The best BeyondTrust Password Safe alternatives

Envshed is aimed at indie developers, early-stage teams of up to about 50 engineers and open-source maintainers managing shared infrastructure.

Infisical suits organizations that need to manage application credentials, certificates or privileged access across infrastructure.

The Free plan is described for solo developers and small side projects.

dotenvx is aimed at software developers and teams managing application secrets, including workflows involving coding agents.

Keyway suits developers or teams that want to inject secrets into processes and manage access through GitHub repository permissions.

It suits organizations self-hosting credentials, encryption keys, and certificates across supported operating systems.

PX Secrets is aimed at developers, AI builders, homelabbers, and sysadmins who want a self-hosted secrets vault.

R4 suits teams managing licenses and secrets for people and agent runtimes, especially those needing local decryption, API access, and audit-ready…

It suits developers and teams wanting free, self-hosted secret storage with CLI injection, access controls and audit records.

AWS Secrets Manager suits IT and security administrators and developers managing application credentials and other secrets.

Teller suits developers and teams managing secrets across app development, testing, and builds.

This service suits application and cloud teams that need centrally managed credentials, rotation, access controls, and auditing.

VSecM suits teams operating Kubernetes workloads that need to store and deliver secrets through supported integrations.

It is designed for security teams managing nonhuman credentials, as well as applications, containers, CI/CD pipelines, and workloads that use them.