Life & fun · alternatives · 2026
24 alternatives to Rot - Offline secrets management
Finally open sourced an internal tool we've been using for managing secrets. It's similar to SOPS, but more opinionated, easier to configure/use correctly, and produces nicer git diffs. It also supports one-way encryption, so you don't have to know the private key to add secrets.
Rot is an open-source tool for managing secrets offline, designed for teams that need to store encrypted sensitive data in version control. It works similarly to SOPS but with a more opinionated approach that… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Rot - Offline secrets management launched in 2023; newer entries below may have overtaken it.
- 1PS
Better privacy without special software
2022 · mprimi.github.io · its alternatives →
- 2
Phase▲383Open source platform for teams and AI agents to securely access, manage and deploy application secrets — from development to production.
2024 · phase.dev · its alternatives →
- 3
simple terminal UI for git commands. Contribute to jesseduffield/lazygit development by creating an account on GitHub.
2018 · github.com · its alternatives →
- 4
2016 · zemanta.github.io · its alternatives →
- 5
A secret manager backed by Keybase and KBFS. Contribute to kbsecret/kbsecret development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 6
Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 7
AxKeyStore▲31Hi HN, I built AxKeyStore, an open-source CLI tool for managing secrets that uses your own private GitHub repository as encrypted storage. The idea is simple: → All encryption happens locally. → Secrets are stored as encrypted blobs in your private repo. → GitHub is treated as untrusted storage. → No plaintext secrets ever leave your machine. → No plaintext secrets are stored on disk. Most secret managers either require a hosted backend, a self-hosted server, or trusting a SaaS provider. I wanted something that: → Requires zero infrastructure → Uses tooling developers already have → Keeps…
Feb 2026 · github.com · its alternatives →
- 8GT
I think I found the most minimalist way to share secrets between devs and infra. What do you think? https://github.com/tarasglek/github-to-sops PS. I'm not a security guy, go easy on me.
2024 · taras.glek.net · its alternatives →
- 9
- 101O
2020 · simon-frey.com · its alternatives →
- 11
Hi! I got tired of setting up tools I can't explain to a team in a few words like sops or git-crypt, just to store few files with environment variables or secrets, so I built lockenv as a simple alternative. It's basically a password-protected vault file you commit to git. No gpg keys, no cloud, just lockenv init, set a password, and lock/unlock the secrets. This tool integrates with OS keyring, so you're not typing passwords constantly. Should work on Mac/Linux/Windows, but I tested it only on linux so far. I am not trying to replace any mature / robust solution, just…
Dec 2025 · github.com · its alternatives →
- 12
Last month, we open-sourced Infisical (https://github.com/Infisical/infisical) - a simple, end-to-end encrypted tool to sync environment variables across your team and infrastructure. You can use it to store environment variables and inject them into your applications locally or into CI/CD and production infrastructure. It can be used with any language/framework and is platform independent with a super easy setup. We know secret managers exist but, in our experience, they’re too complicated, not comprehensive, not user-friendly, or a mix of all three — other…
2022 · github.com · its alternatives →
- 13
I'm excited to finally launch Outstatic, an open source static website CMS that doesn't require a complicated setup or signing up to a third-party service! You can access the documentation here: Outstatic Documentation. I invite you to start by deploying our example blog to Vercel and giving it a try. I think you'll be pleasantly surprised at how easy and fun it is to use Outstatic. Please, let me know what you think. This is the first public version of the project and all feedback is welcome. If you dig the project feel free to leave a star on Github. I appreciate your support!
2022 · outstatic.com · its alternatives →
- 14
The working layer around Git. Tools for the work Git leaves out. - Treadie
2023 · onboardbase.com · its alternatives →
- 15IB
2024 · securelog.com · its alternatives →
- 16
A sensible secret management toolkit (and Go library) for admins and programmers - domodwyer/cryptic
2016 · github.com · its alternatives →
- 17
A secret manager backed by Keybase and KBFS. Contribute to kbsecret/kbsecret development by creating an account on GitHub.
2017 · github.com · its alternatives →
- 18
Contribute to fmeringdal/covert development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 19
Simple way to manage your remote machines and SSH keys - d3witt/viking
2024 · github.com · its alternatives →
- 20
Manage secrets with Bash and GnuPG symmetric encryption - drduh/pwd.sh
2015 · github.com · its alternatives →
- 21
GitGuardian▲132Detect secrets in source code, public and private!
2018 · gitguardian.com · its alternatives →
- 22SE
2019 · fluidkeys.com · its alternatives →
- 23
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 24
Hello HN! We're all spending more and more time making stuff with agents, but I've noticed that one of the things that is the most disconnected from my daily engineering workflow is dealing with secrets and credentials. It often involves a lot of click-ops, copying/pasting, and collaboration, and none of the secrets management products out there have truly scratched that itch. I built Capy to solve this. It's a secrets manager whose entire frontend is a developer CLI, and I find it extremely ergonomic to use by hand. You also don't need to leave the CLI to sign up for and use it! You…
Aug 2026 · github.com · its alternatives →
Also compare
- Portable Secret – How I store my secrets and communicate privately alternatives
- Phase alternatives
- I made a tool that made me faster at Git alternatives
- SecretCrypt – Keeping secrets in plain sight alternatives
- A password manager using Keybase for encryption and storage alternatives
- 1Password Developer Tools alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →