Alternatives to Konfidant
Compare Konfidant alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Konfidant in 2026. Compare features, ratings, user reviews, pricing, and more from Konfidant competitors and alternatives in order to make an informed decision for your business.
-
1
1Password
1Password
1Password is a secure, scalable, and easy-to-use password manager that's trusted by the world's leading companies. Using 1Password makes it easy for your employees to stay safe online. Once 1Password is part of their workflow, good security habits will become second nature. 1Password Advanced Protection is now available with 1Password Business. Set Master Password policies, enforce two-factor authentication team-wide, restrict access with firewall rules, review sign-in attempts and require your team to use the latest version of 1Password. Our award-winning apps are available for Mac, iOS, Linux, Windows, and Android. 1Password syncs seamlessly across devices, so your employees always have access to their passwords. When everyone uses 1Password, your risk goes down — and your productivity goes up. -
2
Passwork
Passwork
Passwork is a password manager built for security-conscious organizations, available as both a self-hosted (on-premise) solution and a secure cloud service. Developed and headquartered in Europe (Barcelona, Spain), Passwork meets GDPR, NIS2, ENS and other European regulatory requirements by design. The self-hosted version stores all passwords and credentials exclusively on your own server. Double-layer AES-256 encryption (server-side and client-side) with zero-knowledge architecture ensures your data stays within your infrastructure. For organizations seeking instant deployment without infrastructure overhead, Passwork Cloud provides a fully managed SaaS option. Hosted in secure data centers in Germany, the cloud platform operates on the same zero-knowledge model. Passwork is ISO/IEC 27001 certified. Both deployment options are trusted by enterprises for secure password sharing, privileged access management, and centralized credential governance. -
3
Proton Drive
Proton AG
Proton Drive is the all-in-one workspace for storing sensitive data and collaborating with your teams, clients, and partners. Collaborate securely without compromising control: Share client files, contracts, and sensitive business documents with full end-to-end encryption. You control who can access what. Set passwords, add expiry dates, or revoke access anytime. Protect all your business data: Plans come with 1 TB of storage allowance per user, giving your team enough space for all their files and docs. You can always add more storage later if needed. Simplify compliance across industries: Proton Drive supports GDPR, HIPAA, NIS2, DORA, and ISO 27001 compliance out of the box, and has been successfully audited for SOC 2 Type II. There's no need for custom configurations or third-party tools, as this helps you meet regulatory standards with minimal effort. -
4
SharePass
SharePass
SharePass is a SaaS Secret Management platform that allows sharing and managing secrets and confidential information using a web application, extension, or mobile app. SharePass works with encrypted links transmitted from the sender to the receiver with various settings and flags. The settings include expiry restriction, availability, IP restrictions and an entire filtering funnel (patent pending). SharePass is platform-independent that can be used with your existing communication tools. When it comes to your privacy, SharePass or any of its employees cannot see the content of your secrets; the secrets can be seen only by the exchanging parties. SharePass meets the latest cybersecurity compliance and regulations. In the era of identity theft, SharePass will protect you and prevent your data from leaking to the dark web by eliminating your digital footprint. SharePass supports SSO with Office365, Google Workspace, MFA, and integration with Yubikeys for maximum security.Starting Price: Free -
5
Doppler
Doppler
Stop struggling with scattered API keys, hacking together home-brewed configuration tools, and avoiding access controls. Give your team a single source of truth with Doppler. The best developers automate the pain away. Create references to frequently used secrets in Doppler. Then when they need to change, you only need to update them once. Your team's single source of truth. Organize your variables across projects and environments. The scary days of sharing secrets over Slack, email, git, zip files, are over. After adding a secret, your team and their apps have it instantly. Like git, the Doppler CLI smartly knows which secrets to fetch based on the project directory you are in. Gone are the futile days of trying to keep ENV files in sync! Practice least privilege with granular access controls. Reduce exposure when deploying with read-only service tokens. Contractor needs access to just development? Easy!Starting Price: $6 per seat per month -
6
Tresorit
Tresorit
Tresorit is a zero‑knowledge, end‑to‑end encrypted cloud collaboration platform built for organizations that handle sensitive data. It enables secure file storage, syncing, and sharing while ensuring that only data owners and authorized recipients can access content—Tresorit itself cannot. Files are encrypted on the user’s device before upload and remain protected throughout storage and sharing. The platform supports secure internal collaboration and external data exchange through encrypted file sharing, secure email links, digital signatures, and encrypted data rooms for client and partner collaboration. Tresorit provides granular access controls, auditability, and configurable data residency to help meet strict security and compliance requirements. Designed as a privacy‑first alternative to traditional cloud tools, Tresorit allows teams to collaborate productively without compromising control, confidentiality, or regulatory obligations.Starting Price: $4.75/month -
