Dev tools · alternatives · 2026
24 alternatives to Covert – Rewrite of HashiCorp Vault Using Rust, SQLite and Litestream
Contribute to fmeringdal/covert development by creating an account on GitHub.
Covert is a secrets management tool built with Rust, SQLite, and Litestream that provides an alternative to HashiCorp Vault. It stores and manages sensitive credentials and configuration data for developers and… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Covert – Rewrite of HashiCorp Vault Using Rust, SQLite and Litestream launched in 2023; newer entries below may have overtaken it.
- 1
Infisical is the open-source platform for secrets, certificates, and privileged access management. - infisical/README.md at main · Infisical/infisical
2024 · github.com · its alternatives →
- 2
- 3
saltify.io▲164A simple, secure and free to use tool for sharing secrets
2017 · saltify.io · its alternatives →
- 4
Finally open sourced an internal tool we've been using for managing secrets. It's similar to SOPS, but more opinionated, easier to configure/use correctly, and produces nicer git diffs. It also supports one-way encryption, so you don't have to know the private key to add secrets.
2023 · github.com · its alternatives →
- 5
I built a SQLite VFS in Rust that serves cold queries directly from S3 with sub-second performance, and often much faster. It’s called turbolite. It is experimental, buggy, and may corrupt data. I would not trust it with anything important yet. I wanted to explore whether object storage has gotten fast enough to support embedded databases over cloud storage. Filesystems reward tiny random reads and in-place mutation. S3 rewards fewer requests, bigger transfers, immutable objects, and aggressively parallel operations where bandwidth is often the real constraint. This was explicitly inspired…
Mar 2026 · github.com · its alternatives →
- 6
A Rust crate for containing memory leaks and fragmentation - brannondorsey/mem-isolate
2025 · github.com · its alternatives →
- 7
I'm a software engineer who keeps getting pulled into DevOps no matter how hard I try to escape it. I recently moved into a Lead DevOps Engineer role writing tooling to automate a lot of the pain away. On my own time outside of work, I built Artifact Keeper — a self-hosted artifact registry that supports 45+ package formats. Security scanning, SSO, replication, WASM plugins — it's all in the MIT-licensed release. No enterprise tier. No feature gates. No surprise invoices. Your package managers — pip, npm, docker, cargo, helm, go, all of them — talk directly to it using their native…
Feb 2026 · github.com · its alternatives →
- 8
envsecrets▲72CLI first management of your environment secrets
2023 · envsecrets.com · its alternatives →
- 9
just wanted to share ward, a tool i hacked together to encrypt and manage sensitive files in a vault folder. it's written in bash and meant to be cloned and then stored using git or version control. you don't have to store it that way, it's just why i created it. what ward does: encrypts the files in ./vault/ into a single .gpg file, checks to see if your files have been tampered with, generates totp codes if you need them to recover critical accounts. how to use it: clone the repo, toss your files into the vault directory, and run yarn encrypt. now commit your new [private]…
2024 · github.com · its alternatives →
- 10
Hi! I got tired of setting up tools I can't explain to a team in a few words like sops or git-crypt, just to store few files with environment variables or secrets, so I built lockenv as a simple alternative. It's basically a password-protected vault file you commit to git. No gpg keys, no cloud, just lockenv init, set a password, and lock/unlock the secrets. This tool integrates with OS keyring, so you're not typing passwords constantly. Should work on Mac/Linux/Windows, but I tested it only on linux so far. I am not trying to replace any mature / robust solution, just…
Dec 2025 · github.com · its alternatives →
- 11
Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 12
A sensible secret management toolkit (and Go library) for admins and programmers - domodwyer/cryptic
2016 · github.com · its alternatives →
- 13
Stasher is a tiny CLI tool that lets you share encrypted secrets that burn after reading — no accounts, no logins, no servers to trust. I built it because I just wanted to share a password. Not spin up infra. Not register for some "secure" web app. Not trust Slack threads. Just send a secret. Secrets are encrypted client-side with AES-256-GCM. You get a `uuid:key` token to share. Once someone reads it, it's gone. If they don't read it in 10 minutes, it expires and deleted. Everything is verifiable. Every release is signed, SLSA-attested, SBOM-included, and logged in the Rekor transparency…
2025 · github.com · its alternatives →
- 14
A lightweight Vault client module written in Go, with no dependencies, that is intuitive and user-friendly - canidam/libvault
2021 · github.com · its alternatives →
- 15
A secure HashiCorp Vault for secrets, tokens, keys, passwords, and more. Automated deployment with Terraform on AWS. Configurable options for security and scalability. Usable with any applications and services hosted anywhere. - jcolemorrison/vault-on-aws
2020 · github.com · its alternatives →
- 16
- 17
2016 · zemanta.github.io · its alternatives →
- 18
I don't know Rust. Friday after work I realised that 90% of my IDE time now is just the commit/diff view — and even good IDEs feel heavy for that. So over the weekend I built a dedicated native tool for just that. Kyde is a macOS git commit + diff editor with one goal: be fast, do Git well. I'm curious whether anyone else mostly opens their IDE for git operations these days. It's open source, and there's a signed app in Releases.
Jun 2026 · github.com · its alternatives →
- 19
Rust crypto w/ zero default deps: BLAKE3, Ed25519/X25519, hashes, MACs, KDFs, AEADs, and checksums w/ full SIMD/ASM acceleration - GitHub - loadingalias/rscrypto: Rust crypto w/ zero default deps: BLAKE3, Ed25519/X25519, hashes, MACs, KDFs, AEADs, and checksums w/ full SIMD/ASM acceleration
Jun 2026 · github.com · its alternatives →
- 20AP
Hi HN, Bastion Enclave is an experiment in removing centralized trust from password management by eliminating server-side state entirely. Instead of storing an encrypted vault or syncing secrets through a backend, Bastion computes credentials deterministically on-the-fly using explicit cryptographic inputs. Given the same master entropy, service name, username, and version counter, the same password is reproduced across platforms. There is no account system, no database, and no persistent server storage — the server serves static code only. Password generation uses domain-separated salts and…
Feb 2026 · bastion-enclave.vercel.app · its alternatives →
- 21
This is a tool to manage encrypted local backups of secrets. The core idea is that it aims to be usable without depending on it, meaning that even if the software disappeared from the face of Earth tomorrow, your data would still be recoverable. It also integrates nicely with NixOS (which is what I use, though it does not require NixOS to be used). I have summed up a bit of explanation and some answers to reasonable questions in a blog post: https://baldino.dev/blog/secs-man/
Jun 2026 · github.com · its alternatives →
- 22IB
2024 · securelog.com · its alternatives →
- 23
Spawning and storage of secure environments. Contribute to miquella/vaulted development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 24RS
2018 · revealer.cc · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →