- Home
- Secrets Management Tools
- Keyorix
On the recordRead 11 Oct 202623 facts
Keyorix
Valencia, Spain
On the record
- Access control
- The repository lists role-based and group-based permissions, service tokens for CI/CD, and dynamic secrets with time-to-live.github.com · read 11 Oct 2026
- Air-gapped use
- The repository says the core product needs no internet access and supports air-gapped deployment.github.com · read 11 Oct 2026
- Audit
- Keyorix says it logs who accessed what, when, and from where, and provides dashboard alerts for secrets nearing rotation deadlines.github.com · read 11 Oct 2026
- Compliance
- The maker describes Keyorix as aligned with NIS2 and DORA requirements.github.com · read 11 Oct 2026
- Deployment
- The project describes itself as on-premise, air-gap ready, and available as a single binary.github.com · read 11 Oct 2026
- Encryption
- The repository says secret values are encrypted with AES-256-GCM and that secrets are not logged or exposed in error messages.github.com · read 11 Oct 2026
- Health scan
- The maker offers a free, read-only Vault and OpenBao health scan that does not read secret values or send telemetry.keyorix.com · read 11 Oct 2026
- Integrations
- The maker lists Go, Python, Node.js, and Java SDKs and an MCP server with read-only secret tools.github.com · read 11 Oct 2026
- Intended users
- The repository describes Keyorix as lightweight on-premise secrets management for European enterprises.github.com · read 11 Oct 2026
- Interfaces
- The product includes a CLI, a web dashboard, and REST and gRPC APIs.github.com · read 11 Oct 2026
- License and commercial terms
- The software is released under AGPL-3.0, and the maker says commercial licenses are available for organizations that cannot use AGPL.keyorix.com · read 11 Oct 2026
- Migration
- The project documents importing from Vault exports and .env files, and provides a separate migration binary for live Vault, OpenBao, and cloud secret managers.github.com · read 11 Oct 2026
- Privacy
- The privacy policy says the software is self-hosted, sends no telemetry or license-check calls, and keeps secrets and data in the user's infrastructure.keyorix.com · read 11 Oct 2026
- Privacy policy
- The website privacy policy says it collects information submitted through its forms and does not use analytics, advertising, or tracking cookies.keyorix.com · read 11 Oct 2026
- Product
- Keyorix describes itself as open-source secrets management for teams that cannot use SaaS.github.com · read 11 Oct 2026
- Purpose
- Keyorix is a secrets, keys, and certificates management platform designed for teams that cannot use SaaS.github.com · read 11 Oct 2026
- SDKs
- The repository lists Go, Python, Node.js, and Java SDKs.github.com · read 11 Oct 2026
- Secret handling
- Secrets can be injected into applications as environment variables through the CLI.github.com · read 11 Oct 2026
