Skip to content
InfratoApp
Layers / Security / Governance / Access control and secrets

Access control and secrets

COMPARE TWO OF THESE →

Who may call what, and where the secrets live: key management, vaults, scanning for leaked credentials, per-caller authorisation.

25 in this category
SORTED BY STARS

NARROW BY WHAT THIS CATEGORY ASKS

LICENCE · 3 NOT READ

OPEN SOURCE · 13 NOT READ

AUDIT LOG · 18 NOT READ

PRODUCTUSED BYSTARSDOWNLOADS 30D
vaultA tool for secrets management, encryption as a service, and privileged access management36,230gitleaksFind secrets with Gitleaks 🔑29,252infisicalInfisical is the open-source platform for securing secrets, certificates, access, and AI Agents.29,221dotenvxa secure dotenv—from the creator of `dotenv`5,779cerbosCerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.4,583nonoagent runtime security - zero trust, zero setup, zero latency agent sandboxing4,049secretscanner:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:3,388tellerCloud native secrets management for developers - never leave your command line for secrets.3,230agent-vaultA HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.2,212Hhelm-secretsA helm plugin that help manage secrets with Git workflow and store them anywhere2,027ggshieldDetect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.1,996betterleaksFind leaked secrets everywhere.1,918Ppwd.shManage secrets with Bash and GnuPG symmetric encryption1,563berglasA tool for managing secrets on Google Cloud1,301knoxKnox is a secret management service1,270consoleSecrets management for teams and AI agents.918keyshadeRealtime secret and configuration management tool767PPasteGuardAI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI APIs, and coding agents.748Tailscale SetecA secrets management service that uses Tailscale for access control465ShelveOpen-source secret & environment management. Secure, simple, collaborative. CLI & Github Sync456agenthoundOffensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for423cliThe official CLI for interacting with your Doppler secrets and configuration.393AageboxAge based repository file encryption gitops tool362dmnoThe missing middleware for your configuration and secrets.306kloakCloud native zero trust security for AI agents run environments279

SORTED BY ONE STATED COLUMN · USED BY = LISTED PRODUCTS DEPENDING ON IT, IN THIS DIRECTORY — NOT A POPULARITY FIGURE · NO OVERALL SCORE AND NO RANK COLUMN, BECAUSE BLENDING ADOPTION, STARS AND DOWNLOADS NEEDS WEIGHTS, AND WEIGHTS ARE AN OPINION PRESENTED AS ARITHMETIC

Cite this page

The count and its date sit inside the citation, because “Access control and secrets” without a date is a claim that quietly goes wrong as the category fills.

infratoapp, “Access control and secrets — Security / Governance”, read 28 October 2026. 25 listed products. https://www.infratoapp.com/layers/security/access-control

No overall score, and no rank column

Blending adoption, stars and downloads needs weights, and weights are an opinion presented as arithmetic — so this table sorts by one stated column at a time and shows which. This view holds no billing column and joins no billing table: a sponsor cannot appear higher, and the signals meter is a row’s own confidence, never a score you can sort on.

Frequently asked

What is in the Access control and secrets category?
25 products in the Security / Governance layer of the AI stack. Who may call what, and where the secrets live: key management, vaults, scanning for leaked credentials, per-caller authorisation. Listed members include vault, gitleaks and infisical. Every fact on each listing carries the page it was read from and the date it was read.
How are Access control and secrets compared here?
By the 8 attributes this category declares, asked of every member and answered only where a source states it. A product with no answer on record shows a gap rather than a guess, and no blended score is published — weights would be an opinion presented as arithmetic.
vault or gitleaks?
Both are listed under Access control and secrets. We publish no verdict between them — we hold no benchmark that would support one. What we do hold is the same attribute sheet for each, side by side with the source behind every value, at /compare/gitleaks-vs-vault.
What does a blank mean on a access control and secrets row?
That nobody has told us, not that the answer is no. A hollow ring is "no answer on record", which is a different state from a recorded no — and the two look different on purpose. A listing with a blank has not failed the question; it has not been read for it.
How often are access control and secrets figures re-read?
Every value carries the date it was read and a link to the page it came from. Prices move fastest and are re-read most often; an attribute read weeks ago says so rather than presenting itself as current. Anything past 21 days is hidden rather than shown stale.
Is this every access control and secret there is?
No. This is 25 we have read and can cite. A directory that claimed completeness would be making a promise it cannot keep, so the page states its own count instead and says when a category is too thin to shortlist from.
Can a vendor pay to rank higher here?
No. Nothing on this page can be bought: a sponsor cannot enter a table, reorder a row or change a mark, and there is no ranked position for sale. How the site is paid for, and the line each source of money does not cross, is set out under money and independence at /our-data#sec5.