# Secrets management: what AI models recommend, September 2026

IT AI Recommendation Index, September 2026 Edition. Asked as "secrets management tool" and as "secrets vault for applications and infrastructure", six framings each, to twelve models with search on, on behalf of a mid-market B2B company. Page: https://it-ai-index.com/identity/secrets-management/

**Standing:** Doppler leads with 33% of first choices; verdict contested. 57 first choices across the direct, paraphrase, budget and scale prompts.

## First-choice share

| # | Product | Share | Negative rate | Labels |
|---|---|---|---|---|
| 1 | Doppler | 33% | 7% | 54 |
| 2 | HashiCorp Vault | 30% | 33% | 66 |
| 3 | Infisical | 18% | 5% | 40 |
| 4 | Bitwarden Secrets Manager | 5% | 7% | 14 |
| 5 | AWS Secrets Manager | 4% | 13% | 60 |
| 6 | Akeyless | 4% | 5% | 22 |
| 7 | 1Password | 4% | 19% | 26 |
| 8 | Azure Key Vault | 2% | 14% | 42 |
| 9 | OpenBao | 2% | 12% | 17 |
| 10 | Google Secret Manager | 0% | 10% | 31 |
| 11 | CyberArk Conjur | 0% | 25% | 12 |

## Each model's first choice on the direct prompt

- Claude Haiku 4.5: Doppler, Infisical; alternatives AWS Secrets Manager
- GPT-5.4 mini: HashiCorp Vault; alternatives AWS Secrets Manager, Azure Key Vault
- Gemini 3.5 Flash: Doppler, Infisical; alternatives AWS Secrets Manager
- Perplexity Sonar: Doppler; alternatives AWS Secrets Manager, HashiCorp Vault, Infisical
- Grok 4.1 Fast: Doppler; alternatives 1Password, AWS Secrets Manager, Infisical
- Mistral Small: 1Password, Doppler; alternatives AWS Secrets Manager, HashiCorp Vault
- DeepSeek V4 Flash: Doppler; alternatives AWS Secrets Manager
- Llama 4 Maverick: no first choice
- Qwen 3.7 Flash: Doppler; alternatives EnvManager, Infisical
- Kimi K2: 1Password, Doppler; alternatives Infisical
- GLM 4.7 FlashX: Doppler, HashiCorp Vault; alternatives 1Password, AWS Secrets Manager, Azure Key Vault
- MiniMax M2.5: Doppler, HashiCorp Vault; alternatives AWS Secrets Manager, Azure Key Vault, Google Secret Manager, Infisical

## Sources the answers cite

62 of 72 answers came back with a source list, from 12 of 12 models. Sites named in the most answers:

- blog.gitguardian.com: 48 answers, 49 citations
- envmanager.com: 34 answers, 39 citations
- safeguard.sh: 25 answers, 30 citations
- startwithidentity.com: 24 answers, 31 citations
- infisical.com: 20 answers, 29 citations
- doppler.com: 20 answers, 24 citations
- worldmetrics.org: 20 answers, 20 citations
- guideflow.com: 16 answers, 16 citations

Pages named in the most answers:

- https://blog.gitguardian.com/top-secrets-management-tools (47 answers)
- https://envmanager.com/blog/best-secrets-management-tools (33 answers)
- https://worldmetrics.org/best/secrets-management-software (20 answers)
- https://startwithidentity.com/rankings/best-secrets-management-tools (18 answers)
- https://guideflow.com/blog/secrets-management-software (16 answers)
- https://safeguard.sh/resources/blog/best-secrets-management-and-vaulting-solutions (16 answers)
- https://safeguard.sh/resources/blog/best-secrets-management-tools-2026 (13 answers)
- https://tech-insider.org/hashicorp-vault-vs-aws-secrets-manager-vs-azure-key-vault-2026 (12 answers)
- https://thegarnetwiki.com/security/secrets-management-guide (12 answers)
- https://cybervendorguide.com/guides/secrets-management (10 answers)

## Warned against

- HashiCorp Vault: 22 of 66 labels negative. "the massive operational overhead required to deploy, patch, and scale a self-hosted Vault cluster make it a poor recommendation for mid-sized companies" (Gemini 3.5 Flash, paraphrase prompt)
- Kubernetes Secrets: 6 of 7 labels negative. "Base64 Encoded Secrets (e.g., Unencrypted Kubernetes Secrets): Why avoid: Base64 is encoding, not encryption." (GLM 4.7 FlashX, negative prompt)
- AWS Secrets Manager: 8 of 60 labels negative. "AWS Secrets Manager, Azure Key Vault, and similar tools are fine in the right context, but they can create fragmentation and vendor coupling if you operate across multiple clouds." (Perplexity Sonar, negative prompt)
- Azure Key Vault: 6 of 42 labels negative. "AWS Secrets Manager, Azure Key Vault, and similar tools are fine in the right context, but they can create fragmentation and vendor coupling if you operate across multiple clouds." (Perplexity Sonar, negative prompt)

## Record

- Method: https://it-ai-index.com/methodology/
- Raw judge labels and full responses: https://it-ai-index.com/data/
- License: CC BY 4.0. Cite as IT AI Recommendation Index, September 2026 Edition, it-ai-index.com.