Secrets & Identity Security

Pick the first of two products.

Open a name for its full profile

Doppler
Scored
Doppler · Freemium · 7 capabilities in this domain · 3.85 / 5
Select
HashiCorp Vault
Capabilities only
HashiCorp · Freemium · 5 capabilities in this domain
Select
GitGuardian Secrets Detection
Capabilities only
GitGuardian · Freemium · 4 capabilities in this domain
Select
GitHub Secret Protection
Capabilities only
GitHub · Freemium · 4 capabilities in this domain
Select
Infisical
Capabilities only
Infisical · Freemium · 4 capabilities in this domain
Select
Akeyless
Capabilities only
Akeyless · Freemium · 3 capabilities in this domain
Select
CyberArk Secrets Manager
Capabilities only
CyberArk · Commercial · 3 capabilities in this domain
Select
Octo STS
Capabilities only
Chainguard · Open Source · 3 capabilities in this domain
Select
OpenBao
Capabilities only
Linux Foundation · Open Source · 3 capabilities in this domain
Select
TruffleHog
Capabilities only
Truffle Security · Open Source · 3 capabilities in this domain
Select
AWS Secrets Manager
Capabilities only
Amazon Web Services · Commercial · 2 capabilities in this domain
Select
Aembit
Capabilities only
Aembit · Freemium · 2 capabilities in this domain
Select
Astrix Security
Capabilities only
Astrix Security · Commercial · 2 capabilities in this domain
Select
Azure Key Vault
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Select
GitGuardian NHI Governance
Capabilities only
GitGuardian · Commercial · 2 capabilities in this domain
Select
Google Cloud Secret Manager
Capabilities only
Google · Commercial · 2 capabilities in this domain
Select
Microsoft Entra Workload ID
Capabilities only
Microsoft · Commercial · 2 capabilities in this domain
Select
Oasis NHI Security Cloud
Capabilities only
Oasis Security · Commercial · 2 capabilities in this domain
Select
SPIRE
Capabilities only
Cloud Native Computing Foundation (CNCF) · Open Source · 2 capabilities in this domain
Select
External Secrets Operator
Capabilities only
Cloud Native Computing Foundation (CNCF) · Open Source · 1 capabilities in this domain
Select

In Secrets & Identity Security

Azure Key Vault

Microsoft · Secrets & Identity Security

CommercialCompany

Key Vault stores secrets, keys and certificates with Entra ID access control, managed identities and Defender for Key Vault threat detection.

What it does3 capabilities · 1 at full coverage

1 of 3 at full coverage.

Code Signing Key ManagementPartialBUILD · level 3 · 8 providers
Automated Secret RotationPartialSECRETS · level 3 · 10 providers
Centralized Secrets ManagementFullSECRETS · level 2 · 11 providers

What it proves12 controls across 9 frameworks

Satisfied through its capabilities, not claimed by the vendor.

SAMM 2.03 / 90I-SD-1-B I-SD-2-B I-SD-3-B
CSF 2.02 / 106PR.DS-01 RS.MI-01
AICM1 / 18CEK
ASVS 5.01 / 17V11
CI/CD Top 101 / 10CICD-SEC-6
CNAS Top 101 / 10CNAS-5
SLSA 1.21 / 16Build L3 — Signing secrets isolated
SP 800-204D1 / 11204D-CD-SECRETS
SSDF 1.11 / 42PS.1.1

What it stops3 techniques · 1 risk

3 techniques countered, 2 of them common

Unsecured CredentialsT1552Very Common
Unsecured Credentials: Container APIT1552.007Common
Code Signing Key TheftRare

1 risks reduced

Leaked credential enables unauthorized accessCritical

Where it runs4 phases · 1 way to deploy

Capabilities per lifecycle phase

Build2
Release1
Deploy1
Operate2

How it is delivered

Cloud provider native service

What it unlocks3 activities · reaches level 4

Program activities its capabilities support, reaching level 4. Supporting an activity is not completing it.

Level 2

Centralize secrets and enable push protectionMedium effort

Level 3

Automated rotation and log and artifact scanningMedium effort

Level 4

Verify provenance and attestations before promotionMedium effort

How it holds up

Not assessed yet: no strengths, limits or evaluation scores. 47 of 340 products carry an assessment and 29 are scored.

What it costsPer secret and API call

LicensingPer secret and API call

Priced persecret per month plus per 10

BillingConsumption

Scales withNumber of stored secrets and access operations

Total cost

Cheap at small scale; high-frequency retrieval without caching and many short-lived secrets raise cost.

What it takes to run

No staffing, rollout time or operational commitment recorded.

What it works with

No supported language, standard, integration or named feature recorded.

What else to look at

No alternative, competitor or family sibling is modeled for it.

What backs this up

No measurement, incident or pipeline using it.

Gantry 7.1.0 · OFF.12 · OFF.13