SikkerKey review
A CI/CD-focused vault with rotation, dynamic credentials, and cloud-only deployment.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
SikkerKey is a managed secrets manager and vault for application and infrastructure credentials. It is aimed at teams that need controlled machine access across CI/CD pipelines, Kubernetes environments, and cloud, edge, local, or on-premises workloads. Machines authenticate through Ed25519-signed requests, while people and systems can access secrets through the web dashboard, CLI, SDKs, or signed HTTPS API. The platform supports standard and structured secrets alongside managed, leased, certificate, canary, and temporary secrets.
Pricing follows a freemium model. The Developer plan costs $0 per month and includes 10 machines, unlimited secrets and projects, 1 month of audit retention, and 20 webhook deliveries per day. Teams costs $29 per month and adds 25 machines, organizations and vault roles, bring-your-own-key support, five tunnels into private infrastructure, and 12 months of audit retention. Teams Pro costs $79 per month and includes 75 machines, single sign-on, custom vault roles, 10 tunnels, and 24 months of audit retention. All listed prices use monthly billing, while the plans show unlimited secrets and projects.
SikkerKey’s strongest fit is delivery automation: it can inject secrets into CI/CD environment variables, rotate secrets on a schedule, issue short-lived leased database credentials, and connect with GitHub Actions, GitLab CI/CD, Jenkins, CircleCI, Azure DevOps, Argo Workflows, Docker, Kubernetes, and other listed systems. Access policies can apply time, IP, rate, and co-signing controls, with append-only audit logging and exports for review. The trade-off is its SaaS-only model, with the vault and control plane hosted in the European Union. Choose SikkerKey for cloud-oriented teams that value machine authentication and detailed controls; teams requiring a self-hosted vault should consider another category option.
SikkerKey pros and cons
- Where it wins
- Ed25519-signed machine authentication avoids bearer-token access
- Rotation, leased credentials, and scoped access policies support controlled delivery
- Broad CI/CD, Kubernetes, CLI, SDK, and API coverage
- Where it doesn't
- Cloud-only deployment limits self-hosted control-plane options
- The free Developer plan includes only 1 month of audit retention
- Single sign-on starts with the Teams Pro plan at $79 per month
SikkerKey fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update