# Secrets management: what AI models recommend, September 2026

Gane Index, September 2026 Edition. Asked as "secrets management tool" and as "secrets vault for applications and infrastructure", six framings each, to twelve models with search on, on behalf of a mid-market B2B company. Page: https://www.gane.ai/index/it/identity/secrets-management/2026-09

This is the permanent record of the September 2026 Edition, published September 17, 2026 and superseded since. The current standing: https://www.gane.ai/index/it/identity/secrets-management/index.md

**Standing:** Doppler leads with 33% of first choices; verdict contested. 57 first choices across the direct, paraphrase, budget and scale prompts.

## First-choice share

| Rank | Product | Share | Negative rate | Labels |
|---|---|---|---|---|
| 1 | [Doppler](https://www.gane.ai/index/it/vendors/doppler/index.md) | 33% | 7% | 54 |
| 2 | [HashiCorp Vault](https://www.gane.ai/index/it/vendors/hashicorp-vault/index.md) | 30% | 33% | 66 |
| 3 | [Infisical](https://www.gane.ai/index/it/vendors/infisical/index.md) | 18% | 5% | 40 |
| 4 | [Bitwarden Secrets Manager](https://www.gane.ai/index/it/vendors/bitwarden-secrets-manager/index.md) | 5% | 7% | 14 |
| 5 | [AWS Secrets Manager](https://www.gane.ai/index/it/vendors/aws-secrets-manager/index.md) | 4% | 13% | 60 |
| 6 | [Akeyless](https://www.gane.ai/index/it/vendors/akeyless/index.md) | 4% | 5% | 22 |
| 7 | [1Password](https://www.gane.ai/index/it/vendors/1password/index.md) | 4% | 19% | 26 |
| 8 | [Azure Key Vault](https://www.gane.ai/index/it/vendors/azure-key-vault/index.md) | 2% | 14% | 42 |
| 9 | [OpenBao](https://www.gane.ai/index/it/vendors/openbao/index.md) | 2% | 12% | 17 |
| 10 | [Google Secret Manager](https://www.gane.ai/index/it/vendors/google-secret-manager/index.md) | 0% | 10% | 31 |
| 11 | [SOPS](https://www.gane.ai/index/it/vendors/sops/index.md) | 0% | 10% | 10 |
| 14 | [CyberArk Conjur](https://www.gane.ai/index/it/vendors/cyberark-conjur/index.md) | 0% | 31% | 13 |

Rank is by share of first choices among all 38 products named; products with the same share are tied, and the order among them carries no meaning. The table lists those with at least 10 labels.

## Each model's first choice on the direct prompt

- Claude Haiku 4.5: Doppler, Infisical; alternatives AWS Secrets Manager
- GPT-5.4 mini: HashiCorp Vault; alternatives AWS Secrets Manager, Azure Key Vault
- Gemini 3.5 Flash: Doppler, Infisical; alternatives AWS Secrets Manager
- Perplexity Sonar: Doppler; alternatives AWS Secrets Manager, HashiCorp Vault, Infisical
- Grok 4.20: Doppler; alternatives 1Password, AWS Secrets Manager, Infisical
- Mistral Small: 1Password, Doppler; alternatives AWS Secrets Manager, HashiCorp Vault
- DeepSeek V4 Flash: Doppler; alternatives AWS Secrets Manager
- Llama 4 Maverick: no first choice
- Qwen 3.7 Flash: Doppler; alternatives EnvManager, Infisical
- Kimi K2: 1Password, Doppler; alternatives Infisical
- GLM 4.7 FlashX: Doppler, HashiCorp Vault; alternatives 1Password, AWS Secrets Manager, Azure Key Vault
- MiniMax M2.5: Doppler, HashiCorp Vault; alternatives AWS Secrets Manager, Azure Key Vault, Google Secret Manager, Infisical

## Sources the answers cite

62 of 72 answers came back with a source list, from 12 of 12 models. Sites named in the most answers:

- blog.gitguardian.com: 52 answers, 53 citations
- envmanager.com: 38 answers, 47 citations
- startwithidentity.com: 30 answers, 38 citations
- safeguard.sh: 27 answers, 32 citations
- infisical.com: 23 answers, 32 citations
- doppler.com: 21 answers, 25 citations
- worldmetrics.org: 20 answers, 20 citations
- guideflow.com: 17 answers, 17 citations

Pages named in the most answers:

- https://blog.gitguardian.com/top-secrets-management-tools (51 answers)
- https://envmanager.com/blog/best-secrets-management-tools (37 answers)
- https://worldmetrics.org/best/secrets-management-software (20 answers)
- https://startwithidentity.com/rankings/best-secrets-management-tools (18 answers)
- https://guideflow.com/blog/secrets-management-software (17 answers)
- https://safeguard.sh/resources/blog/best-secrets-management-and-vaulting-solutions (16 answers)
- https://safeguard.sh/resources/blog/best-secrets-management-tools-2026 (15 answers)
- https://cycode.com/blog/best-secrets-management-tools (14 answers)
- https://infisical.com/blog/best-secret-management-tools (12 answers)
- https://tech-insider.org/hashicorp-vault-vs-aws-secrets-manager-vs-azure-key-vault-2026 (12 answers)

## Warned against

- HashiCorp Vault: 22 of 66 labels negative. "the massive operational overhead required to deploy, patch, and scale a self-hosted Vault cluster make it a poor recommendation for mid-sized companies" (Gemini 3.5 Flash, paraphrase prompt)
- Kubernetes Secrets: 6 of 7 labels negative. "Base64 Encoded Secrets (e.g., Unencrypted Kubernetes Secrets): Why avoid: Base64 is encoding, not encryption." (GLM 4.7 FlashX, negative prompt)
- AWS Secrets Manager: 8 of 60 labels negative. "AWS Secrets Manager, Azure Key Vault, and similar tools are fine in the right context, but they can create fragmentation and vendor coupling if you operate across multiple clouds." (Perplexity Sonar, negative prompt)
- Azure Key Vault: 6 of 42 labels negative. "AWS Secrets Manager, Azure Key Vault, and similar tools are fine in the right context, but they can create fragmentation and vendor coupling if you operate across multiple clouds." (Perplexity Sonar, negative prompt)

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, September 2026 Edition, www.gane.ai/index/it.