# Secrets management for small business buyers: what AI models recommend, September 2026

IT AI Recommendation Index, September 2026 Edition. Asked as "secrets management tool" and as "secrets vault for applications and infrastructure", six framings each, to twelve models with search on, on behalf of a small B2B company. Page: https://it-ai-index.com/identity/secrets-management/smb/

**Standing:** Doppler leads with 46% of first choices; verdict clear leader. 56 first choices across the direct, paraphrase, budget and scale prompts.

## First-choice share

| # | Product | Share | Negative rate | Labels |
|---|---|---|---|---|
| 1 | Doppler | 46% | 3% | 59 |
| 2 | Infisical | 25% | 4% | 50 |
| 3 | 1Password | 9% | 2% | 41 |
| 4 | Bitwarden Secrets Manager | 7% | 0% | 35 |
| 5 | HashiCorp Vault | 5% | 70% | 66 |
| 6 | AWS Secrets Manager | 4% | 25% | 52 |
| 7 | Azure Key Vault | 2% | 21% | 29 |
| 8 | Google Secret Manager | 0% | 29% | 28 |
| 9 | Akeyless | 0% | 9% | 11 |
| 10 | OpenBao | 0% | 27% | 11 |

## Each model's first choice on the direct prompt

- Claude Haiku 4.5: no first choice
- GPT-5.4 mini: 1Password, Doppler; alternatives AWS Secrets Manager, Azure Key Vault, Google Secret Manager
- Gemini 3.5 Flash: Doppler; alternatives 1Password, AWS Secrets Manager, Google Secret Manager, Infisical
- Perplexity Sonar: 1Password, Infisical; alternatives AWS Secrets Manager, Azure Key Vault, Google Secret Manager
- Grok 4.1 Fast: Doppler; alternatives Infisical
- Mistral Small: 1Password, Doppler; alternatives Bitwarden Secrets Manager
- DeepSeek V4 Flash: Doppler, Infisical; alternatives AWS Secrets Manager, Bitwarden Secrets Manager
- Llama 4 Maverick: Doppler, Infisical
- Qwen 3.7 Flash: Doppler; alternatives AWS Secrets Manager, Infisical
- Kimi K2: 1Password; alternatives Bitwarden Secrets Manager, Doppler, Infisical
- GLM 4.7 FlashX: Doppler; alternatives 1Password, AWS Secrets Manager, HashiCorp Vault, Infisical
- MiniMax M2.5: Doppler; alternatives HashiCorp Vault, Infisical

## Sources the answers cite

60 of 72 answers came back with a source list, from 12 of 12 models. Sites named in the most answers:

- startwithidentity.com: 31 answers, 39 citations
- blog.gitguardian.com: 31 answers, 31 citations
- envmanager.com: 29 answers, 31 citations
- infisical.com: 25 answers, 28 citations
- doppler.com: 21 answers, 33 citations
- cybervendorguide.com: 20 answers, 24 citations
- geekflare.com: 20 answers, 20 citations
- safeguard.sh: 18 answers, 23 citations

Pages named in the most answers:

- https://blog.gitguardian.com/top-secrets-management-tools (31 answers)
- https://envmanager.com/blog/best-secrets-management-tools (28 answers)
- https://startwithidentity.com/rankings/best-secrets-management-tools (27 answers)
- https://geekflare.com/cybersecurity/best-secret-management (20 answers)
- https://cybervendorguide.com/guides/secrets-management (18 answers)
- https://pickmysoft.com/blog/best-secrets-management-tools (16 answers)
- https://infisical.com/blog/best-secret-management-tools (15 answers)
- https://cycode.com/blog/best-secrets-management-tools (14 answers)
- https://doppler.com/blog/secrets-management-tools-2025 (12 answers)
- https://g2.com/categories/secrets-management-tools/small-business (12 answers)

## Warned against

- HashiCorp Vault: 46 of 66 labels negative. "that often means HashiCorp Vault unless you already have a platform/security team ... makes it a poor fit for many small businesses without dedicated ops support" (Perplexity Sonar, negative prompt)
- AWS Secrets Manager: 13 of 52 labels negative. "Tools to Avoid for Small B2B ... limited multi-cloud support and can get expensive with per-secret pricing." (Kimi K2, direct prompt)
- Google Secret Manager: 8 of 28 labels negative. "avoid cloud-provider-native tools like AWS Secrets Manager, GCP Secret Manager, and Azure Key Vault as your primary secrets store" (Claude Haiku 4.5, negative prompt)
- Azure Key Vault: 6 of 29 labels negative. "sometimes cloud-native managers like ... Azure Key Vault ... if you are not primarily on that cloud" (Perplexity Sonar, negative prompt)

## Record

- Method: https://it-ai-index.com/methodology/
- Raw judge labels and full responses: https://it-ai-index.com/data/
- License: CC BY 4.0. Cite as IT AI Recommendation Index, September 2026 Edition, it-ai-index.com.