k | 37 | Critical |
| 12 | Zexio ZMS High-performance secrets management system. | 28 | 4 | License unknown | 0 | 37 | Critical |
| 13 | EnvSecrets Open-source, end-to-end encrypted CLI-first management of your environment secrets. | 31 | 0 | OSI-approved OSS | 96 | 33 | Critical |
| 14 | Envy CLI Open-source CLI for secret injection and management. | 28 | 0 | License unknown | 7 | 33 | Critical |
| 15 | Envie Self-hostable secrets manager and .env replacement. | 15 | 0 | OSI-approved OSS | 127 | 28 | Critical |