28 secrets management apps in one list: the established products, and every new one as it launches.
Updated
10 apps launched in the last 12 months, by month.
“secrets management tool” is searched 1,000 times a month on Google worldwide. These are the 18 searches around it, in the US.
| Search | Per month, US | Cost per click |
|---|---|---|
| aws secrets manager | 5,400 | $43.11 |
| hashicorp vault | 5,400 | $6.74 |
| aws secrets manager pricing | 1,000 | $22.12 |
| aws secrets manager cost | 170 | - |
| aws secrets manager vs parameter store | 140 | - |
| hashicorp vault open source | 140 | $18.45 |
| hashicorp vault community edition | 110 | - |
| aws secrets manager terraform | 90 | - |
| hashicorp vault docker | 90 | $9.67 |
| hashicorp vault documentation | 90 | - |
| hashicorp/vault github | 90 | - |
| aws secrets manager documentation | 70 | - |
| aws secrets manager vs kms | 70 | - |
| hashicorp vault free | 70 | $9.66 |
| hashicorp vault self-hosted | 50 | $8.37 |
Cost per click is what advertisers bid for one visit from that search. Figures from Oct 2026.
The apps we added to this market most recently.
| # | App | Added |
|---|---|---|
| 1 | Infisical Infisical is security infrastructure for developers and AI agents: an all-in-one platform for application secrets, certificates, key management, and privileged access. | |
| 2 | DO Doppler Doppler's secrets management platform helps teams secure, sync, and automate secrets across cloud and on-prem environments with security and developer-friendly workflows. | |
| 3 |  Stashbase Stashbase is a developer-first secrets management platform designed for modern engineering teams. | |
| 4 |  SikkerKey Manage secrets with machine authentication and granular access control | |
| 5 |  DCP Today, many agents read keys and sensitive info from dotenv files, configs, or memory. One bad prompt or compromised tool can drain your wallet, API bill, or private data. DCP makes agents safe for real work: your wallets and API keys stay encrypted on your own machine. Give each agent only the scopes it needs; it asks, you approve from Telegram or App. Daily budgets, logs, and instant revoke keep you in control. Open source, non-custodial, and works with Claude, Cursor, OpenClaw, and Hermes. | |
| 6 | InstaVM The production control plane for AI agents. Run agents like production servers: isolated, observable, and controlled. Firecracker microVMs with sub-200ms boot. | |
| 7 |  ClawTab If you run multiple AI coding agents in parallel, tmux alone stops cutting it. You lose track of which agent is working on what, when sessions started, and which ones are waiting for input. ClawTab is a macOS app that wraps tmux in a proper interface — sidebar with per-agent query, model, and start time, pane splitting, auto-yes for unattended runs, and remote control from your phone. Supports Claude Code, Codex, and OpenCode. | |
| 8 | MC MCPCore Define your AI tools, deploy in one click, get a live endpoint with its own subdomain instantly. Build unlimited tools with the AI-powered tool builder. Bring your own custom domain. Flexible auth from public access and API keys to full OAuth 2.0 with PKCE. Built-in rate limiting, encrypted secret management, real-time traffic logs, and error tracking out of the box. No servers, no infrastructure, no ops. Start building for free | |
| 9 |  Lemonade Password Manager I got frustrated with password managers that feel like enterprise software. So I built the one I actually wanted. Lemonade keeps passwords,env files and API keys in one AES-256-GCM encrypted vault. TOTP, Passkeys, Emergency Access, Secure Notes, Chrome & Firefox extensions. No desktop app — it's a PWA. Free for 15 passwords, $2.99/mo unlimited. The Env Vault is the differentiator: drop your project folder and Lemonade detectsenv files, credentials — everything you can't commit to git. | |
| 10 |  Zenvault Centralize your repos, environment variables, and resources. Onboard to any project with a single CLI command. | |
| 11 | passwork Supported Platforms: Linux, Windows, Docker (optional) | |
| 12 |  Stakpak An open source agent that lives on your machines 24/7, keeps your apps running, and only pings when it needs a human. Install Stakpak -> Run /init curl -sSL https://stakpak.dev/install.sh | sh |
The products every new one is compared with.
Grouped by what each app says it does. 15 of 28 apps fit a group so far.
| Type | Apps | Share | Examples |
|---|---|---|---|
| Application secrets management | 7 | 46.7% | DCP, Doppler, Infisical |
| AI agents platforms | 4 | 26.7% | ClawTab, Hyphen, InstaVM |
| Environment variables management | 2 | 13.3% | Shelve, Zenvault |
What we could detect on their websites.
| Framework | Apps | Share |
|---|---|---|
| Next.js | 12 | 80.0% |
Of 15 apps whose framework we could detect.
| Host | Apps | Share |
|---|---|---|
| Vercel | 7 | 100.0% |
Of 7 apps whose host we could detect.
How many of the 28 apps show a price, and how many sell to large companies.
| Measure | Apps | Share of 28 |
|---|---|---|
| Publish a pricing page | 10 | 35.7% |
A secrets management tool stores and delivers sensitive values like API keys, database passwords, certificates, and tokens. It keeps these values encrypted, controls who or what can read them, and logs every access.
1 more type of secrets management apps with Starter.See plans
The rest of the guide to secrets management apps with Starter.See plans
3 more answers about secrets management apps with Starter.See plans
3 more searches around “secrets management tool” on Starter and Pro. See plans