7
HashiCorp Vault
HashiCorp
Secure, store and tightly control access to tokens, passwords, certificates, encryption keys for protecting secrets and other sensitive data using a UI, CLI, or HTTP API. Secure applications and systems with machine identity and automate credential issuance, rotation, and more. Enable attestation of application and workload identity, using Vault as the trusted authority. Many organizations have credentials hard coded in source code, littered throughout configuration files and configuration management tools, and stored in plaintext in version control, wikis, and shared volumes. Safeguarding and ensuring that a credentials isn’t leaked, or in the likelihood it is, that the organization can quickly revoke access and remediate, is a complex problem to solve. -
8
Hemmelig.app
Hemmelig.app
Hemmelig lets you share secrets securely with encrypted messages that automatically self-destruct after being read. Paste a password, confidential message, or private data. Ensure your sensitive data remains encrypted, secure, and confidential. The secret link, by default, is a one-time use only, after which it will vanish. Hemmelig, [he`m:(ə)li], means secret in Norwegian.Starting Price: Free -
9
OncePad
My Tiny Rocket LLC
OncePad is a free one-time secret-sharing tool (no account). Encrypts in the browser with AES-256-GCM. The link carries no key; send the passphrase on a second channel. Burns after one Decrypt & Reveal. Unopened links expire in 24 hours. Files up to 25 MB.Starting Price: Free -
10
InPrivy
InPrivy
Easily share sensitive information with co-workers, clients, friends, and family. Use InPrivy to share passwords and other sensitive information in a secure way. Prevent your confidential data to remain fully visible in email conversations or chats. Sharing private notes, passwords, API keys, credit card information or any other kind of sensitive data should be done in a safe way. When sending them via email or messengers, your data remains visible and accessible for a long time. Start sharing the secure way, and use InPrivy. No ads, no excessive user tracking, and made in Germany. We ensure robust protection of your sensitive information. Use anywhere on the web, without installing any apps. You are the only one who knows the link to the secret information you created. Give it to the person who should see it. The links are encrypted with SSL and can only be used once by default. The secret information is also kept safe using strong AES-256 encryption.Starting Price: €30 per year -
11
keyhold.io
keyhold.io
Your clients send credentials via Slack. Your contractors have passwords in email threads. Chaos. keyhold.io is a zero-knowledge secret custody platform for teams who manage credentials that aren't theirs. Send secure request links, collect credentials encrypted before they reach our servers, and get full audit trails of every access. Built for MSPs, agencies, and anyone tired of sensitive access scattered across chat threads.Starting Price: £50/month -
12
Password Pusher
Password Pusher
Password Pusher is a tool used for sharing passwords and other sensitive information with other people securely. With Password Pusher, you can create a unique, one-time URL that will expire after a certain amount of time or after it has been accessed a certain number of times, ensuring that your information remains private and secure. It is often used by individuals and organizations to share login credentials or other sensitive data with colleagues, clients, or partners. Password Pusher is a simple and convenient solution for securely sharing passwords without the need for email or other less secure communication methods.Starting Price: Free -
13
Password.link
Password.link
The link can only be opened once. This ensures nobody has opened it before the recipient and nobody can open it again afterward. The encrypted secret is deleted from our database when it has been viewed. There's no way to view it again. Sending secrets in plain text exposes them to threats even after the message has been long forgotten. Using a one-time link ensures that there are no valid credentials lying around in email inboxes or archived instant messages. Half of the encryption key is stored in the link itself and never seen by us or anyone else. Viewing the secret is not possible without the original link. Using our service you can create a one-time link to the credentials and be sure nobody sees them before the recipient. You can also configure notifications to be sent via different channels so you know when the credentials have been viewed, and by who.Starting Price: €8.99 per month -
14
iSafeSend
iSafeSend
Use iSafeSend to encrypt and safely send sensitive information via email. iSafeSend generates a unique one-time use link to your sensitive or confidential information. This unique link is accessible for a limited time and once it has been accessed or reaches its expiry date, it is deleted and can no longer be accessed. iSafeSend allows you to send multiple unique links in separate emails for the same confidential information. iSafeSend enables users to create shareable links that when clicked, give recipients access to the sensitive data that you are sharing. This data can only be viewed once, and after being viewed, it is deleted. Since these links can only be viewed once, recipients should not forward the links to other people. Specify the number of days until the links expire and select the number of links you wish to generate. Remember, each generated link can only be viewed once. -
