Dev tools · alternatives · 2026

24 alternatives to Pulumi ESC

Centralize environments, secrets, and configuration

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Pulumi ESC launched in 2023; newer entries below may have overtaken it.

1. 1
   enveil – hide your .env secrets from prAIng eyes▲201

   enject: Hide .env secrets from prAIng eyes: secrets live in local encrypted stores (per project) and are injected directly into apps at runtime, never touching disk as plaintext. - GreatScott/enject

   Feb 2026 · github.com · its alternatives →

2. 2
   Pulumi▲74

   Get code to the cloud. Faster. Together.

   2018 · pulumi.com · its alternatives →

3. 3
   envsecrets▲72

   CLI first management of your environment secrets

   2023 · envsecrets.com · its alternatives →

4. 4ES
   EnvKey – securely manage API keys, credentials, and config▲116

   2017 · envkey.com · its alternatives →

5. 5
   From dotenv to dotenvx – better config management▲354

   A leap forward in configuration management for dotenv

   2024 · dotenvx.com · its alternatives →

6. 6
   Doppler▲577

   Easily manage your environment variables and secrets

   2020 · doppler.com · its alternatives →

7. 7
   EnvKey▲79

   Protect api keys and credentials. Keep config in sync.

   2017 · its alternatives →

8. 8E2
   EnvKey 2.0 – End-To-End Encrypted Environments (now open source)▲225

   Hey HN, I'm so happy to finally show you all this release after years of hard work. I posted the first version of EnvKey to HN back in 2017 (https://news.ycombinator.com/item?id=15330757), then went through YC in W18 (https://news.ycombinator.com/item?id=16569534). EnvKey is an end-to-end encrypted configuration and secrets manager. It protects your organization's API keys, encryption keys, credentials, and other secrets, and makes it easy to run servers, scripts, tests, and everything else with the latest config. It also helps you avoid duplication in your…

   2022 · v2.envkey.com · its alternatives →

9. 9
   CLI-first management of your environment secrets▲10

   Open-source, end-to-end encrypted management of environment secrets.

   2023 · envsecrets.com · its alternatives →

10. 10
    Infisical – open-source secrets manager▲232

    Last month, we open-sourced Infisical (https://github.com/Infisical/infisical) - a simple, end-to-end encrypted tool to sync environment variables across your team and infrastructure. You can use it to store environment variables and inject them into your applications locally or into CI/CD and production infrastructure. It can be used with any language/framework and is platform independent with a super easy setup. We know secret managers exist but, in our experience, they’re too complicated, not comprehensive, not user-friendly, or a mix of all three — other…

    2022 · github.com · its alternatives →

11. 11
    Phase▲383

    Open source platform for teams and AI agents to securely access, manage and deploy application secrets — from development to production.

    2024 · phase.dev · its alternatives →

12. 12CS
    Crypt – Secure Configuration Storage in Etcd or Consul▲69

    Crypt : Store and retrieve encrypted configuration parameters from etcd or consul

    2014 · xordataexchange.github.io · its alternatives →

13. 13
    Configu – OSS project that puts an end to your configuration headaches▲51

    Hi HN, this is Peleg from Configu. We have open-sourced Configu (https://github.com/configu/configu). It’s a simple yet powerful tool designed to manage application configurations (env vars, secrets, feature flags, and more) at scale across environments – from code to runtime – by providing configuration orchestration along with a Configuration-as-Code (CaC) approach. You can easily sync and connect it to any configuration store you use (files in git repo, secret managers, feature flags, databases, etc.) and Configu Orchestrator provides a unified interface that rules…

    2023 · github.com · its alternatives →

14. 14
    Shelve▲156

    Effortless & secure secrets management

    2025 · shelve.cloud · its alternatives →

15. 15
    Infisical▲200

    Open-source secrets manager

    2023 · infisical.com · its alternatives →

16. 16
    1Password Secrets Automation▲163

    Secure, orchestrate, and manage infrastructure secrets

    2021 · 1password.com · its alternatives →

17. 17CL
    Config.ly – Never hardcode your data again▲106

    2020 · config.ly · its alternatives →

18. 18
    Comfygure – A small CLI to manage application configurations▲75

    Two years after the initial release, we

    2019 · marmelab.com · its alternatives →

19. 19
    EnvFlow▲6

    Manage environment variables across projects easily

    Jun 2026 · envflow.dev · its alternatives →

20. 20VD
    VPC Design Studio – Subnet CIDR planning with Terraform/Pulumi code gen▲64

    Design studio tool to help you graphically plan complex VPC design, calculate the optimal CIDR range for subnets and generate Terraform/Pulumi code on the fly.

    2020 · houqp.github.io · its alternatives →

21. 21
    Infisical▲85

    Help dev teams sync environment variables

    2022 · infisical.com · its alternatives →

22. 22
    Desktop Sandbox for Secure Cloud Computer Use▲50

    E2B Desktop Sandbox for LLMs. E2B Sandbox with desktop graphical environment that you can connect to any LLM for secure computer use. - e2b-dev/desktop

    2024 · github.com · its alternatives →

23. 23
    1Password Developer Tools▲105

    Develop faster, eliminate complexity, protect your secrets

    2022 · 1password.com · its alternatives →

24. 24
    ConfigLive▲68

    Test your server configuration for global security standards

    2021 · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →