Independent cybersecurity directory, built from public sources. Featured listings are paid placements and always labelled. How we work

Best Open Source Secrets Management Tools in 2026

Open source secrets management tools give you full control over your secrets infrastructure. Self-host on your own infrastructure, audit every line of code, and avoid vendor lock-in.

3 Open Source Secrets Management Tools, side by side

ToolDeploymentPricing modelOpen source
HashiCorp VaultCloud + Self-hostedOpen Source + EnterpriseYes
InfisicalCloud + Self-hostedPer-userYes
CyberArk ConjurCloud + Self-hostedEnterprise licenseYes

These tools are ideal for organizations that prioritize transparency, customization, and cost control.

By use case

Our read on which tool suits which job. Editorial, not paid, and separate from the listing below.

Teams needing flexible, self-hosted secrets management with extensive plugin ecosystem

HashiCorp Vault

The industry standard with the largest plugin ecosystem and community support. Best for teams that need maximum flexibility and have DevOps expertise to manage the deployment.

Open source, Cloud, Self-hosted

Teams wanting open-source with a modern developer experience

Infisical

The most modern open source option with a developer-friendly UI and end-to-end encryption. Best for teams wanting open source with a managed-service feel.

Open source, Cloud, Self-hosted

Large enterprises with complex compliance and PAM requirements

CyberArk Conjur

Enterprise-grade open source with policy-as-code and deep CI/CD integration. Best for large organizations with complex compliance requirements.

Open source, Cloud, Self-hosted

HashiCorp Vault

Secrets Management
Best fit for

Teams needing flexible, self-hosted secrets management with extensive plugin ecosystem

HashiCorp Vault is a widely adopted open-source secrets management tool. It provides a unified interface for managing secrets, encrypting data in transit, and controlling access to sensitive information across distributed infrastructure. Vault supports dynamic secrets, leasing, and revocation.

Pricing

Free self-managed Community edition (Business Source License, not true OSS); HCP Vault Dedicated managed cloud from $0.03/hr (about $22/mo) Development tier (HCP rates as of 2022; tiers have since been renamed, verify current pricing), production tiers from about $1.58/cluster-hr plus per-client fees; Vault Enterprise self-managed license is quote-only (contact sales).

Open Source + Enterprise

Deployment

Cloud, Self-hosted, Open source

Standards & certifications

SOC 2 Type II, ISO 27001, PCI DSS

Visit HashiCorp VaultView listing

Infisical

Secrets Management
Best fit for

Teams wanting open-source with a modern developer experience

Infisical is an open-source secrets management platform built for modern development teams. It provides end-to-end encrypted secret syncing, automatic secret rotation, and integrations with popular development tools and cloud platforms.

Pricing

Free (self-hosted or Cloud); paid Cloud (Pro) from $18/mo per identity; Enterprise custom

Per-user

Deployment

Cloud, Self-hosted, Open source

Standards & certifications

SOC 2, HIPAA, FIPS 140-3

Visit InfisicalView listing

CyberArk Conjur

Privileged Access Management
Best fit for

Large enterprises with complex compliance and PAM requirements

CyberArk Conjur is an enterprise-grade secrets management solution that secures secrets used by machine identities. Part of the CyberArk Identity Security Platform, it provides centralized secrets management with policy-as-code and deep DevOps integration.

Pricing

Open source Community edition free. Enterprise reference: Conjur Cloud about $845 per workload identity/yr (base about $84,500/yr for 100 identities; Texas DIR reseller pricelist, 2023). Full enterprise pricing on request.

Enterprise license

Deployment

Cloud, Self-hosted, Open source

Visit CyberArk ConjurView listing

Comparisons

AWS Secrets Manager vs Infisical

Choose AWS Secrets Manager if seamless AWS integration is your priority and teams already on AWS who want native integra...

Read Comparison

Akeyless vs HashiCorp Vault

Choose HashiCorp Vault if you want a widely used option with maximum flexibility and your team can manage the infrastruc...

Read Comparison

Azure Key Vault vs HashiCorp Vault

Choose Azure Key Vault if deep Azure and Microsoft 365 integration is your priority and microsoft and Azure-centric orga...

Read Comparison

AWS Secrets Manager vs HashiCorp Vault

Choose AWS Secrets Manager if seamless AWS integration is your priority and teams already on AWS who want native integra...

Read Comparison

Dashlane (Business) vs HashiCorp Vault

Choose Dashlane (Business) if polished, intuitive UI that drives high employee adoption is your priority and organizatio...

Read Comparison

Dashlane (Business) vs Infisical

Choose Dashlane (Business) if polished, intuitive UI that drives high employee adoption is your priority and organizatio...

Read Comparison

Shortlists

Editorial lists and deep dives covering these tools.

Frequently Asked Questions

Open source secrets management refers to tools whose source code is publicly available and freely modifiable. These tools let you store, access, and rotate secrets like API keys, passwords, and certificates while maintaining full control over the infrastructure and code. Popular examples include HashiCorp Vault, Infisical, and CyberArk Conjur.

Yes. Open source secrets management tools like HashiCorp Vault are used in production by thousands of organizations including major enterprises and government agencies. The open source model actually enhances security through community code review, rapid vulnerability discovery, and transparent security practices. Many open source tools also offer enterprise editions with additional security features.

Key advantages include: no vendor lock-in, full code auditability, self-hosting on your own infrastructure for data sovereignty, zero license costs for community editions, and the ability to customize and extend the tool. The tradeoff is that you need operational expertise to deploy and maintain the infrastructure.

HashiCorp Vault is the established leader with 10+ years of maturity, the largest plugin ecosystem, and broad enterprise adoption. Infisical is newer but offers a more modern developer experience, end-to-end encryption by default, and easier setup. Vault is better for complex, large-scale deployments; Infisical is better for teams wanting a quick-start open source solution.

View all Secrets Management tools

About this listing

Open Source Secrets Management Tools tools, compared on public information. The comparison table and the full entries follow our editorial order, with any paid Featured listing shown first and labelled. How we work →