Dev tools · alternatives · 2026
24 alternatives to A self-hosted, AWS-based secrets manager
Embrasure is an open-source, self-hosted secrets management tool built on Amazon Web Services (AWS)
Embrasure is a self-hosted secrets manager built on AWS infrastructure. It allows developers and operations teams to securely store and manage sensitive credentials and configuration data within their own cloud… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. A self-hosted, AWS-based secrets manager launched in 2024; newer entries below may have overtaken it.
- 1FT
Cloudbite is a low-barrier, free web app that helps you learn AWS skills with flashcards and spaced repetition.
2021 · cloudbite.attejuvonen.fi · its alternatives →
- 2
Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 3
Encrypt your on-premise server disks and save the keys in the cloud securely - randomvariable/kms-cryptsetup
2017 · github.com · its alternatives →
- 4
- 5
- 6
- 7
Secure, orchestrate, and manage infrastructure secrets
2021 · 1password.com · its alternatives →
- 8
A secret manager backed by Keybase and KBFS. Contribute to kbsecret/kbsecret development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 9
Onboardbase 2.0▲116The easiest local-first secrets manager for your team
2023 · github.com · its alternatives →
- 10
2016 · zemanta.github.io · its alternatives →
- 11
Instant Security for your AWS Environments
2023 · app.bleachcyber.com · its alternatives →
- 12
Secret Scribble▲103Secure your passwords with an, open-source password manager
2024 · secretscribble.42web.io · its alternatives →
- 13
Manage secrets in your terminal with biometric unlock.
2022 · 1password.dev · its alternatives →
- 14
🔐 Share end-to-end encrypted secrets with others via a one-time URL - sniptt-official/ots
2021 · github.com · its alternatives →
- 15
Finally open sourced an internal tool we've been using for managing secrets. It's similar to SOPS, but more opinionated, easier to configure/use correctly, and produces nicer git diffs. It also supports one-way encryption, so you don't have to know the private key to add secrets.
2023 · github.com · its alternatives →
- 16
This is a tool to manage encrypted local backups of secrets. The core idea is that it aims to be usable without depending on it, meaning that even if the software disappeared from the face of Earth tomorrow, your data would still be recoverable. It also integrates nicely with NixOS (which is what I use, though it does not require NixOS to be used). I have summed up a bit of explanation and some answers to reasonable questions in a blog post: https://baldino.dev/blog/secs-man/
Jun 2026 · github.com · its alternatives →
- 17
A sensible secret management toolkit (and Go library) for admins and programmers - domodwyer/cryptic
2016 · github.com · its alternatives →
- 18
The missing cron CLI for AWS Cloudwatch and Lambda - cronyo/cronyo
2020 · github.com · its alternatives →
- 19
A secure HashiCorp Vault for secrets, tokens, keys, passwords, and more. Automated deployment with Terraform on AWS. Configurable options for security and scalability. Usable with any applications and services hosted anywhere. - jcolemorrison/vault-on-aws
2020 · github.com · its alternatives →
- 20KA
2019 · key.cat · its alternatives →
- 21FL
Learn AWS security with the flAWS challenge
2018 · flaws.cloud · its alternatives →
- 22
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 23
Taken Over By Shad0w For Responsible Disclosure [No Malicious Content Here] - LuminalOSS/credstash
2015 · github.com · its alternatives →
- 24
I built a tool called *Kekkai* for file integrity monitoring in production environments. It records file hashes during deployment and later verifies them to detect unauthorized modifications (e.g. from OS command injection or tampering). Why it matters: * Many web apps (PHP, Ruby, Python, etc.) on AWS EC2 need a lightweight way to confirm their code hasn’t been changed. * Traditional approaches that rely on metadata often create false positives. * Kekkai checks only file content, so it reliably detects real changes. * I’ve deployed it to an EC2 PHP application in production, and it’s working…
2025 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →