AWS Secrets Manager Alternatives (September 2025)

AWS CloudHSM provides total access management control and protection for your encryption keys with secure and compliant hardware security modules (HSMs).

AWS Systems Manager is a secure end-to-end management solution for resources on AWS and in multicloud and hybrid environments.

Keeper Secrets Manager is a fully managed cloud-based, Zero-Knowledge platform. Learn more and get started now.

AWS Firewall Manager is a security management service that allows you to centrally configure and manage firewall rules across your accounts and applications in AWS Organizations.

Access management for AWS services and resources. Manage fine-grained permissions and analyze access to refine permissions.

Standardize secrets management with identity-based security from Vault that lets you centrally discover, store, access, rotate, and distribute dynamic secrets.

Use AWS Certificate Manager to provision, manage, and deploy public and private SSL/TLS certificates with AWS services and internal connected resources.

AWS Organizations enables centralized cloud account management as you grow and scale your AWS resources.

Learn how AWS Key Management Service (KMS) provides you with logs of key usage to help you meet your regulatory and compliance needs.

AWS Security Hub is a cloud security posture management service that automates best practice checks, aggregates alerts, and supports automated remediation.

The #1 Vault Alternative secures credentials, certificates and keys securely and with ease across multi-cloud environments.

Bitwarden Secrets Manager enables developers and DevOps teams to centrally store, manage, and deploy secrets at scale. Start a free trial today!

Protect your business and applications with secrets management. Remove hard coded secrets used by applications, scripts and other non-human identities.

AWS Database Migration Service (DMS) is a highly resilient, secure cloud service that provides database discovery, schema conversion, data migration, and ongoing replication to and from a wide range of databases and analytics systems.

AWS Resource Access Manager helps you securely share your AWS resources with other AWS accounts.

AWS License Manager makes it easier for you to manage your software licenses from vendors, such as Microsoft, SAP, Oracle, and IBM, across AWS and on-premises environments.

A fully-managed, cloud-native directory from Amazon Web Services (AWS)

The AWS Command Line Interface (CLI) provides a unified tool to manage your AWS services directly from the command line.

Amazon Relational Database Service (RDS) is a fully managed, open-source cloud database service that allows you to easily operate and scale your relational database of choice, including Amazon Aurora, PostgreSQL, SQL Server, and MySQL.

AWS CodeCommit is a managed source control repository that makes it easier for teams to securely collaborate on code with contributions encrypted in transit and at rest.

AWS IoT Device Defender makes it easier to maintain, manage, and configure security policies for all your IoT devices. Get the tools to identify and respond to security issues.

Amazon SimpleDB is a simple database storage solution that allows developers to simply store & query data items via web services requests, saving time.

With Box KeySafe, you gain independent control of your encryption keys through our partnership with AWS KMS Key Management Services and AWS CloudHSM.

Protect privileged accounts with Delinea Secret Server. Easy-to-use, full-featured privileged access management. Cloud and on-premises.

The broadest selection of relational and NoSQL purpose-built databases, fully managed, high performance, and ready to scale.

AWS Cloud WAN makes it easy to build, manage, and monitor a unified global network—connecting your cloud and on-premises resources.

Amazon Web Services offers reliable, scalable, and inexpensive cloud computing services. Free to join, pay only for what you use.

Implement customer identity and access management (CIAM) that scales to millions of users with Amazon Cognito, fully managed authentication service.

AWS Lake Formation makes it easier to centrally govern, secure, and globally share data for analytics and machine learning.

AWS IoT Device Management allows you to securely onboard, organize, monitor, and remotely manage IoT devices at scale.

Amazon Neptune is a fast, fully managed database service powering graph use cases such as identity graphs, knowledge graphs, and fraud detection.

AWS Control Tower provides a single location to set up a well-architected, multi-account environment to govern your AWS workloads with rules for security, operations, and compliance.

AWS Clean Rooms helps companies and their partners more securely analyze and collaborate on their collective datasets without sharing or copying one another’s underlying data.

Fully managed Windows file system for business applications.

Protecting and controlling the use of generic and high privilege credentials, providing secure storage, access segregation and full traceability of use.

ManageEngine Password Manager Pro, on-premise enterprise password management software for secure vaulting & secrets management. Try it now for free!

