Secrets / API Key Management

CyberArk

FeaturedEnterprise quote

CyberArk is the market-leading privileged access management (PAM) platform, providing credential vaulting, privileged session management, endpoint privilege management, and secrets management for enterprise security programs.

Teleport

FeaturedFree tierEnterprise quote

Teleport provides secure, audited access to SSH, Kubernetes, databases, and internal applications using short-lived certificates and RBAC — designed for engineering teams who need infrastructure access without static credentials.

1Password

1Password Business provides enterprise password and credential management for teams, with 1Password Secrets Automation extending to CI/CD secrets, developer vaults, and service account credentials.

Aembit

Enterprise quote

Aembit is a workload identity and access management platform that manages how workloads, services, and AI agents authenticate and access downstream APIs and services — without static credentials.

Akeyless is an established identity security platform delivering secrets management, certificate lifecycle management, encryption/KMS, and secure remote access from a unified SaaS, using patented Distributed Fragments Cryptography (DFC) instead of a self-managed vault. In 2025–2026 it extended the platform to AI-agent identity with ephemeral, task-scoped access.

BeyondTrust

Enterprise quote

BeyondTrust is an enterprise PAM platform providing privileged account management, privileged session management, endpoint privilege management, and secure remote access — a leading alternative to CyberArk.

Clutch Security is a non-human identity (NHI) security platform that maps service accounts, keys, tokens, and AI agents to their origins via its Identity Lineage graph, then layers on lifecycle management, posture, and threat detection. It added an Agentic AI Governance module for discovering and setting guardrails around AI agents and their credential usage.

Corsha secures machine-to-machine and API communication with trusted machine identities and dynamic, MFA-style authentication (m-MFA) for machines, plus connection discovery and identity-based access control. It is purpose-built for operational technology, defense, and critical infrastructure, deployable as SaaS or self-hosted via hardware and virtual control points.

Delinea

Enterprise quoteEnterprise

Privileged access management platform (formed from Thycotic and Centrify) covering secret server, privileged session and remote access.

Entro Security is an agentic AI and non-human identity security platform that discovers, classifies, and governs NHIs and secrets across clouds, code, vaults, and collaboration tools, with behavioral threat detection via its NHIDR engine. SailPoint completed its acquisition of Entro in June 2026, making it the NHI and secrets layer of SailPoint's Agentic Fabric.

HashiCorp Vault

Open coreFree tierEnterprise

Widely used secrets management and machine identity platform, available as open source, enterprise and HCP Vault Dedicated.

Keeper Security

Keeper Security provides enterprise password management, privileged access management (KeeperPAM), and secrets management for DevOps pipelines — with a strong focus on zero-knowledge architecture and compliance.

Oasis Security is a non-human identity management platform covering inventory, ownership, posture, lifecycle, and secret rotation for machine identities, with AI-SPM and intent-aware access controls for AI agents. In July 2026, data-security company Cyera agreed to acquire Oasis for approximately $1 billion, with closing expected later in the year.

Token Security is a machine-first identity security platform that discovers non-human identities and AI agents across cloud, SaaS, and on-prem environments, then manages their posture, lifecycle, and threats. In March 2026 it introduced Intent-Based AI Agent Security, which aligns agent permissions with their stated purpose.