Vendor Directory
Explore application security and software supply chain vendors.
Akeyless Security
Secure your secrets, simplify your workflows
Akeyless offers a modern secrets management platform designed for teams using DevOps, hybrid cloud, and AI workloads. It centralizes and secures static, dynamic, and short-lived secrets, API tokens, and certificates across CI/CD pipelines, eliminating the need for vault management. The solution utilizes Distributed Fragments Cryptography (DFC) to ensure encryption keys are mathematically split across regions and providers, providing users with full control. Akeyless supports automated rotation and just-in-time access, integrating seamlessly with IDEs and cloud environments. This approach enhances security, compliance, and operational efficiency, helping teams mitigate risks associated with secrets sprawl.
Doppler
Secure your secrets, safeguard your success
Doppler is a centralized cloud-based secrets management platform that securely manages, orchestrates, and governs secrets and non-human identities at scale. Integrated with popular DevOps tools, it enhances security by preventing breaches through efficient secrets management workflows. Doppler’s platform ensures that sensitive information is easily accessible while preventing issues like missing or misconfigured secrets. This contributes to significant cost savings by mitigating potential breaches, making it essential for teams looking to streamline their secrets management processes.
Entro Security
Guarding Your Digital Frontiers with Precision
Entro describes itself as an enterprise security platform focused on AI agents and non-human identities (NHIs). The product claims to unify security for AI agents, NHIs and secrets by delivering visibility, ownership attribution, and real-time detection of anomalies. Entro’s site text highlights discovery and inventory capabilities — "Discover all AI agents, non-human identities & their secrets across your organization" — and states it can manage and secure the NHI lifecycle at scale. The record also references Vendor Privileged Access Management (VPAM) and emphasizes real-time monitoring and analysis to detect and mitigate threats related to secrets and non-human identities.
PureVPN - Partner & Enterprise Solutions
Tailor-Made Cyber Solutions for Your Brand
PureWL positions itself as a white-label provider of cybersecurity software and integration. The homepage lists secure VPNs, “VPN network as a service,” password managers, tracker blocker, and “privacy-first AI layers.” The company promotes “Fully Customizable & Developer-Friendly White-Label Solutions,” “Effortless Multi-Platform Integration,” and “Robust, Scalable & Compliance-Ready Infrastructure.” The offering is presented as embeddable/white-label software for businesses seeking to integrate VPN, password management and privacy tooling into their own products or services. Descriptions are product-focused and emphasize white-label, developer-friendly integration and compliance-ready infrastructure rather than specific compliance certification workflows.
Phase
Secure your secrets, streamline your deployment
Phase is an open-source platform designed for fast-moving engineering teams to secure and deploy application secrets efficiently, from development through to production. The platform utilizes TLS to encrypt data securely, addressing critical compliance requirements. Users can either opt for cloud services or self-host it on their own infrastructure, maintaining full control. The community-driven development approach ensures that features are built based on user requests and feedback, making it adaptable and responsive to the needs of its users.
Infisical
Secure your secrets, simplify your systems
Infisical is an all-in-one platform designed for securely managing application secrets, certificates, SSH keys, and configurations across teams and infrastructures. It serves a wide range of users, from Fortune 500 enterprises to international governments and rapidly growing startups, enhancing both security and operational efficiency. Infisical guarantees a service level of 99.99% uptime for its cloud services, ensuring reliable access for its users. By automating the management of secrets and configurations, Infisical aims to save time while boosting security for its clients.
Passwork. Self-hosted password manager for your business
Securely manage passwords, control your secrets
Passwork is a self-hosted password and secrets manager designed for teams and businesses. The product is described as an on‑premise solution with double encryption and a zero‑knowledge architecture so passwords never leave customer infrastructure. Passwork provides full programmatic control via a documented API, a Python connector that encapsulates cryptographic operations, a CLI utility, and Docker containers for DevOps integration. The API supports client-side encryption (encryption/decryption performed in the client) and uses access tokens with limited validity. Passwork includes management for passwords, vaults, users and settings along with activity logs and search functionality as part of its product feature set.
GitGuardian
Guarding Code, Protecting Your Digital Assets
GitGuardian provides a comprehensive solution for securing your Software Development Life Cycle (SDLC) and managing Non-Human Identities (NHIs). With features to detect secrets in code, repositories, and tools, GitGuardian helps organizations protect sensitive information from security threats. The platform is available as both a SaaS product and a self-hosted solution, catering to various business needs. GitGuardian is trusted by security leaders at some of the world's largest companies, making it a reliable choice for enterprises focused on maintaining robust security measures.
Elven
Centralize Your Cloud Metrics with Confidence
Elven Platform is a cloud management solution that offers central management for your metrics and incidents in cloud technology operations. It enables users to monitor and manage these metrics, facilitating efficient practices in managing environments related to the monitored products. Users can select various plans that fit their business needs and handle their accounts securely. The platform emphasizes the importance of safeguarding personal user data and offers a structured onboarding process, ensuring a comprehensive approach to cloud management and incident monitoring.
Pulumi
Infrastructure Management, Simplified and Secured
Pulumi provides a unified platform for infrastructure teams that integrates infrastructure as code, secrets management, policy governance, and AI automation into one solution. With support for multiple programming languages including TypeScript, Python, and Go, Pulumi allows users to deploy to various cloud providers like AWS, Azure, and Google Cloud. The platform features Neo, an AI agent that automates complex deployment tasks, maintains compliance, and offers a complete audit trail for all actions. Pulumi aims to simplify infrastructure management while ensuring robust security and governance.
