Vendor Directory
Explore application security and software supply chain vendors.
Akeyless Security
Secure your secrets, simplify your workflows
Akeyless offers a modern secrets management platform designed for teams using DevOps, hybrid cloud, and AI workloads. It centralizes and secures static, dynamic, and short-lived secrets, API tokens, and certificates across CI/CD pipelines, eliminating the need for vault management. The solution utilizes Distributed Fragments Cryptography (DFC) to ensure encryption keys are mathematically split across regions and providers, providing users with full control. Akeyless supports automated rotation and just-in-time access, integrating seamlessly with IDEs and cloud environments. This approach enhances security, compliance, and operational efficiency, helping teams mitigate risks associated with secrets sprawl.
Bitwarden
Secure your secrets, protect your future
Bitwarden is a trusted password manager for both personal and business use, offering end-to-end encrypted secrets management specifically designed for development, DevOps, and IT teams. It allows users to securely share secrets, manage machine accounts, and protect sensitive information from hackers and data breaches. With features like password security and passkey management, Bitwarden caters to millions of users across various organizations, providing a robust solution to safeguard digital assets.
Mass Data Defense Corporation
Guarding Secrets, Securing Futures Together
Mass Data specializes in large-scale security deployments. Their secrets management platform provides tools to control, audit, and rotate secrets dynamically across infrastructures and applications. The company offers holistic security products, comprehensive deployment services, and robust training programs that empower organizations to secure their data while meeting regulatory requirements. They enhance identity protection and safeguard sensitive information, ensuring compliance and transparency in data management with optimal encryption key management. Their expert team translates industry knowledge into practical, enduring security solutions.
Passwork. Self-hosted password manager for your business
Securely manage passwords, control your secrets
Passwork is a self-hosted password and secrets manager designed for teams and businesses. The product is described as an on‑premise solution with double encryption and a zero‑knowledge architecture so passwords never leave customer infrastructure. Passwork provides full programmatic control via a documented API, a Python connector that encapsulates cryptographic operations, a CLI utility, and Docker containers for DevOps integration. The API supports client-side encryption (encryption/decryption performed in the client) and uses access tokens with limited validity. Passwork includes management for passwords, vaults, users and settings along with activity logs and search functionality as part of its product feature set.
Doppler
Secure your secrets, safeguard your success
Doppler is a centralized cloud-based secrets management platform that securely manages, orchestrates, and governs secrets and non-human identities at scale. Integrated with popular DevOps tools, it enhances security by preventing breaches through efficient secrets management workflows. Doppler’s platform ensures that sensitive information is easily accessible while preventing issues like missing or misconfigured secrets. This contributes to significant cost savings by mitigating potential breaches, making it essential for teams looking to streamline their secrets management processes.
Entro Security
Guarding Your Digital Frontiers with Precision
Entro describes itself as an enterprise security platform focused on AI agents and non-human identities (NHIs). The product claims to unify security for AI agents, NHIs and secrets by delivering visibility, ownership attribution, and real-time detection of anomalies. Entro’s site text highlights discovery and inventory capabilities — "Discover all AI agents, non-human identities & their secrets across your organization" — and states it can manage and secure the NHI lifecycle at scale. The record also references Vendor Privileged Access Management (VPAM) and emphasizes real-time monitoring and analysis to detect and mitigate threats related to secrets and non-human identities.
Pulumi
Infrastructure Management, Simplified and Secured
Pulumi provides a unified platform for infrastructure teams that integrates infrastructure as code, secrets management, policy governance, and AI automation into one solution. With support for multiple programming languages including TypeScript, Python, and Go, Pulumi allows users to deploy to various cloud providers like AWS, Azure, and Google Cloud. The platform features Neo, an AI agent that automates complex deployment tasks, maintains compliance, and offers a complete audit trail for all actions. Pulumi aims to simplify infrastructure management while ensuring robust security and governance.
passbolt
Collaborative security for modern teams
Passbolt is an open-source password and secret management solution designed for teams. It enables organizations to manage and share passwords securely and is described as a collaborative password manager that reduces IT workload while protecting password collaboration. The site highlights that "universities worldwide rely on Passbolt" and includes a customer quote about improved credential storage, productivity and operational security after transitioning to Passbolt. The product is presented as open-source and audited, built for teams that need collaboration, compliance and control. Mentioned capabilities include secure and immediate password sharing among users and machine credentials, multi-layered protection, and streamlined secure password sharing to enhance operational efficiency.
Cloudflare
Secure your performance, protect your assets
Cloudflare provides a robust suite of services to enhance website and application security, performance, and reliability. With features like Secrets Management, organizations can secure and control credentials essential for automated application components. Their offerings also include load balancing, log retention for compliance, and optimization solutions that enhance cache performance for better user experience. Cloudflare streamlines the complexity of security and performance tasks, making it easier for organizations to protect their resources while maintaining high availability, all under a flexible pricing model.
Exclusive Networks
Securing Secrets, Shielding Digital Futures
Exclusive Networks is described in the record as "A Global Trusted Cybersecurity Specialist" that works with reseller partners to increase opportunities. The page references "Thales CipherTrust Secrets Management Powered By Akeyless" and discusses the need for "secure secrets management" as "DevOps teams and software codebases grow." The site copy repeatedly mentions "Complete visibility and control across the expanding attack surface" and positions the company as a cybersecurity specialist for digital infrastructure. The record content is primarily high-level marketing and partner/product references rather than detailed product specifications.
Infisical
Secure your secrets, simplify your systems
Infisical is an all-in-one platform designed for securely managing application secrets, certificates, SSH keys, and configurations across teams and infrastructures. It serves a wide range of users, from Fortune 500 enterprises to international governments and rapidly growing startups, enhancing both security and operational efficiency. Infisical guarantees a service level of 99.99% uptime for its cloud services, ensuring reliable access for its users. By automating the management of secrets and configurations, Infisical aims to save time while boosting security for its clients.
GitGuardian
Guarding Code, Protecting Your Digital Assets
GitGuardian provides a comprehensive solution for securing your Software Development Life Cycle (SDLC) and managing Non-Human Identities (NHIs). With features to detect secrets in code, repositories, and tools, GitGuardian helps organizations protect sensitive information from security threats. The platform is available as both a SaaS product and a self-hosted solution, catering to various business needs. GitGuardian is trusted by security leaders at some of the world's largest companies, making it a reliable choice for enterprises focused on maintaining robust security measures.
solo.io
Secure your cloud, scale your success
Solo.io describes itself as "the unified platform for secure, seamless cloud operations" and positions its offerings for cloud and AI infrastructure. The record references Gloo Edge documentation (Vault Integration) and lists security features including Transport Layer Security (TLS and mTLS), Secrets Management, and Extensible Authentication (API keys, JSON web tokens (JWT), lightweight directory access protocol). It states the platform is built to run natively in Kubernetes and highlights contributions to open-source projects such as Istio and Envoy. The copy focuses on securing, observing, and scaling APIs and workloads and presents Solo.io as chosen by teams shaping AI and cloud infrastructure.