Independent cybersecurity directory, built from public sources. Featured listings are paid placements and always labelled. How we work

Pulumi ESC

Secrets composition layer: pull from Vault/AWS/Doppler and expose to any runtime

ToolSecrets ManagementCloud

Pricing: Free tier (Pulumi Cloud Individual, $0); ESC metered per secret from $0.50/secret/mo (Team) and $0.75/secret/mo (Enterprise), on top of base tiers Team $40/mo and Enterprise $400/mo

Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed April 2026 · How we review listings

What is Pulumi ESC?

Pulumi ESC (Environments, Secrets, Configuration) is a secrets and configuration platform that lets you compose environments from multiple secret sources (AWS, Vault, Doppler, 1Password) and expose them as environment variables, files, or direct SDK calls. ESC is tightly integrated with Pulumi's infrastructure-as-code platform but works as a standalone tool too.

Best for: Teams using Pulumi for IaC who need a secrets layer that composes multiple backends

Pros

  • Sits cleanly on top of existing secrets stores. No migration needed
  • Composition model makes multi-cloud environments simple
  • Strong fit if you already use Pulumi for IaC
  • OIDC-based auth eliminates static Pulumi tokens

Things to check

  • Newer product; smaller community than Doppler/Infisical
  • Best value only realized if you adopt Pulumi IaC too
  • Per-user pricing at the Team tier is steep
  • No self-hosted option

Reported in public reviews and vendor documentation. See sources below.

Key Features

Compose environments from multiple secret sources
Providers for AWS, Azure, GCP, Vault, Doppler, 1Password, GitHub
Environment variables, file, or SDK access modes
Versioned environments with rollback
Rotation schedules and OIDC-based auth
Native integration with Pulumi IaC
ESC CLI and REST API
Works with non-Pulumi workflows (CI/CD, runtime apps)
Audit logs and access policies
RBAC with role-based environment access

Do you work at Pulumi ESC? to confirm the details or send us a correction.

Add the Cyber Vendor Guide badge to your site

Sources & references

Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.

Spot an error, or do you represent Pulumi ESC? Request a correction.

Key facts

Pricing
Free tier (Pulumi Cloud Individual, $0); ESC metered per secret from $0.50/secret/mo (Team) and $0.75/secret/mo (Enterprise), on top of base tiers Team $40/mo and Enterprise $400/mo
Model
Per-user tiers
Founded
2024
Cloud
Yes
Self-hosted
No
Visit website

Pulumi ESC Alternatives

FeaturedSplitSecure
Distributed secrets management — no vault, no vendor depende...
Learn more
  • DopplerDeveloper-first universal secrets management platform...
  • InfisicalOpen-source end-to-end encrypted secrets management for team...
  • HashiCorp VaultIndustry-standard open-source secrets management platform...
  • External Secrets OperatorK8s operator that syncs secrets from external stores into Ku...
View all alternatives

Where Pulumi ESC appears

Guides

Certifications

SOC 2 Type 2