Onboardbase (Techstars ‘23)
Secure secrets, seamless collaboration for teams
Onboardbase is a secret access infrastructure designed for distributed teams to manage sensitive information securely. The platform enables users to store, switch, and access secrets across various environments, including local development, testing, staging, and production. Offering real-time leak prevention, it helps protect API keys, tokens, and other sensitive data with end-to-end encryption. Master keys are created on users' devices, ensuring that sensitive information remains secure. Trusted by developer teams globally, Onboardbase simplifies secure collaboration and development from day one.
Macnica
Transforming security through intelligent technology solutions
株式会社マクニカ is focused on digital transformation leveraging technology and expertise. Their recent offerings include solutions for edge AI and security, particularly around vulnerability detection and secrets management. By ensuring robust cloud-native application protection, they help businesses mitigate risks and enhance their security posture. With their experience in handling various compliance frameworks, they serve as a trusted partner in navigating digital compliance challenges. Their proactive approach includes detecting vulnerabilities like React2Shell, showcasing their commitment to security in the digital landscape.
Cloudflare
Secure your performance, protect your assets
Cloudflare provides a robust suite of services to enhance website and application security, performance, and reliability. With features like Secrets Management, organizations can secure and control credentials essential for automated application components. Their offerings also include load balancing, log retention for compliance, and optimization solutions that enhance cache performance for better user experience. Cloudflare streamlines the complexity of security and performance tasks, making it easier for organizations to protect their resources while maintaining high availability, all under a flexible pricing model.
Bitwarden
Secure your secrets, protect your future
Bitwarden is a trusted password manager for both personal and business use, offering end-to-end encrypted secrets management specifically designed for development, DevOps, and IT teams. It allows users to securely share secrets, manage machine accounts, and protect sensitive information from hackers and data breaches. With features like password security and passkey management, Bitwarden caters to millions of users across various organizations, providing a robust solution to safeguard digital assets.
passbolt
Collaborative security for modern teams
Passbolt is an open-source password and secret management solution designed for teams. It enables organizations to manage and share passwords securely and is described as a collaborative password manager that reduces IT workload while protecting password collaboration. The site highlights that "universities worldwide rely on Passbolt" and includes a customer quote about improved credential storage, productivity and operational security after transitioning to Passbolt. The product is presented as open-source and audited, built for teams that need collaboration, compliance and control. Mentioned capabilities include secure and immediate password sharing among users and machine credentials, multi-layered protection, and streamlined secure password sharing to enhance operational efficiency.
Exclusive Networks
Securing Secrets, Shielding Digital Futures
Exclusive Networks is described in the record as "A Global Trusted Cybersecurity Specialist" that works with reseller partners to increase opportunities. The page references "Thales CipherTrust Secrets Management Powered By Akeyless" and discusses the need for "secure secrets management" as "DevOps teams and software codebases grow." The site copy repeatedly mentions "Complete visibility and control across the expanding attack surface" and positions the company as a cybersecurity specialist for digital infrastructure. The record content is primarily high-level marketing and partner/product references rather than detailed product specifications.
Mass Data Defense Corporation
Guarding Secrets, Securing Futures Together
Mass Data specializes in large-scale security deployments. Their secrets management platform provides tools to control, audit, and rotate secrets dynamically across infrastructures and applications. The company offers holistic security products, comprehensive deployment services, and robust training programs that empower organizations to secure their data while meeting regulatory requirements. They enhance identity protection and safeguard sensitive information, ensuring compliance and transparency in data management with optimal encryption key management. Their expert team translates industry knowledge into practical, enduring security solutions.
solo.io
Secure your cloud, scale your success
Solo.io describes itself as "the unified platform for secure, seamless cloud operations" and positions its offerings for cloud and AI infrastructure. The record references Gloo Edge documentation (Vault Integration) and lists security features including Transport Layer Security (TLS and mTLS), Secrets Management, and Extensible Authentication (API keys, JSON web tokens (JWT), lightweight directory access protocol). It states the platform is built to run natively in Kubernetes and highlights contributions to open-source projects such as Istio and Envoy. The copy focuses on securing, observing, and scaling APIs and workloads and presents Solo.io as chosen by teams shaping AI and cloud infrastructure.
Ennote
Secure your secrets, unleash your potential
Ennote provides a secure and user-friendly platform for managing sensitive information, such as passwords, API keys, and multi-factor authentication codes. Designed for teams, it allows authorized users to access this confidential information without the risks associated with plain text storage. For example, a software development team can securely retrieve database credentials stored within Ennote rather than relying on insecure shared documents. With a focus on privacy and security, Ennote's solution ensures that information is both protected and easily accessible for innovation-driven teams.
Vault++
Guarding Secrets, Securing Futures
Vault++ is a next-generation secrets management platform that offers complete protection through secure storage, access control, and proactive security measures. It features automated leak detection and seamless secret rotation to prevent secret leaks. Unique capabilities like precommit verification block secrets from being committed to repositories. Vault++ supports temporary access with controlled contributions while ensuring that secrets are always encrypted and decrypted client-side using asymmetric key cryptography. With cryptographically verifiable audit logs, organizations can monitor activities surrounding their secrets effectively.