Alternatives to Akeyless
SaaS platform for secrets and machine-identity management.
Akeyless ranks #4 of 7 in Secrets management, with an Alt Score of 86. It is proprietary and freemium from Free. 13 of 13 checklist rows are verified against a public source.
Akeyless is a SaaS platform for secrets management, dynamic secrets, encryption, and machine identity, built on a distributed fragments cryptography model.
DevOps, platform, and security teams that need to manage secrets, encryption keys, and certificates for machines, AI agents, and humans across multi-cloud and hybrid environments, without operating their own vault infrastructure.
A SaaS secrets management and machine-identity platform offering static, dynamic, and rotated secrets, encryption/KMS, PKI and SSH certificate lifecycle management, RBAC, and audit logging, all reachable through a web console, CLI, REST API, and SDKs (Go, Python, Java, JavaScript, C#, Ruby). A free tier is available with limited quotas; broader usage requires a custom-quoted Enterprise plan.
Applications and users authenticate to the Akeyless SaaS control plane (built on Distributed Fragments Cryptography for zero-knowledge key management) directly or through a customer-deployed Gateway component that brokers requests from internal workloads to Akeyless services, enabling secrets and certificates to be issued, rotated, or retrieved on demand via CLI, API, or native integrations with Kubernetes, CI/CD tools, and cloud providers.
Where Akeyless stands out
Verified capabilities most alternatives don't have.
Why people leave Akeyless
Dashed reasons are sourced facts; the rest are opinions. Vendors can dispute.
Sign in to add a reason — new reasons go through moderation before appearing.
Ranked alternatives
Ordered by Alt Score. Click any score to see the breakdown.
Infisical is an open-source secrets management platform for syncing and managing secrets across teams and infrastructure, with secret scanning, rotation, and PKI; self-hostable or cloud.
HashiCorp Vault is a platform for secrets management, encryption as a service, dynamic secrets, and PKI, with fine-grained access control and audit logging; self-hosted or HCP Vault cloud.
Conjur is CyberArk open-source secrets management solution for securing machine identities and secrets in DevOps pipelines and cloud-native applications.
Doppler is a SecretOps platform that centralizes application secrets and configuration and syncs them across environments, services, and CI/CD.
Bitwarden Secrets Manager is an open-source, end-to-end encrypted secrets management tool for developers and DevOps to store, share, and inject secrets into apps and CI/CD.
1Password developer tools provide secrets automation for injecting and managing secrets in code, CI/CD, and infrastructure, backed by the 1Password vault.
Feature comparison
Rows come from the Secrets management checklist (17 rows). Human-verified cells only. ? means the value has not been verified.
+ Add app
| Secrets management checklist | Akeyless | Infisical | HashiCorp Vault | CyberArk Conjur | Doppler | Bitwarden Secrets Manager |
|---|---|---|---|---|---|---|
| Pricing model | ||||||
| Starts at | ||||||
| License | ||||||
| Platforms | ||||||
| Open source | ||||||
| Self-hostable | ||||||
| Managed / SaaS option | ||||||
| Dynamic secrets | ||||||
| Secret rotation | ||||||
| Secret scanning / leak detection | ||||||
| Kubernetes integration | ||||||
| CI/CD integrations | ||||||
| CLI | ||||||
| Audit logs | ||||||
| RBAC / fine-grained access | ||||||
| PKI / certificate management | ||||||
| SDKs & API |
Every fact and feature listed for Akeyless is verified against its own pages. Each alternative is sourced on its own page.
-
License Proprietary verified 2026-07-17
SaaS platform licensed under a commercial EULA, not open source.
Akeyless hereby grants you a non-exclusive, non-transferable (except as otherwise permitted herein) right to access and use the Service during the Term, solely in accordance with this Agreement, Docum
https://www.akeyless.io/end-user-license-agreement-2025/ -
Pricing model Freemium verified 2026-07-17
Plan Limits table shows a FREE tier alongside a custom-quoted ENTERPRISE tier.
Start free or customize an enterprise solution tailored to your needs.
https://www.akeyless.io/pricing/ -
Starts at Free verified 2026-07-17
Paid tier is labeled ENTERPRISE and priced only via 'Talk to an expert' (custom quote); no public paid starting price is disclosed on the pricing page.
Start Free
https://www.akeyless.io/pricing/ -
Status active verified 2026-07-17
Site sitemap shows page updates as recent as 2026-07-16 and docs actively cover in-development early-access features, indicating active development.
© 2026 AKEYLESS. All rights reserved
https://www.akeyless.io/pricing/ -
Open source No verified 2026-07-17
Proprietary closed-source SaaS platform.
Akeyless or its licensors retain all ownership and intellectual property rights to the Akeyless Proprietary, and derivative works thereof
https://www.akeyless.io/end-user-license-agreement-2025/ -
Self-hostable Partial verified 2026-07-17
Only the Gateway data-path component can be deployed in the customer's own infrastructure (Docker, Kubernetes, serverless); the core control plane/vault remains Akeyless-hosted SaaS, so the full platf
Akeyless Gateway is a customer-hosted runtime component that sits between internal workloads and the Akeyless SaaS.
https://docs.akeyless.io/docs/gateway-overview.md -
Managed / SaaS option Yes verified 2026-07-17
Akeyless is SaaS-first.
Pure SaaS delivers the simplicity and scalability of a fully cloud-managed solution for rapid deployment and minimal operational overhead.
https://www.akeyless.io/pricing/ -
Dynamic secrets Yes verified 2026-07-17
Dynamic Secrets are secrets that are generated every time they are accessed, using permissions you've defined in advance.
https://docs.akeyless.io/docs/how-to-create-dynamic-secret.md -
Secret rotation Yes verified 2026-07-17
You can define a rotated secret to automatically update the password at defined intervals, or manually trigger a password update with the CLI or from the Akeyless Console.
https://docs.akeyless.io/docs/rotated-secrets.md -
Secret scanning / leak detection Partial verified 2026-07-17
Cloud secret-exposure scanning exists but is early access and currently limited to GCP/AWS cloud environments, not general source-code/repo secret scanning.
Identity and Secrets Intelligence is currently in early access. ... Current early-access scanner coverage includes: GCP Scanner support ... AWS Scanner support for cloud identities
https://docs.akeyless.io/docs/identity-and-secrets-intelligence.md -
Kubernetes integration Yes verified 2026-07-17
Also has External Secrets Operator support, Kubernetes Secrets Store CSI Driver, Cert Manager, and a Kubernetes Secrets Injector (see docs.akeyless.io llms.txt integrations list).
Kubernetes with Helm Deployment
https://docs.akeyless.io/docs/gateway-deploy-kubernetes-helm.md -
CI/CD integrations Yes verified 2026-07-17
Also has Jenkins, GitLab, CircleCI, Azure DevOps, and TeamCity plugins per docs.akeyless.io integrations.
The Akeyless GitHub Actions plugin enables workflow automation for GitHub-hosted repositories.
https://docs.akeyless.io/docs/github-action.md -
CLI Yes verified 2026-07-17
The Akeyless CLI has pre-compiled binary versions for Linux, macOS, and Windows that can be installed locally.
https://docs.akeyless.io/docs/cli.md -
Audit logs Yes verified 2026-07-17
Akeyless Audit Logs take note of just about every change/action within the Akeyless system, providing a complete track record of your Akeyless system operations.
https://docs.akeyless.io/docs/audit-logs.md -
RBAC / fine-grained access Yes verified 2026-07-17
Akeyless Role-Based Access Control (RBAC) follows the least privilege principle to limit access rights for machines/human users to the bare minimum of permissions they need to perform their work.
https://docs.akeyless.io/docs/rbac.md -
PKI / certificate management Yes verified 2026-07-17
Akeyless Certificate Lifecycle Management (CLM) solution provides a seamless way to create, provision, monitor, renew, and revoke digital certificates.
https://docs.akeyless.io/docs/certificate-lifecycle-management.md -
SDKs & API Yes verified 2026-07-17
We currently support the following SDKs: C# .NET Core SDK, Go SDK, Java SDK, JavaScript SDK, Python SDK, Ruby SDK
https://docs.akeyless.io/docs/sdks.md
FAQ
Yes. Doppler and Bitwarden Secrets Manager have a free tier or are fully free. Free-tier limits in the comparison table are verified and dated.
Infisical, HashiCorp Vault and CyberArk Conjur — every license claim links its source.