IBM Cloud Secrets Manager review
A cloud secrets service with rotation, dynamic leasing, PKI, and IBM Cloud integrations.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
IBM Cloud Secrets Manager centralizes application credentials, certificates, API keys, and other secrets in a cloud service. It is aimed at development, security, and platform teams managing IBM Cloud workloads, especially those that need certificate and PKI management or dynamic credentials with time-based leases. The service also supports secret rotation, versioning, IAM access control, secret groups, and activity tracking through IBM Cloud Logs.
Its capabilities span the secret lifecycle rather than storage alone: teams can schedule rotation, manage versions, and lease dynamic secrets. Integration options include IBM Cloud Continuous Delivery, IBM Cloud Kubernetes Service, Red Hat OpenShift on IBM Cloud, and IBM Cloud Logs, as well as services such as API Connect and Schematics. CI/CD toolchains can reference secrets for runtime resolution, and Kubernetes and OpenShift integrations connect the service to container workloads. Private and public service endpoints are available. This makes it a more natural fit for teams already working in IBM Cloud than for organizations seeking a cloud-neutral secrets layer.
The Trial plan provides unlimited access to service capabilities, with one Trial instance per IBM Cloud account. Standard allows unlimited instances and service capabilities, and adds a charge of $0.26474 USD per active secret. Vault Dedicated provides a managed Vault Enterprise cluster and dedicated Vault capabilities; it is in public beta. IBM Cloud Secrets Manager suits mid-market and enterprise teams that want rotation, leasing, PKI, and audit events alongside IBM Cloud integrations. Teams that do not need this ecosystem or want a different deployment model should consider alternatives.
IBM Cloud Secrets Manager pros and cons
- Where it wins
- Automates scheduled rotation and supports time-based secret leasing.
- Combines certificates, PKI, versioning, and lifecycle management.
- Integrates with CI/CD, Kubernetes, OpenShift, and IBM Cloud Logs.
- Where it doesn't
- Standard charges $0.26474 USD per active secret in addition to its instance price.
- Trial is limited to one instance per IBM Cloud account.
- Vault Dedicated is available in public beta.
IBM Cloud Secrets Manager fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update