🔐
DevSec
💻 GitHub
  • 👋Welcome
    • DevSec
    • Glossary
    • Contributing
    • Discussions
  • 📖Resources
    • Articles
    • Books
    • Communities
    • Institutions
    • Conferences
    • Sites
    • Podcasts
    • Training
    • Other
  • ⚒️Tools
    • Static Analysis
    • Dynamic Analysis
    • Vulnerabilities Analysis
    • Dependency Management
    • Supply Chain
    • Secrets
      • Secrets Management
      • Secrets Scanning
    • Infrastructure as Code (IaC)
    • Other
  • 🔧Generic Development
    • Security Basics
    • Containers
    • Git & other VCS
    • Cryptography
  • ☁️Web Development
    • Generic
    • APIs
  • ☁️Cloud
    • Cloud native
    • Kubernetes
  • 😈On the other side
    • Red team
Powered by GitBook
On this page
  • About
  • Tools / Solutions / Products

Was this helpful?

Edit on GitHub
  1. Tools
  2. Secrets

Secrets Management

Manage your secrets the way is meant to be

PreviousSecretsNextSecrets Scanning

Last updated 1 year ago

Was this helpful?

About

Software secrets management involves handling and protecting sensitive information, such as API keys, passwords, tokens, and encryption keys, that are used within a software system. These "secrets" are critical for the operation of many applications, providing access to databases, third-party services, cloud infrastructures, and other important resources. If these secrets are compromised, it could lead to data breaches, unauthorized access, or other security incidents.

Tools / Solutions / Products

  • : safeguard cryptographic keys and other secrets used by cloud apps and services.

  • : helps you manage, retrieve, and rotate database credentials, API keys, and other secrets throughout their lifecycles.

  • : create and control keys used to encrypt or digitally sign your data.

  • : a secure and convenient storage system for API keys, passwords, certificates, and other sensitive data.

  • : manage encryption keys on Google Cloud.

  • : manage access to secrets and protect sensitive data.

  • : Safely store secrets in a VCS repo (i.e. Git, Mercurial, Subversion or Perforce).

  • : enable developers with a secure vault for credentials, certificates and keys.

  • : the uncomplicated way to sync, manage, orchestrate, and rotate secrets across any environment or app config with easy to use tools.

  • Mozilla (Secrets OPerationS): simple and flexible tool for managing secrets.

  • (): a productivity secret manager for developers supporting cloud-native apps and multiple cloud providers. Mix and match all vaults and other key stores and safely use secrets as you code, test, and build applications.

  • (): automatically secures secrets used by privileged users and machine identities.

  • (): the slightly more awesome standard UNIX password manager for teams.

  • : a key and secret workflow (validation, invalidation, etc.) tool built in Rust.

  • : a service for storing and rotation of secrets, keys, and passwords used by other services.

  • : Encrypt and decrypt files to store them inside a git repository. git-tresor uses AES-256 encryption. Every file or directory has it's own password. This enables you to commit encrypted files either in a separate git repository or inside the same repository where your secret files are needed (f.e. Android-Keystores or Signing-Certificates for Apple).

  • : encryption/decryption utility for Ansible data files.

  • : securely manage passwords, certs, and other secrets in Chef.

  • (⚠️): a very simple, easy to use credential management and distribution system that uses AWS Key Management Service (KMS) for key wrapping and master-key storage, and DynamoDB for credential storage and sharing.

⚒️
Azure Key Vault
AWS Secrets Manager
AWS Key Management Service (KMS)
Google Cloud Secret Manager
Google Cloud Key Management
HashiCorp Vault
StackExchange Blackbox
Akeyless Vault Platform
Doppler
SOPS
Teller
web
CyberArk Conjur
web
GoPass
web
Spectral Keyscope
Pinterest Knox
Git-tresor
Ansible Vault
Chef Vault
CredStash