awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectAboutHow we rankPressMCP server
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·

Secret Management Tools

Ranking updated Jun 30, 2026

For a tool for managing application secrets, the strongest matches are hashicorp/vault (HashiCorp Vault is the definitive open-source secrets management platform), infisical/infisical (Infisical is a centralized secrets management platform with client-side) and dani-garcia/vaultwarden (Vaultwarden is a self-hosted password management server that stores). Each is ranked by relevance to your query, popularity and recent activity.

Open-source solutions for securely storing, managing, and injecting sensitive credentials into your application infrastructure.

Secret Management Tools

Find the best repos with AI.We'll search the best matching repositories with AI.
  • hashicorp/vaulthashicorp avatar

    hashicorp/vault

    35,796View on GitHub↗

    Vault is a centralized secrets management platform designed to secure, store, and control access to sensitive credentials such as API keys, passwords, certificates, and encryption keys. At its core, the system employs a barrier-based cryptographic sealing mechanism that requires an unseal process to decrypt internal storage, ensuring that sensitive data remains protected. It provides identity-based access control to manage granular permissions across distributed infrastructure, effectively centralizing security policies and authentication for both human and machine workloads. What distinguish

    HashiCorp Vault is the definitive open-source secrets management platform, providing encryption at rest, role-based access control, audit logging, dynamic secrets, rotation, and a full API and CLI for self-hosted deployment — exactly the integrated, infrastructure-grade vault you are looking for.

    GoDynamic Credential ProvidersDynamic Credential ProvisioningDynamic Secret Engines
    View on GitHub↗35,796
  • infisical/infisicalInfisical avatar

    Infisical/infisical

    27,374View on GitHub↗

    Infisical is a centralized secrets management platform designed to store, synchronize, and control access to sensitive credentials and configuration data across distributed development, staging, and production environments. It employs client-side encryption to ensure that secrets remain unreadable to the underlying storage infrastructure, while providing a hierarchical permission model to govern both user and machine access. The platform distinguishes itself through dynamic credential provisioning, which generates short-lived access tokens that are automatically revoked after use. It supports

    Infisical is a centralized secrets management platform with client-side encryption, hierarchical permissions, dynamic credential provisioning, CLI and client libraries, and self-hostable deployment — squarely matching the need for storing, accessing, and managing secrets across apps and infrastructure, while covering almost all of the required features.

    TypeScriptDynamic Credential ProvisioningAudit Logging
    View on GitHub↗27,374
  • dani-garcia/vaultwardendani-garcia avatar

    dani-garcia/vaultwarden

    62,749View on GitHub↗

    Vaultwarden is a self-hosted password management server designed to store and synchronize sensitive credentials, identities, and organizational data across multiple client devices. It functions as a database-backed web application that provides an API layer for secure client-server communication, enabling users to manage personal vaults and organizational data sharing with multi-factor authentication. The project distinguishes itself through a comprehensive administrative infrastructure that provides centralized control over server configuration, user accounts, and system diagnostics via a de

    Vaultwarden is a self-hosted password management server that stores and synchronizes credentials across devices via an API, making it a genuine secrets vault—but it focuses on user passwords rather than infrastructure-level dynamic secrets or rotation, so it covers only part of what this search requests.

    RustServicesSelf-Hosted Password ManagersAdministrative Dashboards
    View on GitHub↗62,749

Related searches

  • a secrets management platform
  • a secure tool for managing application secrets
  • a git secrets encryption tool
  • a tool for injecting secrets into deployments
  • a self-hosted secrets vault
  • Secrets, Vaults and Cryptography
  • a tool for managing application environment variables
  • a tool for detecting secrets in code