VMware Secrets Manager
VMware Secrets Manager: A focused self-hosted option for Kubernetes workloads needing identity-aware secret delivery. Ranked #34 of 44 in Secrets Management Tools by our editors (6.3/10); pricing: Open source; best for kubernetes-native workload secrets.
At a glance
- Editor score6.3 / 10
- PricingOpen source
- Best forKubernetes-native workload secrets
- Paid fromFree
- Facts checked22 Sep 2026
Where it wins
- SPIFFE/SPIRE identity supports workload authentication and communication
- Sidecar delivery, SDK access, and Kubernetes Secret generation
- Encrypted backups, runtime updates, generation, and audit logging
Where it doesn't
- Requires a self-hosted Kubernetes deployment
- Narrower focus than platforms with rotation or dynamic secrets
- New feature development is deferred during active maintenance mode
Our verdict on VMware Secrets Manager
VMware Secrets Manager (VSecM) is an open-source, self-hosted secrets store for teams operating Kubernetes clusters and cloud-native workloads. It stores secrets in VSecM Safe and uses SPIFFE-compatible identities to authenticate components and workloads. Secret delivery can happen through a sidecar, SDK, init container, or generated Kubernetes Secret objects, giving teams options for both newer applications and legacy workloads. REST access, a CLI, and an official Go SDK support administration and application retrieval.
Its strongest fit is a Kubernetes-centered platform and identity model. Integrations with Kubernetes, SPIFFE, SPIRE, and Helm align it with clusters that already use workload identity and Helm-based deployment. Sidecar delivery and runtime secret updates can help applications receive changed values without a workload restart, while pattern-based random secret generation supports common generated-secret workflows. Encrypted-at-rest storage and encrypted backups address protection of stored material, and Sentinel logging configuration provides audit logging. These capabilities make VSecM more focused than a general-purpose secrets product: it is designed around Kubernetes-native storage, dispatch, and identity rather than broad platform coverage.
The published project status places VSecM in active maintenance mode, with new feature development deferred while SPIKE reaches v1.0. That matters for teams evaluating long-term feature expansion. The product is also narrowly self-hosted and Kubernetes-focused, with no verified rotation, dynamic secrets, or CI/CD injection. Choose VMware Secrets Manager when Kubernetes workload identity, sidecar delivery, runtime updates, and self-managed operation are central requirements. Consider an alternative when the priority is a broader secrets lifecycle, dynamic credentials, automated rotation, or CI/CD-oriented injection.
Your product? Our editors can test VMware Secrets Manager in depth and publish a review, labelled as paid · from $149/mo →
VMware Secrets Manager pricing
VMware Secrets Manager fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Free |
| Secret rotation | Not verified |
| Dynamic secrets | Not verified |
| CI/CD injection | Not verified |
| Kubernetes integration | Yes |
| Deployment model | Self_hosted |
| Audit logs | Yes |
| Free secret limit | Not verified |
| Deployment | Self-hosted |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 3 integrations: Kubernetes, SPIFFE, SPIRE |
| Pricing | Open source |
| Website | vsecm.com |
| Facts checked | 22 Sep 2026 |
VMware Secrets Manager integrations
VMware Secrets Manager lists 3 integrations on its own site.
- Kubernetes
- SPIFFE
- SPIRE
Alternatives to VMware Secrets Manager
- AkeylessA broad hybrid secrets platform with a capable free tier and enterprise controls.9.4
- InfisicalA broad secrets platform with a free tier, dynamic credentials, rotation, and Kubernetes support.9.3
- PhaseA feature-rich secrets platform with free access and clear paid tiers.9.2
See all VMware Secrets Manager alternatives →
Used VMware Secrets Manager? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used VMware Secrets Manager for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
VMware Secrets Manager is listed in our Secrets Management Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/vmware-secrets-manager/"><img src="https://www.itechguides.com/best/badge/vmware-secrets-manager.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update