15
Knox
Pinterest
Knox is a secret management service. Knox is a service for storing and rotation of secrets, keys, and passwords used by other services. Pinterest has a plethora of keys or secrets doing things like signing cookies, encrypting data, protecting our network via TLS, accessing our AWS machines, communicating with our third parties, and many more. If these keys become compromised, rotating (or changing our keys) used to be a difficult process generally involving a deploy and likely a code change. Keys/secrets within Pinterest were stored in git repositories. This means they were copied all over our company's infrastructure and present on many of our employees laptops. There was no way to audit who accessed or who has access to the keys. Knox was built to solve these problems. Ease of use for developers to access/use confidential secrets, keys, and credentials. Confidentiality for secrets, keys, and credentials. Provide mechanisms for key rotation in case of compromise. -
16
Link in Seconds
Link in Seconds
Link in Seconds is a web-based file-sharing service for turning files into links that recipients can open in a browser. It supports sharing files such as documents, images, video, audio, and archives, with previews and QR codes for convenient access. Senders can use sharing controls such as passwords, expiry dates, view limits, and view-only access, and can organize multiple files into an album link. The service also provides link-view information, including PDF page-level analytics, to help senders understand recipient engagement. Additional capabilities include custom domains, hosting a static website from a ZIP archive, direct peer-to-peer transfers, and browser-based PDF tools. An upload API and an MCP server are available for developer workflows. A free plan is offered, with paid plans adding storage and website-hosting options.Starting Price: $9/month -
17
Yandex Lockbox
Yandex
Create secrets in the management console or using the API. Your secrets are safely stored in one place, easily integrated with your cloud services, and accessible via external systems over the gRPC or REST API. Encrypt your secrets using Yandex Key Management Service keys. Secrets are only stored in encrypted form. You can choose pre-configured service roles to ensure granular access to your secrets. Set up access permissions to read or manage your secret or its metadata. Create a secret, select a Key Management Service (KMS) key, and securely store your login-password pairs and other sensitive information. A secret may contain any of your confidential information, e.g. a login-password pair, server certificate keys, or cloud service account keys. Each secret stored by the service can have multiple versions of stored data. The service stores this data securely in encrypted form. All secrets are replicated in three availability zones.Starting Price: $0.0277 per 10000 operations -
18
Segura
Segura
Segura® (formerly senhasegura) is a cybersecurity company focused on Privileged Access Management (PAM). Its platform helps organizations secure and manage privileged identities, credentials, and secrets across hybrid and cloud environments. Segura supports use cases such as credential vaulting, session monitoring, privilege elevation, and secrets management for DevOps. Designed to simplify complex identity security challenges, Segura provides IT teams with visibility, control, and tools to reduce risk and support compliance. The company operates globally through a network of partners and serves customers across key sectors, including finance, healthcare, government, telecom, and critical infrastructure. -
19
Keywhiz
Keywhiz
Keywhiz is a system for managing and distributing secrets. It can fit well with a service oriented architecture (SOA). Here is an overview in presentation format. Common practices include putting secrets in config files next to code or copying files to servers out-of-band. The former is likely to be leaked and the latter difficult to track. Keywhiz makes managing secrets easier and more secure. Keywhiz servers in a cluster centrally store secrets encrypted in a database. Clients use mutually authenticated TLS (mTLS) to retrieve secrets they have access to. Authenticated users administer Keywhiz via CLI. To enable workflows, Keywhiz has automation APIs over mTLS. Every organization has services or systems that require secrets. Secrets like TLS certificates/keys, GPG keys, API tokens, database credentials. Keywhiz is reliable and used in production, however occasional changes may break API backward compatibility. -
20
SecretHub
SecretHub
Upgrade security throughout the stack with a unified secrets management platform that every engineer can use – from admin to intern. Putting passwords and API keys in source code creates a security risk. But handling them properly creates complexity that makes it extremely cumbersome to deploy. Git, Slack, and email are designed to share information, not to keep secrets. Copy-pasting values and waiting on that one admin who holds all the keys simply don't scale when you're deploying software multiple times a week. It's impossible to track who accessed what secrets at what time, making compliance audits a nightmare. Eliminate secrets in source code by replacing plaintext values with a reference to the secret. SecretHub then automatically loads secrets into your app the moment it starts. Use the CLI to encrypt and store secrets and then simply tell the code where to look for the secret. Your code is now free of secrets and can be shared with everyone on your team.Starting Price: $99 per month -
21
Convay
Synesis IT PLC
Convay is a secure, AI-powered video conferencing and collaboration platform for governments, enterprises, schools, universities, healthcare providers, financial institutions, and teams. It supports HD meetings, group calls, webinars, and large sessions with up to 10,000 participants. Tools include screen sharing, whiteboards, annotation, polls, breakout rooms, recording, live streaming, integrated chat, and secure file sharing. Convay AI provides multilingual transcription, live subtitles, meeting minutes, summaries, and action-item extraction. Security features include end-to-end and AES-256 encryption, role-based access control, SSO/LDAP, domain and country locks, audit trails, confidentiality watermarks, and data-residency controls. Convay is available through SaaS and mobile apps, with private cloud, sovereign cloud, and on-premise deployment for organizations that need control over where communication data is stored and managed.Starting Price: $99.90 -
22
Use keys to protect the secrets, personal data, and sensitive information you store in the cloud. Create and delete keys, set up access policies, and perform rotation via the management console, CLI, or API. Yandex KMS implements symmetric and asymmetric cryptography. Use the REST or RPC API to encrypt and decrypt small amounts of data, such as secrets and local encryption keys, as well as to sign data using e-signature schemes. You manage access to encrypted data, and Yandex KMS ensures the reliability and physical security of keys. Hardware Security Modules (HSMs) are available. Encrypt small amounts of data using the SDK in Java or Go. To encrypt larger amounts of data, the service is integrated with popular encryption libraries, including the AWS Encryption SDK and Google Tink. Integration with Yandex Lockbox makes it possible to encrypt secrets with your own keys. Secrets and data can also be protected using encryption keys in Managed Service for Kubernetes.Starting Price: $0.0230 per month
-
23
Bravura Safe
Bravura Security
Bravura Safe is a zero-knowledge secret and passwords manager that centrally, consistently, and securely manages decentralized passwords, and secrets so your employees don't have to. It complements core password management solutions that organizations already use. Bravura Safe leverages two decades of Bravura Security’s enterprise cybersecurity solutions. Employees can securely send time-bound passwords for new accounts, encryption keys for files, or entire files without them being leaked or intercepted, and with only one password to their Bravura Safe to remember. The recent rising threat of organizational insiders being paid to help in cyberattacks combined with notoriously bad secret and password hygiene at an individual level is a cause for cybersecurity leaders to be concerned. While IT teams have focused on implementing strong SSO, password management, identity and even privileged access management solutions, the work-from-home world has caused shadow IT to explode. -
24
DocKosha
DocKosha
DocKosha is a secure document sharing and virtual data room platform for M&A teams, founders, lawyers, fundraising teams, advisors, and operators who need controlled external document sharing. Teams can organize sensitive files, create secure public links or structured data rooms, and manage access with password protection, email verification, allowlists, blocklists, NDA gates, download rules, expiry controls, and dynamic watermarking. DocKosha is built for teams that need more control than generic cloud storage and less overhead than legacy enterprise VDRs. Use it for investor diligence, M&A review, legal packets, board packs, confidential reports, client deliverables, vendor diligence, and secure PDF sharing. DocKosha includes a Free plan for lightweight secure PDF sharing. Paid plans add more storage, team access, custom branding, custom domains, full supported-file uploads, conversion workflows, and version-history controls.Starting Price: $0/month -
25
Delinea Secret Server
Delinea
Protect your privileged accounts with our enterprise-grade Privileged Access Management (PAM) solution. Available both on-premise or in the cloud. Get up and running fast with solutions for privileged account discovery, turnkey installation and out-of-the-box auditing and reporting tools. Manage multiple databases, software applications, hypervisors, network devices, and security tools, even in large-scale, distributed environments. Create endless customizations with direct control to on-premise and cloud PAM. Work with professional services or use your own experts. Secure privileges for service, application, root, and administrator accounts across your enterprise. Store privileged credentials in an encrypted, centralized vault. Identify all service, application, administrator, and root accounts to curb sprawl and gain a full view of your privileged access. Provision and deprovision, ensure password complexity and rotate credentials. -
26
Akeyless Identity Security Platform
Akeyless
Akeyless delivers identity security for an era shaped by automation and AI. The cloud-native platform secures machines, AI agents, and human access across hybrid, multi-cloud, and on-prem environments. It provides a practical path to secretless, identity-based access through secrets management, certificate lifecycle management and PKI, PAM, and unified governance. Akeyless is built on a cryptography foundation that combines encryption, key management, and Distributed Fragments Cryptography to keep sensitive material under customer control and protected from post-quantum threats. With integrations for cloud IAM, Kubernetes, CI/CD, and MCP-based AI agent workflows, teams can adopt and scale AI agents securely without expanding risk. Akeyless Jarvis™ delivers identity intelligence to surface risky access and strengthen oversight. -
27
Entropy Keycrypt
Quantum Entropy
Protect your essential digital assets with Entropy, offering a seamless and secure transition to your trusted circle in unforeseen circumstances. User-Friendly Security Entropy enables you to securely partition important information into discrete shares, each of which reveals nothing about your secret without the others. Distribute these to a select group of trusted individuals, who can then store them offline for added security. Long-Term Resilience With its robust security features, including 256-bit encryption, Entropy is well-suited for durable, decentralized offline storage, safeguarding your data from both online and specific offline threats.Starting Price: $24.99 -
28
RatelKey
RatelKey
RatelKey is a self-hosted secrets management platform for securely storing, accessing, and managing application secrets without the infrastructure complexity of traditional enterprise solutions. Secrets stay inside your own Burrow instance, while RatelKey provides authentication, access management, updates, and administration. It supports projects and environments, machine identities, role-based access control, IP restrictions, audit logs, canary secrets, encrypted backups, webhooks, SAML/OIDC SSO, SCIM provisioning, and CLI/SDK access. Burrow can run on Linux, Windows, macOS, or Docker, and applications continue retrieving secrets directly from your infrastructure even if the RatelKey control plane is unavailable. RatelKey is designed for teams that have outgrown `.env` files and scattered CI secrets but do not want to operate a complex secrets-management stack.Starting Price: $30/month -
29
Onboardbase
Onboardbase
Onboardbase is the a secret management infrastructure platform that provides single source of shared truth for app secrets and usage. It helps dev teams securely share and work with environment-specific configs at every development stage, synced across infrastructure without compromising security - this means development teams can focus on building great apps rather than managing secrets and data. Secrets are dynamically kept up to date across your environments and infrastructure, with 50+ integrations and growing. Dev teams can monitor and audit how long, where and when your secrets are used and revoke usage anywhere with a click. Powerful always-on codebase scanning features prevent developers from accidentally leaking secrets to production, maintaining a robust security model.Starting Price: Free -
30
WALLIX Bastion
WALLIX
Easy to use and deploy, the WALLIX Bastion PAM solution delivers robust security and oversight over privileged access to critical IT infrastructure. Reduce the attack surface, secure remote access, and meet regulatory compliance requirements with simplified Privileged Access Management. WALLIX Bastion delivers leading session management, secrets management, and access management features to secure IT and OT environments, enable Zero Trust and Just-In-Time policies, and to protect internal and external access to sensitive data, servers, and networks in industries ranging from healthcare to finance to industry and manufacturing. Adapt to the digital transformation with secure DevOps thanks to AAPM (Application-to-Application Password Management). WALLIX Bastion is available both on-premise and in cloud environments for complete flexibility, scalability, and the lowest market total cost of ownership. WALLIX Bastion PAM natively integrates with a full suite of security solutions -
31
CyberArk Conjur
CyberArk
A seamless open source interface to securely authenticate, control and audit non-human access across tools, applications, containers and cloud environments via robust secrets management. Secrets grant access to applications, tools, critical infrastructure and other sensitive data. Conjur secures this access by tightly controlling secrets with granular Role-Based Access Control (RBAC). When an application requests access to a resource, Conjur authenticates the application, performs an authorization check against the security policy and then securely distributes the secret. Security policy as code is the foundation of Conjur. Security rules are written in .yml files, checked into source control, and loaded onto the Conjur server. Security policy is treated like any other source control asset, adding transparency and collaboration to the organization’s security requirements. -
32
Locklizard Safeguard PDF Security
LockLizard
