Lightweight on-premise secrets management for European enterprises. AGPL. No SaaS dependency. Air-gap compatible. NIS2/DORA aligned. AI-native via MCP server — roadmap
Self-hosted secrets manager with REST, CLI and MCP surfaces. Encrypted at rest, per-consumer scoping and a proxy that gives AI agents credentials without letting them hold one.
Self-hosted secrets manager and IAM for Docker, classic SSH deployments, Docker Swarm, k3s and Kubernetes. Envelope encryption on OpenBao, hardware-key unseal, tamper-evident audit log, push publishing that keeps running while the vault is sealed.
Rotate & sync secrets across Vercel/Cloud Run/GCP SM/Koyeb/GH Actions/Atlas + local .env — values-free JSON configs, LLM-agent-safe.
Open-source Kubernetes-native secrets manager. Single binary, no external DB, auto-unseal by default.
A lightweight, distributed secret manager you run in your own cloud. One container, one binary, no external dependencies.
Self-hosted secrets manager without the paywall: approvals, versioning, SSO, dynamic credentials, webhooks, KMS.
To associate your repository with the vault-alternative topic, visit your repo's landing page and select "manage topics."