Secrets & Identity Security

Now pick what to compare GitGuardian NHI Governance against.

GitGuardian NHI Governance clear

Open a name for its full profile

Doppler
Scored
Doppler · Freemium · 7 capabilities in this domain · 3.85 / 5
Compare →
HashiCorp Vault
Capabilities only
HashiCorp · Freemium · 5 capabilities in this domain
Compare →
GitGuardian Secrets Detection
Capabilities only
GitGuardian · Freemium · 4 capabilities in this domain
Compare →
GitHub Secret Protection
Capabilities only
GitHub · Freemium · 4 capabilities in this domain
Compare →
Infisical
Capabilities only
Infisical · Freemium · 4 capabilities in this domain
Compare →
Akeyless
Capabilities only
Akeyless · Freemium · 3 capabilities in this domain
Compare →
CyberArk Secrets Manager
Capabilities only
CyberArk · Commercial · 3 capabilities in this domain
Compare →
Octo STS
Capabilities only
Chainguard · Open Source · 3 capabilities in this domain
Compare →
OpenBao
Capabilities only
Linux Foundation · Open Source · 3 capabilities in this domain
Compare →
TruffleHog
Capabilities only
Truffle Security · Open Source · 3 capabilities in this domain
Compare →
AWS Secrets Manager
Capabilities only
Amazon Web Services · Commercial · 2 capabilities in this domain
Compare →
Aembit
Capabilities only
Aembit · Freemium · 2 capabilities in this domain
Compare →
Astrix Security
Capabilities only
Astrix Security · Commercial · 2 capabilities in this domain
Compare →
Azure Key Vault
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Compare →
GitGuardian NHI Governance
Capabilities only
GitGuardian · Commercial · 2 capabilities in this domain
selected
Google Cloud Secret Manager
Capabilities only
Google · Commercial · 2 capabilities in this domain
Compare →
Microsoft Entra Workload ID
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Compare →
Oasis NHI Security Cloud
Capabilities only
Oasis Security · Commercial · 2 capabilities in this domain
Compare →
SPIRE
Capabilities only
Cloud Native Computing Foundation (CNCF) · Open Source · 2 capabilities in this domain
Compare →
External Secrets Operator
Capabilities only
Cloud Native Computing Foundation (CNCF) · Open Source · 1 capabilities in this domain
Compare →

In Secrets & Identity Security

Akeyless

Akeyless · Secrets & Identity Security

Close ×

FreemiumCompany

Akeyless offers static and dynamic secrets, certificate lifecycle and secure remote access without customer-operated vault clusters.

What it does3 capabilities · 3 at full coverage

3 of 3 at full coverage.

Centralized Secrets ManagementFullSECRETS · level 2 · 11 providers
Dynamic Short-Lived CredentialsFullSECRETS · level 3 · 8 providers
Machine Identity ManagementFullSECRETS · level 4 · 9 providers

What it proves11 controls across 7 frameworks

Satisfied through its capabilities, not claimed by the vendor.

CSF 2.03 / 106PR.AA-01 PR.AA-03 PR.DS-01
AICM2 / 18CEK IAM
SAMM 2.02 / 90I-SD-1-B I-SD-2-B
ASVS 5.01 / 17V11
CI/CD Top 101 / 10CICD-SEC-6
CNAS Top 101 / 10CNAS-5
SP 800-204D1 / 11204D-CD-SECRETS

What it stops4 techniques · 1 risk

4 techniques countered, 4 of them common

Leaked Secret AbuseVery Common
Unsecured CredentialsT1552Very Common
Steal Application Access TokenT1528Common
Unsecured Credentials: Container APIT1552.007Common

1 risks reduced

Leaked credential enables unauthorized accessCritical

Where it runs3 phases · 1 way to deploy

Capabilities per lifecycle phase

Build2
Deploy3
Operate3

How it is delivered

SaaS

What it unlocks3 activities · reaches level 5

Program activities its capabilities support, reaching level 5. Supporting an activity is not completing it.

Level 2

Centralize secrets and enable push protectionMedium effort

Level 3

Replace static CI credentials with OIDC federationMedium effort

Level 5

Secretless workload identity everywhereHigh effort

How it holds up

Not assessed yet: no strengths, limits or evaluation scores. 47 of 340 products carry an assessment and 29 are scored.

What it costsPlatform enterprise agreement · free tier

LicensingPlatform enterprise agreement

Priced perannual contract

BillingSubscription

Scales withNegotiated scope (developers, assets, modules)

Total cost

Opaque list pricing; benchmark with peers and require clear overage terms.

What it takes to run

No staffing, rollout time or operational commitment recorded.

What it works with

No supported language, standard, integration or named feature recorded.

What else to look at

No alternative, competitor or family sibling is modeled for it.

What backs this up

No measurement, incident or pipeline using it.

Gantry 7.1.0 · OFF.12 · OFF.13