AWS VPN establishes encrypted connections for hybrid connectivity networks with AWS Site-to-Site VPN and remote workforce access with AWS Client VPN.

AWS Config is a config tool that helps you assess, audit, and evaluate the configurations and relationships of your resources.

AWS Service Catalog helps you create and manage IaC templates approved for use on AWS so anyone can discover approved, self-service cloud resources.

Amazon API Gateway helps you build HTTP, REST, and WebSocket APIs with a fully managed service that makes it easy to create, publish, maintain, manage, monitor, and secure APIs.

Amazon Elastic Container Registry (ECR) is a fully managed Docker container registry that makes it easy to store, share, and deploy container images.

Amazon Simple Email Service (SES) is a cost-effective, flexible, and scalable email service provider that allows developers to send email from within any application.

Keeper® is the top-rated password and secrets manager for protecting businesses and families from cyber threats. Try free now!

AWS Artifact provides on-demand access to select security reports, compliance reports, and agreements with AWS.

Amazon Macie is a data security service that uses machine learning (ML) and pattern matching to discover and help protect your sensitive data.

Amazon Inspector is an automated vulnerability management service that continually scans AWS workloads for software vulnerabilities and unintended network exposure.

Amazon MSK is a fully managed, secure, and highly available Apache Kafka service that makes it easy to ingest and process streaming data in real time at a low cost.

Safeguard cryptographic keys and other secrets used by cloud apps and services with Microsoft Azure Key Vault. Try it now.

Connect Active Directory to AWS resources or set up a new directory on AWS for your directory-aware workloads.

Amazon SQS fully managed message queuing makes it easy to decouple and scale microservices, distributed systems, and serverless applications.

AWS Shield is a managed DDoS protection service that safeguards applications running on AWS

Driven by the need for greater productivity, lower costs, and more recently being able to scale a remote workforce, organizations around the world are moving their IT workloads to the cloud. Planning a move to the cloud requires upfront pre-migration planning; this is as important as the implementation itself. But it can be daunting to know where to start or what needs to be in place for a successful migration. The Amazon Web Services (AWS) Cloud Adoption Readiness Tool (CART) can help provide insight into your level of readiness and what you can do to improve it.

Amazon Timestream is a fast, scalable, serverless time series database service for Internet of Things (IoT) and operational applications that helps you store and analyze time series data.

Build your AWS Cloud Skills with AWS Training and Certification. Learn AWS online with free digital training, in-person classroom training, virtual classroom training, and private on-site and virtual training. Learn more!

AWS App Runner helps you deploy and scale from your source code or container image to a secure web application on AWS.

AWS CloudFormation is an infrastructure as code (IaC) service that allows you to easily model, provision, and manage AWS and third-party resources.

Amazon Elastic Block Store (EBS) is an easy to use, high-performance cloud Storage Area Network (SAN).

AWS Cloud Map is a cloud resource discovery service. With Cloud Map, you can define custom names for your application resources, and it maintains the updated location of these dynamically changing resources. This increases your application availability because your web service always discover the most up-to-date locations of its resources.

Amazon Elastic Container Service (Amazon ECS) provides a fully managed container service solution that’s easy to use, scalable, secure, and reliable.

AWS IoT Core enables secure two-way communication between internet-connected devices and AWS services with device gateway and device SDK capabilities.

Bitwarden makes it easy for businesses and individuals to securely generate, store, and share passwords from any location, browser, or device. Create your free Bitwarden account today.

AWS App Mesh is an application networking service mesh that lets you more easily monitor and control communications across services.

Amazon GuardDuty is a threat detection service that monitors for malicious activity and anomalous behavior to protect AWS accounts, workloads, and data.

Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ that simplifies setup and operation of open-source message brokers on AWS.

Learn more about Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and managed Apache Cassandra compatible database service.

Amazon GameSparks is a fully managed game backend service that manages and scales your cloud infrastructure.

Introducing AWS Transfer for SFTP, a fully managed SFTP service for Amazon S3. AWS Transfer for SFTP enables you to easily move your file transfer workloads that use the Secure Shell File Transfer Protocol (SFTP) to AWS without needing to modify your applications or manage any SFTP servers.

AWS Step Functions lets you orchestrate multiple AWS services into serverless workflows so that you can build and update applications quickly.

All-in-one platform to securely manage application configuration and secrets across your team and infrastructure. Used by Fortune 500 enterprises, international governments, and fastest-growing startups. Save time and boost security.

Securely store API keys, passwords, certificates, and other sensitive data with Google Cloud’s Secret Manager.

AWS Glue is a serverless data integration service that makes it easy to discover, prepare, integrate, and modernize the extract, transform, and load (ETL) process.

Password Manager Pro's MSP Edition allows service providers to centrally manage the privileged passwords of their clients through a fully automated, policy-driven approach.

AWS Transfer Family enables fully managed support for SFTP, FTPS and FTP to move large amounts of data into AWS.

Amazon Virtual Private Cloud (VPC) is a service that lets you launch AWS resources in a logically isolated virtual network that you define.

AWS PrivateLink provides private connectivity between VPCs, AWS services, and on-premises applications securely on AWS.

Zoho Vault is an online password manager that acts as a digital vault for your identities. Safely manage all your passwords & protect them from cyberthreats. Try for free. No credit card required.

Discover the tools that you need to simplify and accelerate your migration and modernization with AWS Migration Hub. Learn more about key benefits and tools.

Centrally manage and maintain control of the encryption keys that protect enterprise data and the secret credentials used to securely access resources.

AWS Cost & Usage Reports contains the most comprehensive set of AWS cost and usage data available, including additional metadata about AWS services, pricing, and reservations.

With Enpass, choose where your passwords and passkeys are secured and synced – on your personal or business clouds (or even offline). Not on our servers

Use Amazon Managed Blockchain (AMB) to build with Scalable Blockchain Network at scale without any specialized infrastructure investment.

Amazon CloudFront is a content delivery network (CDN) service that helps you distribute your static and dynamic content quickly and reliably with high speed performance, security, and developer ease-of-use.

AWS Cloud Development Kit (CDK) is an open-source software development framework used to model and provision your cloud application resources with familiar programming languages.

Run AWS infrastructure and services on premises for a truly consistent hybrid experience.

AWS Ground Station is a fully managed service that lets you control satellite communications, downlink and process satellite data, and scale your satellite operations quickly, easily and cost-effectively without having to worry about building or managing your own ground station infrastructure

Doppler redefines how engineering teams handle secrets management. Experience enhanced security, agility, and automation with our cloud platform. Start your free trial.

Amazon DocumentDB is a fast, scalable, and highly available document database that is MongoDB compatible.

Amazon MemoryDB is a Redis OSS-compatible, durable, in-memory database service that delivers ultra-fast performance.

Securely manage your access and permissions to SQL, NoSQL, and Cloud databases with DBHawk, the all-in-one data platform by Datasparc.

IBM API Connect is software to rapidly create, secure and manage APIs. IBM API Connect can be deployed in any Red Hat OpenShift environment. It’s also available as SaaS in a shared or dedicated instance, and as part of IBM Cloud Pak for Integration.

Amazon CloudWatch is a monitoring service built for DevOps engineers, developers, site reliability engineers (SREs), IT managers, and product owners.

With CyberArk Workforce & Customer Access solutions, organizations can ensure that the right users have secure access to the right resources at the right time.

CloudEndure, an AWS Company, provides disaster recovery and cloud migration to AWS from any physical, virtual, or cloud-based infrastructure.

Amazon Redshift is a fast, fully managed cloud data warehouse that makes it simple and cost-effective to analyze all your data.

AWS Transit Gateway connects virtual private cloud and on-premises networks through a central hub. It acts as a highly scalable cloud router so you can easily add to your network.

The IOS XE based Cisco® Catalyst® 8000V Edge Software (Catalyst 8000V) sets the standard for virtual network services with maximum SDWAN & IPSec performance in the Amazon Web Services (AWS) cloud, bringing the world's most popular networking platform to AWS.

KeePass is a free open source password manager. Passwords can be stored in an encrypted database, which can be unlocked with one master key.

Portworx is persistent storage for containers and databases. Operate data services for containers including persistent storage, HA, snapshots, backup, encryption and disaster recovery. Try today!

Secure cloud storage with SFTP/FTPS/S3/HTTP file access designed for smooth and easy data transfer.