Locklizard protects PDF files and other digital documents from piracy, leakage and misuse. We stop unuauthorized access to documents and control how authorized users can use them. Stop theft of confidential and sensitive information, intellectual property, trade secrets, training courses, reports, ebooks, etc. Share and sell documents securely, stop data leakage and enforce compliance. Lock documents to devices and locations, dynamically watermark content, control expiry, stop printing, editing, copying and screen grabbing, and revoke access at any time. Track how your documents are being used. Locklizard uses strong US Gov strength encryption, DRM and licensing controls to ensure your documents remain fully protected at all times regardless of their location.Starting Price: $500.00/month -
33
Keyshade
Keyshade
Keyshade is a secret and configuration manager designed for developers teams and infra. It helps you avoid hardcoding secrets, eliminate sharing your .env manually, and keep environment variables in sync across local setups, CI/CD pipelines, and production. Whether you're solo or working with a team, Keyshade fits into your workflow with minimal setup and maximum security.Starting Price: $7.99/month -
34
Fortanix Data Security Manager
Fortanix
Minimize expensive data breaches and accelerate regulatory compliance with a data-first approach to cybersecurity. The Fortanix DSM SaaS offering is purpose-built for the modern era to simplify and scale data security deployments. It is protected by FIPS 140-2 Level 3 confidential computing hardware and delivers the highest security and performance standards. The DSM accelerator is an optional add-on to achieve the highest performance for latency-sensitive applications. A Single System of Record and Pane of Glass for Crypto Policy, Key Lifecycle Management, and Auditing in a Scalable SaaS Solution That Makes Data Security a Breeze. -
35
Pulumi
Pulumi
Modern Infrastructure as Code. Create, deploy, and manage infrastructure on any cloud using familiar programming languages and tools. Many clouds, one workflow. Use the same language, tools, and workflow, on any cloud. Collaborate. Harmonize your engineering practices between developers and operators. Easy continuous delivery. Deploy from the CLI, or integrate with your favorite CI/CD system, and review all changes before they are made. Tame complexity. Gain visibility across all of your environments. Audit and secure. Know who changed what, when, and why. Enforce deployment policies with your identity provider of choice. Secrets management. Keep secrets safe with easy, built-in encrypted configuration. Familiar programming languages. Define infrastructure in JavaScript, TypeScript, Python, Go, or any .NET language, including C#, F#, and VB. Your favorite tools. Use familiar IDEs, test frameworks, and tools. Share and reuse. Codify best practices and policies. -
36
VegaCrypt
VegaCrypt
VegaCrypt is a secure, zero-knowledge platform for sharing sensitive files, passwords, credentials, and confidential information. Data is protected with end-to-end encryption and can only be decrypted by the intended recipient. Users can create one-time, self-expiring links based on time or access limits, reducing the risk of unauthorized access, data leakage, and credential exposure. VegaCrypt provides a secure alternative to email and other insecure communication channels for individuals, startups, SMBs, and enterprises. Designed for global use, the platform supports secure collaboration with employees, customers, vendors, and partners. Security and compliance are core to the platform, with support for ISO/IEC 27001:2022, SOC 2, HIPAA, and GDPR requirements.Starting Price: $6.99/month/user -
37
CredShare
CredShare
There’s a safe and simple way to store, share and track credentials. Manage documentation for your household, your team, or your business anywhere, anytime with CredShare. By giving you the tools to take control of your credentials, we remove the pain of paperwork so you can focus on getting the important things done. Track and action expiring licenses, insurances, and more. Know who’s work-ready with a single view of your team's creds and their validity. Collate and connect your credentials to third parties quickly and easily. Store your professional, financial, and identity credentials. Access them when and where you need them. We use secure storage and proven encryption tools to protect you and your credentials. Quickly load, bundle, share and manage credentials at the touch of a button. Never worry about expiry dates or missing credentials again. Get notified when things need updating, and access every credential anytime, anywhere.Starting Price: $15 per month -
38
AWS Secrets Manager
Amazon
AWS Secrets Manager helps you protect secrets needed to access your applications, services, and IT resources. The service enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle. Users and applications retrieve secrets with a call to Secrets Manager APIs, eliminating the need to hardcode sensitive information in plain text. Secrets Manager offers secret rotation with built-in integration for Amazon RDS, Amazon Redshift, and Amazon DocumentDB. Also, the service is extensible to other types of secrets, including API keys and OAuth tokens. In addition, Secrets Manager enables you to control access to secrets using fine-grained permissions and audit secret rotation centrally for resources in the AWS Cloud, third-party services, and on-premises. AWS Secrets Manager helps you meet your security and compliance requirements by enabling you to rotate secrets safely without the need for code deployments.Starting Price: $0.40 per month -
39
Drone
Harness
Configuration as a code. Pipelines are configured with a simple, easy‑to‑read file that you commit to your git repository. Each pipeline step is executed inside an isolated Docker container that is automatically downloaded at runtime. Any source code manager. Drone integrates seamlessly with multiple source code management systems, including GitHub, GitHubEnterprise, Bitbucket, and GitLab. Any platform. Drone.io natively supports multiple operating systems and architectures, including Linux x64, ARM, ARM64 and Windows x64. Any language. Drone works with any language, database or service that runs inside a Docker container. Choose from thousands of public Docker images or provide your own. Create and share plugins. Drone uses containers to drop pre‑configured steps into your pipeline. Choose from hundreds of existing plugins, or create your own. Drone makes advanced customization easy. Implement custom access controls, approval workflows, secret management, yaml syntax extensions& more. -
40
Confidant
Confidant
Confidant is a open source secret management service that provides user-friendly storage and access to secrets in a secure way, from the developers at Lyft. Confidant solves the authentication chicken and egg problem by using AWS KMS and IAM to allow IAM roles to generate secure authentication tokens that can be verified by Confidant. Confidant also manages KMS grants for your IAM roles, which allows the IAM roles to generate tokens that can be used for service-to-service authentication, or to pass encrypted messages between services. Confidant stores secrets in an append-only way in DynamoDB, generating a unique KMS data key for every revision of every secret, using Fernet symmetric authenticated cryptography. Confidant provides an AngularJS web interface that allows end-users to easily manage secrets, the mappings of secrets to services and the history of changes. -
41
Switch Secure Workspace
Egress Software Technologies
Secure Workspace makes it easy for users to upload, control, and share documents securely with teammates and external partners. Our encrypted environment offers enterprise-grade access permissions at the click of a button. Our mobile app and productivity toolkit enable teams to collaborate seamlessly from anywhere. Detailed reporting helps you to demonstrate compliance and stay clear of burned reputations and regulatory fines. Secure Workspace lets you easily and securely share your most confidential data both internally and with your supply chain. Zones act as secure containers, making it easy for you to clearly organize content within folders and keep sensitive content safe from unauthorized access. With access permissions and controls, accredited security frameworks, and flexible authentication, your team can stay in control while sharing sensitive documents internally and with external partners. -
42
Azure Key Vault
Microsoft
Enhance data protection and compliance with Key Vault. Secure key management is essential to protect data in the cloud. Use Azure Key Vault to encrypt keys and small secrets like passwords that use keys stored in hardware security modules (HSMs). For more assurance, import or generate keys in HSMs, and Microsoft processes your keys in FIPS validated HSMs (hardware and firmware) - FIPS 140-2 Level 2 for vaults and FIPS 140-2 Level 3 for HSM pools. With Key Vault, Microsoft doesn’t see or extract your keys. Monitor and audit your key use with Azure logging—pipe logs into Azure HDInsight or your security information and event management (SIEM) solution for more analysis and threat detection. -
43
Idira
Idira by Palo Alto Networks
Idira is Palo Alto Networks’ next-generation identity security platform built for the AI enterprise, designed to secure every human, machine, and agentic identity through one unified control plane. It modernizes privileged access management by extending privilege controls beyond administrators to every identity that can access sensitive systems, data, applications, cloud services, workloads, endpoints, secrets, certificates, SSH keys, and AI agents. It discovers identity risk, applies privilege dynamically, and governs the full lifecycle from first access to final session. Idira replaces static, always-on access with dynamic privilege, just-in-time access, zero standing privilege, continuous verification, policy-driven controls, and real-time enforcement based on identity, device, and context. For human identities, it unifies privileged access, workforce access, endpoint privilege management, and identity governance, helping organizations reduce privilege sprawl. -
44
ShieldFive
ShieldFive
ShieldFive is end-to-end encrypted cloud storage. Every file and its name is encrypted in your browser before upload (post-quantum ML-KEM-1024 with XChaCha20-Poly1305 by default on the web), so ShieldFive stores only ciphertext and never holds your keys. Plans: 5 GB free with no card, monthly or yearly subscriptions, or the Lifetime Vault: 2 TB for EUR 199 paid once, no renewals, with a 30-day refund. You can preview PDFs, images, spreadsheets and Word documents in the browser, share files with an expiry date and password, and revoke links at any time. Firms can also collect documents from clients through a request link with a PIN and checklist; clients need no account (EUR 29 per seat per month). Current limits: web app today, Android app in testing, no desktop sync client or iOS app yet. The encryption core is open source (Apache-2.0); no external security audit has been completed yet.Starting Price: EUR 29/month/seat -
45
OpenText XM SendSecure
OpenText
OpenText XM SendSecure is a state-of-the-art file exchange platform that is both highly secure and simple to use. It allows the safe exchange and ephemeral storage of sensitive files in a virtual SafeBox. Any files exchanged are virus scanned, then encrypted in transit and at rest. 2-Factor Authentication (2FA) ensures the proper recipient gets them, and the data is automatically purged after a set period of time. To further aid regulatory compliance, XM SendSecure automatically generates an audit trail of all file interactions and communications. Central to the XM SendSecure solution is the SafeBox file container, created on upload and kept separate from other storage in a locked virtual space. Each SafeBox allows users to transfer an unlimited number of files in any format and up to 5TB each. All files are automatically scanned with antivirus software as they enter the solution, and once an exchange is started, additional files can be attached by either the sender or recipient. -
46
R&S Trusted Gate
Rohde & Schwarz Cybersecurity
R&S®Trusted Gate – Secure Data Exchange provides secure exchanging of sensitive data between authorized partners. Data is automatically encrypted and can be securely synchronized from an internal network to all major online file sharing service. Customers can define deployment, encryption and authentication without relying on a third-party service provider. No confidential data will be exposed to a cloud storage provider or sharing service. Secure sharing of data with the R&S®Trusted Gate, Secure Data Exchange is simple and efficient. Customers can define the internal network folders that need to be shared with external partners. As soon as files will be stored in these folders, R&S®Trusted Gate is immediately syncing the confidential data to the defined external target. Data will be automatically encrypted. This solution is not only limited to office file types but it is applicable to almost all scenarios, e.g. server migration and backups. -
47
KnoxCall
KnoxCall
Every app, build pipeline and AI agent that calls Stripe, OpenAI or another third-party API needs its key, so copies of live keys pile up in .env files, CI settings, laptops and agent environments. Each copy can leak through a poisoned package, a prompt-injected agent or a compromised build, and a stolen key keeps working until it is replaced everywhere. KnoxCall keeps the real key in one place and adds it to each call on its way out. Your apps, pipelines and agents hold only a KnoxCall token. If one leaks, one click revokes it everywhere, without rotating the provider key. Every call is logged with the app or agent that made it. AI agents get spend limits, prompt checks, and redaction of the personal data KnoxCall detects. CI can use workload identity instead of a stored secret, and Enterprise adds a master key held in your own cloud account, SSO and SCIM. SDKs for Node, Python, Go, PHP, Ruby, React and the browser. Free plan, no card; paid plans from $19 a month.Starting Price: $0 -
48
TrackMyRisks
Continuity Partner
All your governance, risk & compliance documents in one place. Upload and share PDFs, Office docs, images and more. Automatic version control makes it easy to manage your files. No more searching through inboxes and network folders. Other helpful features include: - Document expiry reminders - Unlimited permissioned users - Custom document tagging - In system notifications Secure and reliable visibility. Having the most up-to-date version of a document is not enough. Version control and user access tracking are essential aspects of proving compliance. TrackMyRisks offers: - User activity log - Backup and virus scan - Document revision history - Encryption of all filesStarting Price: #10 per month -
49
Hornetsecurity Email Encryption
Hornetsecurity
Business emails often contain in-house, personal, or other sensitive content that could be intercepted and accessed without authorization if inadequately protected. Ensure all-around encrypted exchange of emails with Email Encryption from Hornetsecurity for reliable, secure email communication. Outgoing emails are automatically encrypted with one of the common encryption technologies (PGP, S/MIME, or TLS), depending on the set policy and availability of the corresponding certificates, without any further user intervention. If the sender’s public key is available, their emails are automatically decrypted and delivered to the recipient. Encryption of data has become a priority because of compliance requirements. In a business environment, the exchange of sensitive files and information takes place primarily via email communication. Encryption of the transmission path is essential to protect this data. -
50
Crypho
Crypho
Crypho is a super-secure enterprise messaging app, perfect for organisations that care about data privacy and security. Employees can communicate and share files online either person-to-person or in persistent team-rooms. All messages and files are encrypted before being transferred over the network. They can only be decrypted when they reach their intended recipient. Only you hold your encryption keys. Establish an encrypted communications channel in a few minutes. No software installation is necessary. Crypho runs in normal web browsers, desktop or mobile. It works through firewalls and across different company networks. No one else has access to your encrypted voice and video calls, and your online privacy is fully protected. Our video solution is perfect for companies with high-security requirements to communicate confidential information easily.Starting Price: €379 per month
