Google Cloud Secret Manager
Google Cloud Secret Manager: A Google Cloud-native vault with versioning, IAM, rotation workflows, and audit integration. Ranked #14 of 44 in Secrets Management Tools by our editors (8.2/10); pricing: Free plan · 90-day trial; best for google Cloud-native teams.
At a glance
- Editor score8.2 / 10
- PricingFree plan · 90-day trial
- Best forGoogle Cloud-native teams
- Free planYes
- Paid from$0.03/unit/mo
- Secret rotationYes
- Facts checked22 Sep 2026
Where it wins
- Secret versioning, rollback, replication, and rotation workflows
- Fine-grained IAM with Cloud Audit Logs integration
- Integrates with Kubernetes, CI/CD, Terraform, and Cloud KMS
Where it doesn't
- Usage-based pricing requires tracking versions, operations, and notifications
- Cloud deployment model limits teams seeking self-hosted control
- Does not provide dynamic secrets
Our verdict on Google Cloud Secret Manager
Google Cloud Secret Manager is a managed service for storing, versioning, accessing, and auditing API keys, passwords, certificates, and other sensitive data. It fits teams building on Google Cloud, particularly those connecting applications across Cloud Build, Google Kubernetes Engine, Cloud Functions, Terraform, and GitHub Actions. Access is available through the web console, API, client libraries, command-line tools, and supported Google Cloud integrations.
Pricing is usage-based rather than organized into named plans. The published pricing model includes free monthly allowances, with charges based on active secret versions, access operations, and rotation notifications. A free plan and a 90-day trial provide an entry point for evaluation. The free allowance covers six active secret versions, so teams should assess how version retention, access volume, and rotation activity may affect ongoing usage. Integrations with Cloud Build, Google Kubernetes Engine, Pub/Sub, Cloud Audit Logs, Cloud Key Management Service, Terraform, and GitHub Actions make it suitable for Google Cloud delivery pipelines and Kubernetes deployments.
Its strongest operational features are version rollback, automatic or user-managed replication, and automated rotation workflows with Pub/Sub notifications. IAM provides fine-grained access control, while TLS and AES-256 encryption protect data in transit and at rest; CMEK is available through Cloud KMS. Cloud Audit Logs adds access and activity visibility. Teams that need a managed cloud service within the Google ecosystem should consider it, especially when Kubernetes, CI/CD, Terraform, or Google Cloud identity controls are central. Teams seeking dynamic secrets, open-source software, or a self-hosted deployment model should choose an alternative.
Your product? Our editors can test Google Cloud Secret Manager in depth and publish a review, labelled as paid · from $149/mo →
Google Cloud Secret Manager pricing
All 4 Google Cloud Secret Manager plans and prices →
Google Cloud Secret Manager fact sheet
| Free plan | Yes |
|---|---|
| Paid from | $0.03/unit/mo |
| Secret rotation | Yes |
| Dynamic secrets | Not verified |
| CI/CD injection | Yes |
| Kubernetes integration | Yes |
| Deployment model | Cloud |
| Audit logs | Yes |
| Free secret limit | Not verified |
| Free trial | 90 days |
| Deployment | Cloud |
| Platforms | Web |
| Support | Phone, Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 7 integrations: Google Kubernetes Engine, Terraform, GitHub Actions, Cloud IAM, VPC Service Controls, Pub/Sub … |
| Pricing | Free plan · 90-day trial (source) |
| Website | cloud.google.com |
| Facts checked | 22 Sep 2026 |
Google Cloud Secret Manager integrations
Google Cloud Secret Manager lists 7 integrations on its own site.
- Google Kubernetes Engine
- Terraform
- GitHub Actions
- Cloud IAM
- VPC Service Controls
- Pub/Sub
- Cloud Run
Alternatives to Google Cloud Secret Manager
- AkeylessA broad hybrid secrets platform with a capable free tier and enterprise controls.9.4
- InfisicalA broad secrets platform with a free tier, dynamic credentials, rotation, and Kubernetes support.9.3
- PhaseA feature-rich secrets platform with free access and clear paid tiers.9.2
See all Google Cloud Secret Manager alternatives →
Also Ranked In
Google Cloud Secret Manager is ranked in 31 of our directories; the 6 strongest besides Secrets Management Tools.
Used Google Cloud Secret Manager? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Google Cloud Secret Manager for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Google Cloud Secret Manager is listed in our Secrets Management Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/google-cloud-secret-manager/"><img src="https://www.itechguides.com/best/badge/google-cloud-secret-manager.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update