Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Keyorix

Free#18 of 44 in Secrets Management Tools

Keyorix: A broad self-hosted secrets platform for DevOps teams with deployment control. Ranked #18 of 44 in Secrets Management Tools by our editors (7.9/10); pricing: Open source; best for self-hosters wanting open-source breadth.

7.9/10Editor score
Keyorix7.9 Visit Keyorix

At a glance

  • Editor score
    7.9 / 10
  • Pricing
    Open source
  • Best for
    Self-hosters wanting open-source breadth
  • Paid from
    Free
  • Secret rotation
    Yes
  • Facts checked
    22 Sep 2026
Keyorix screenshot
  • Where it wins

    • Versioning, RBAC, audit logs, and environment separation
    • Dynamic credentials and Kubernetes ServiceAccount integration
    • REST, GraphQL, CLI, SDK, Docker, and database support
  • Where it doesn't

    • Self-hosted deployment requires teams to manage the infrastructure
    • Some dynamic-secret and Kubernetes backends may vary by release
    • No hosted deployment option is listed

Our verdict on Keyorix

Teams that cannot use SaaS can use Keyorix as an open-source secrets management platform for on-premise or air-gapped environments. It targets DevOps and security teams that need versioned secrets, development, staging, and production separation, role- and group-based permissions, service tokens, audit logging, and process-level secret injection. Deployment is available through a single binary or Docker Compose, with SQLite for development and PostgreSQL for production.

Keyorix’s feature depth extends beyond basic secret storage. It supports create, read, update, and delete operations with versioning, AES-256-GCM and envelope encryption, audit events, and short-lived credentials for databases, cloud IAM, and Kubernetes. Kubernetes ServiceAccount TokenRequest integration is also described. CLI injection can place secrets directly into processes, while CI/CD service tokens support automation workflows. These capabilities make Keyorix a fit for teams that need controls around access, rotation, automation, and workload credentials rather than a simple shared vault.

The ecosystem is broad for a self-hosted product: Keyorix offers REST and GraphQL interfaces, Python, Go, and JavaScript SDKs, a CLI, Docker Compose, PostgreSQL, SQLite, and Kubernetes support. The trade-off is operational ownership. Teams must run and maintain the deployment themselves, and there is no hosted option listed. Official configuration documentation describes dynamic-secret and Kubernetes backends, while some capabilities are identified as roadmap items, so release-specific availability matters. Choose Keyorix when self-hosting, open-source access, and deployment control outweigh managed convenience; teams wanting a hosted secrets service should consider a different tool.

Your product? Our editors can test Keyorix in depth and publish a review, labelled as paid · from $149/mo →

Keyorix pricing

Plans Open sourceFree Free to use — no paid tier required for the core job.
See plans on keyorix.com

Keyorix fact sheet

Free planNot verified
Paid fromFree
Secret rotationYes
Dynamic secretsYes
CI/CD injectionYes
Kubernetes integrationYes
Deployment modelSelf_hosted
Audit logsYes
Free secret limitNot verified
DeploymentSelf-hosted
PlatformsWeb
Compliance & securityGDPR
SupportEmail, Docs, Community
Built forSmall business, Mid-market, Enterprise (editorial estimate)
Integrations10 integrations: Kubernetes, PostgreSQL, SQLite, Docker Compose, OIDC, REST API …
PricingOpen source
Websitekeyorix.com
Facts checked22 Sep 2026

Keyorix integrations

Keyorix lists 10 integrations on its own site.

  • Kubernetes
  • PostgreSQL
  • SQLite
  • Docker Compose
  • OIDC
  • REST API
  • GraphQL
  • Python
  • Go
  • JavaScript

Alternatives to Keyorix

See all Keyorix alternatives →

Used Keyorix? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Keyorix for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — Keyorix 7.9/10

Keyorix is listed in our Secrets Management Tools directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/keyorix/"><img src="https://www.itechguides.com/best/badge/keyorix.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update