Work · alternatives · 2026

24 alternatives to Vault on AWS – A Terraform Project for Secrets Management Anywhere

A secure HashiCorp Vault for secrets, tokens, keys, passwords, and more. Automated deployment with Terraform on AWS. Configurable options for security and scalability. Usable with any applications and services hosted anywhere. - jcolemorrison/vault-on-aws

Vault on AWS is a Terraform project that enables secrets management across different environments. It provides infrastructure-as-code templates for deploying HashiCorp Vault on Amazon Web Services. The project is… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Vault on AWS – A Terraform Project for Secrets Management Anywhere launched in 2020; newer entries below may have overtaken it.

1. 1
   Open-source alternative to HashiCorp/IBM Vault▲123

   Infisical is the open-source platform for secrets, certificates, and privileged access management. - infisical/README.md at main · Infisical/infisical

   2024 · github.com · its alternatives →

2. 2
   MCP Secrets Vault – Local MCP proxy to keep API keys out of LLM context▲11

   Local-first MCP mini-vault: let AIs call external APIs without ever seeing your keys. - RachidChabane/mcp-secrets-vault

   2025 · github.com · its alternatives →

3. 3
   Encrypt your home-lab server disks using AWS Key Management Service▲39

   Encrypt your on-premise server disks and save the keys in the cloud securely - randomvariable/kms-cryptsetup

   2017 · github.com · its alternatives →

4. 4
   HCP Vault Secrets▲13

   Build security into your apps and workflows

   2023 · hashicorp.com · its alternatives →

5. 5
   Covert – Rewrite of HashiCorp Vault Using Rust, SQLite and Litestream▲54

   Contribute to fmeringdal/covert development by creating an account on GitHub.

   2023 · github.com · its alternatives →

6. 6
   Agent Vault – Open-source credential proxy and vault for agents▲156

   Hey HN! Today we're launching Agent Vault - an open source HTTP credential proxy and vault for AI agents. Repo is at https://github.com/Infisical/agent-vault, and there's an in-depth description at https://infisical.com/blog/agent-vault-the-open-source-crede.... We built Agent Vault in response to a question that been plaguing the industry: How do we give agents secure access to services without them reading any secrets? Most teams building agents have run into this exact problem: They build an agent or agentic system and come to realize at some point…

   Apr 2026 · github.com · its alternatives →

7. 7
   Vault One▲75

   Protect your company passwords securely from attacks.

   2017 · vaultone.com · its alternatives →

8. 8
   Digger.dev – A PaaS that generates Terraform, in your AWS account▲142

   Digger is enterprise-ready, self-hostable infrastructure tooling. Terraform CI/CD, drift detection, PR automation, and state management. Open source DevOps for cloud-native teams.

   2021 · diggerdev.com · its alternatives →

9. 9
   Vault3▲144

   A safe, decentralized vault for your files

   2022 · its alternatives →

10. 10
    Lockenv – Simple encrypted secrets storage for Git▲105

    Hi! I got tired of setting up tools I can't explain to a team in a few words like sops or git-crypt, just to store few files with environment variables or secrets, so I built lockenv as a simple alternative. It's basically a password-protected vault file you commit to git. No gpg keys, no cloud, just lockenv init, set a password, and lock/unlock the secrets. This tool integrates with OS keyring, so you're not typing passwords constantly. Should work on Mac/Linux/Windows, but I tested it only on linux so far. I am not trying to replace any mature / robust solution, just…

    Dec 2025 · github.com · its alternatives →

11. 11
    KubeVault – Tools for Running HashiCorp Vault on Kubernetes▲10

    Cloud Native Data Platform

    2020 · blog.byte.builders · its alternatives →

12. 12
    Stop Putting AWS Credentials in GitHub Secrets▲88

    Greetings! I've created a GitHub action that works that allows GitHub Actions to exchange a GitHub token for AWS Access Credentials. I've cultivated a few examples of it in action: https://github.com/saml-to/aws-assume-role-action-examples I've always found management of AWS Credentials has been a pain. So this setting up this Action works like this: 1) A SAML Identity Provider is created in AWS 2) A Role in AWS is set up to trust that Identity Provider 3) A config file is added to the repository indicating which role can be assumed 4) The GitHub Action exchanges the Repo…

    2022 · github.com · its alternatives →

13. 13
    envsecrets▲72

    CLI first management of your environment secrets

    2023 · envsecrets.com · its alternatives →

14. 14
    Terraform Generator by Digger▲87

    Automagically generate infrastructure-as-code on AWS

    2022 · its alternatives →

15. 15
    Kee Vault▲76

    Open Source password manager to secure passwords, simply. 🔒

    2019 · keevault.pm · its alternatives →

16. 16
    Vault DAO▲77

    Keep your crypto and NFTs safe with Upstream’s Vault DAO.

    2022 · upstreamapp.com · its alternatives →

17. 17
    Automate the creation of unique Vault tokens for Kubernetes Pods▲10

    Automate the creation of unique Vault tokens for Kubernetes Pods using init containers. - kelseyhightower/vault-controller

    2016 · github.com · its alternatives →

18. 18
    html-vault – create self-contained HTML for password protected content▲55

    Generates self-contained HTML files protecting secret text content. - dividuum/html-vault

    2020 · github.com · its alternatives →

19. 19
    AI Vault▲5

    I built Vault-AI to solve a problem I kept running into when building AI apps: API keys and secrets end up scattered in .env files, hardcoded, or shared insecurely. Vault-AI is a lightweight, self-hosted secrets manager — kind of like HashiCorp Vault, but simplified and aimed at AI workloads. It runs in Docker, comes with a simple CLI, and manages tenants, token-based auth, secret rotation, rollback, version history, and audit logs. Quickstart: git clone → ./start.sh → vault-ai store/get Repo: https://gitlab.com/vaultaiproject/vault-ai.git Would love feedback…

    Jul 2026 · ps-aditya.github.io · its alternatives →

20. 20
    Libvault – lightweight Vault client in Go, with no dependencies▲16

    A lightweight Vault client module written in Go, with no dependencies, that is intuitive and user-friendly - canidam/libvault

    2021 · github.com · its alternatives →

21. 21
    My Favorite Hosting Stack. Consul, Nomad and Vault on Digital Ocean▲16

    Contribute to fmeringdal/do-hashicorp-cluster development by creating an account on GitHub.

    2021 · github.com · its alternatives →

22. 22
    Vaulted – a tool for managing encrypted environments full of secrets▲13

    Spawning and storage of secure environments. Contribute to miquella/vaulted development by creating an account on GitHub.

    2016 · github.com · its alternatives →

23. 23
    PassGen▲2

    Vault Password Generator and Encryption

    Dec 2025 · release-assets.githubusercontent.com · its alternatives →

24. 24
    Securden Password Vault for Enterprises▲6

    Password Vault for IT Teams

    2022 · securden.com · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →