# Secrets management: what AI models recommend, October 2026

Gane Index, October 2026 Edition. Asked as "secrets management tool" and as "secrets vault for applications and infrastructure", six framings each, to fourteen models with search on, on behalf of a mid-market B2B company. Page: https://www.gane.ai/index/it/identity/secrets-management/2026-10

This is the permanent record of the October 2026 Edition, published October 1, 2026 and superseded since. The current standing: https://www.gane.ai/index/it/identity/secrets-management/index.md

**Standing:** HashiCorp Vault leads with 31% of first choices; verdict contested. 59 first choices across the direct, paraphrase, budget and scale prompts.

## First-choice share

| Rank | Product | Share | Negative rate | Labels |
|---|---|---|---|---|
| 1 | [HashiCorp Vault](https://www.gane.ai/index/it/vendors/hashicorp-vault/index.md) | 31% | 34% | 77 |
| 2 | [Doppler](https://www.gane.ai/index/it/vendors/doppler/index.md) | 29% | 0% | 51 |
| 3 | [Infisical](https://www.gane.ai/index/it/vendors/infisical/index.md) | 15% | 0% | 43 |
| 4 | [AWS Secrets Manager](https://www.gane.ai/index/it/vendors/aws-secrets-manager/index.md) | 8% | 10% | 60 |
| 5 | [Azure Key Vault](https://www.gane.ai/index/it/vendors/azure-key-vault/index.md) | 3% | 13% | 47 |
| 6 | [Bitwarden Secrets Manager](https://www.gane.ai/index/it/vendors/bitwarden-secrets-manager/index.md) | 3% | 12% | 17 |
| 8 | [1Password](https://www.gane.ai/index/it/vendors/1password/index.md) | 2% | 16% | 25 |
| 9 | [SOPS](https://www.gane.ai/index/it/vendors/sops/index.md) | 2% | 10% | 10 |
| 12 | [Google Secret Manager](https://www.gane.ai/index/it/vendors/google-secret-manager/index.md) | 0% | 10% | 31 |
| 13 | [Akeyless](https://www.gane.ai/index/it/vendors/akeyless/index.md) | 0% | 0% | 22 |
| 14 | [CyberArk Conjur](https://www.gane.ai/index/it/vendors/cyberark-conjur/index.md) | 0% | 17% | 18 |
| 15 | [OpenBao](https://www.gane.ai/index/it/vendors/openbao/index.md) | 0% | 18% | 11 |

Rank is by share of first choices among all 59 products named; products with the same share are tied, and the order among them carries no meaning. The table lists those with at least 10 labels.

## Each model's first choice on the direct prompt

- Claude Haiku 4.5: Doppler, HashiCorp Vault; alternatives AWS Secrets Manager, Akeyless, Delinea Secret Server, Infisical
- GPT-5.4 mini: AWS Secrets Manager, Azure Key Vault; alternatives HashiCorp Vault
- Gemini 3.5 Flash: Doppler; alternatives Infisical
- Perplexity Sonar: Doppler; alternatives HashiCorp Vault
- Grok 4.20: Doppler; alternatives 1Password, Infisical
- Mistral Small: HashiCorp Vault; alternatives AWS Secrets Manager, Azure Key Vault
- DeepSeek V4 Flash: Doppler; alternatives Akeyless, Infisical
- Llama 4 Maverick: no first choice
- Qwen 3.7 Flash: Doppler; alternatives 1Password Secrets Manager, Infisical
- Kimi K2: Delinea Secret Server, HashiCorp Vault; alternatives 1Password, AWS Secrets Manager
- GLM 4.7 FlashX: HashiCorp Vault; alternatives AWS Secrets Manager, Doppler, Infisical
- MiniMax M2.5: Doppler; alternatives HashiCorp Vault, Infisical
- GPT-6 Luna: Doppler; alternatives AWS Secrets Manager, Infisical
- Muse Glimmer 30B: Doppler; alternatives AWS Secrets Manager, Akeyless, Azure Key Vault, Google Secret Manager

## Sources the answers cite

76 of 84 answers came back with a source list, from 14 of 14 models. Sites named in the most answers:

- infisical.com: 36 answers, 54 citations
- blog.gitguardian.com: 36 answers, 37 citations
- guideflow.com: 35 answers, 35 citations
- cybersecuritynews.com: 34 answers, 49 citations
- doppler.com: 27 answers, 32 citations
- dev.to: 26 answers, 33 citations
- startwithidentity.com: 21 answers, 24 citations
- cyberpress.org: 20 answers, 32 citations

Pages named in the most answers:

- https://blog.gitguardian.com/top-secrets-management-tools (36 answers)
- https://guideflow.com/blog/secrets-management-software (35 answers)
- https://cybersecuritynews.com/best-secrets-management-tools (23 answers)
- https://cyberpress.org/secrets-management-by-use-case (20 answers)
- https://infisical.com/blog/best-secret-management-tools (20 answers)
- https://dupple.com/learn/best-secrets-management-tools (16 answers)
- https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html (15 answers)
- https://pulumi.com/blog/secrets-management-tools-guide (15 answers)
- https://blog.railway.com/p/best-secrets-management-2026 (14 answers)
- https://dev.to/letmypeoplecode/top-secrets-management-tools-for-2024-22f5 (14 answers)

## Warned against

- HashiCorp Vault: 26 of 77 labels negative. "for a mid-sized B2B company, it is generally no longer recommended unless you have a dedicated platform team" (Gemini 3.5 Flash, paraphrase prompt)
- Kubernetes Secrets: 6 of 6 labels negative. "HashiCorp warns against using them in non-trivial cases because Kubernetes Secret data is base64-encoded and stored as plaintext in etcd by default." (Perplexity Sonar, negative prompt)
- AWS Secrets Manager: 6 of 60 labels negative. "GitGuardian cautions that AWS Secrets Manager, GCP Secret Manager, and Azure Key Vault can create fragmentation if you operate in multi-cloud setups." (Perplexity Sonar, negative prompt)
- Azure Key Vault: 6 of 47 labels negative. "⚠️ Configuration-Dependent Risks ... Common misconfiguration: Public network access enabled" (Kimi K2, negative prompt)

## Movement since September 2026

Floor: 11 points of share, measured on the calibration repeat.
New leader: Doppler (33%) to HashiCorp Vault (33%). Margin 4 points, within noise.

- Doppler: 33% to 29%, −4. Inside the floor by 7 points · rank 1 → 2 of 54.
- Akeyless: 4% to 0%, −4. Inside the floor by 7 points · rank 6 → 13 of 54.
- HashiCorp Vault: 30% to 33%, +3. Inside the floor by 8 points · rank 2 → 1 of 54.
- Infisical: 18% to 15%, −3. Inside the floor by 8 points · rank 3 of 54, unchanged.
- AWS Secrets Manager: 4% to 6%, +2. Inside the floor by 9 points · rank 5 → 4 of 54.
- Azure Key Vault: 2% to 4%, +2. Inside the floor by 9 points · rank 8 → 5 of 54.
- 1Password: 4% to 2%, −2. Inside the floor by 9 points · rank 7 of 54, unchanged.
- SOPS: 0% to 2%, +2. Inside the floor by 9 points · rank 11 → 8 of 54.
- OpenBao: 2% to 0%, −2. Inside the floor by 9 points · rank 9 → 14 of 54.
- Bitwarden Secrets Manager: 5% to 4%, −1. Inside the floor by 10 points · rank 4 → 6 of 54.
- Google Secret Manager: 0% to 0%, ±0. Inside the floor by 11 points · rank 10 → 12 of 54.
- CyberArk Conjur: 0% to 0%, ±0. Inside the floor by 11 points · rank 14 → 15 of 54.

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, October 2026 Edition, www.gane.ai/index/it.