Best Secrets Management Tools in 2026
Updated
In short: Delinea Identity Threat Protection is ranked #1 of 39 as of 4 October 2026, ahead of R4 and BeyondTrust Remote Support. The best-ranked option with a free plan is Infisical. The lowest first paid tier on this page is KeyEnv at $0.28/mo.
Credentials and other sensitive values are part of many development and deployment workflows, so compare how each tool handles access and delivery. Compared on audit logs, secret rotation, CI/CD injection, deployment model, and Kubernetes integration, these entries also let you weigh dynamic secrets and pricing details, including free-plan availability, free secret limits, and paid-from cost. Delinea Identity Threat Protection and R4 are among the tools shown, alongside BeyondTrust Remote Support and Infisical. Consider which integrations and controls matter in your environment, and whether the available deployment and plan options fit the way your team manages secrets.
39 secrets management tools ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score
- 1 Delinea Identity Threat Protection iPhone + Android RecognisedPhone appDocumentedFree plan 6.9 Dynamic secrets: YesCI/CD injection: Yes
- 2 R4 iPhone + Android RecognisedPhone appDocumentedFree plan 6.7 CI/CD injection: Yes
- 3 BeyondTrust Remote Support iPhone + Android RecognisedPhone appDocumentedFree plan 6.6
- 4 Infisical No phone app RecognisedPhone appDocumentedFree plan 6.3$2/mo Secret rotation: YesDynamic secrets: YesCI/CD injection: Yes
- 5 Keyway No phone app RecognisedPhone appDocumentedFree plan 6.3€9/mo Secret rotation: NoDynamic secrets: NoCI/CD injection: Yes
- 6 AWS Secrets Manager No phone app RecognisedPhone appDocumentedFree plan 6.2$0.40/mo Secret rotation: YesCI/CD injection: Yes
- 7 KeyEnv No phone app RecognisedPhone appDocumentedFree plan 6.2$0.28/mo Secret rotation: YesCI/CD injection: Yes
- 8 Kubermatic Kubernetes Platform No phone app RecognisedPhone appDocumentedFree plan 6.2Free Secret rotation: YesDynamic secrets: Yes
- 9 Oracle Cloud Infrastructure Secret Management No phone app RecognisedPhone appDocumentedFree plan 6.2Free Secret rotation: YesCI/CD injection: Yes
- 10 Phase No phone app RecognisedPhone appDocumentedFree plan 6.2$10/mo Secret rotation: YesDynamic secrets: YesCI/CD injection: Yes
- 11 SikkerKey No phone app RecognisedPhone appDocumentedFree plan 6.2$29/mo Secret rotation: YesDynamic secrets: YesCI/CD injection: Yes
- 12 OpenStack Barbican No phone app RecognisedPhone appDocumentedFree plan 6.1Free
- 13 Akeyless No phone app RecognisedPhone appDocumentedFree plan 6.0Free Secret rotation: YesDynamic secrets: YesCI/CD injection: Yes
- 14 OVHcloud CMS Hosting No phone app RecognisedPhone appDocumentedFree plan 5.9$2.39/mo Dynamic secrets: Yes
- 15 Doppler No phone app RecognisedPhone appDocumentedFree plan 5.7$8/mo Secret rotation: YesDynamic secrets: YesCI/CD injection: Yes
- 16 Britive Secrets Manager No phone app RecognisedPhone appDocumentedFree plan 5.6 Secret rotation: YesDynamic secrets: YesCI/CD injection: Yes
- 17 HashiCorp Nomad No phone app RecognisedPhone appDocumentedFree plan 5.6
- 18 CipherTrust Secrets Management No phone app RecognisedPhone appDocumentedFree plan 5.4 Secret rotation: YesDynamic secrets: YesCI/CD injection: Yes
- 19 CLOVA Voice No phone app RecognisedPhone appDocumentedFree plan 5.3 Secret rotation: Yes
- 20 CyberArk Secrets Manager No phone app RecognisedPhone appDocumentedFree plan 5.3 Secret rotation: YesCI/CD injection: Yes
- 21 dotenvx No phone app RecognisedPhone appDocumentedFree plan 5.3 Secret rotation: YesCI/CD injection: Yes
- 22 Envshed No phone app RecognisedPhone appDocumentedFree plan 5.3 Secret rotation: NoDynamic secrets: NoCI/CD injection: Yes
- 23 Keyorix No phone app RecognisedPhone appDocumentedFree plan 5.3 Secret rotation: YesDynamic secrets: YesCI/CD injection: Yes
- 24 Keyshade No phone app RecognisedPhone appDocumentedFree plan 5.3 Secret rotation: YesCI/CD injection: Yes
- 25 OpenBao No phone app RecognisedPhone appDocumentedFree plan 5.3 Secret rotation: YesDynamic secrets: Yes
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which secrets management tool is ranked first on Samsung Mobile US Press?
Delinea Identity Threat Protection is ranked #1 of 39 with a score of 6.9. R4 is second and BeyondTrust Remote Support third.
How many of these have a free plan?
10 of the 25 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, KeyEnv has the lowest first paid tier we found: $0.28/mo.
How is this list ranked?
Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation. Paid placements never change a rank.