Secrets management
Asked as “secrets management tool”, and as “secrets vault for applications and infrastructure”, on behalf of a mid-market B2B company. 53 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each.
Standing · first-choice share
32%
Contested · Doppler 30%
32HashiCorp Vault30Doppler23Infisical15others
32% of first choices, contested.
Since October 2026▲+1Since October 2026: 31% → 32%, +1 point. Inside the 11-point floor: within noise.HashiCorp Vault held the lead, +1 point on 31%, inside the 11-point floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
Doppler43%Clear leader▲+4Since October 2026: 39% → 43%, +4 points. Inside the 11-point floor: within noise.Standing →Mid-market
HashiCorp Vault32%Contested▲+1Since October 2026: 31% → 32%, +1 point. Inside the 11-point floor: within noise.This pageEnterpriseHashiCorp Vault68%Clear leader▲+7Since October 2026: 61% → 68%, +7 points. Inside the 11-point floor: within noise.Standing →
Doppler43%Clear leader▲+4Since October 2026: 39% → 43%, +4 points. Inside the 11-point floor: within noise.Standing →Mid-marketHashiCorp Vault32%Contested▲+1Since October 2026: 31% → 32%, +1 point. Inside the 11-point floor: within noise.This pageEnterpriseHashiCorp Vault68%Clear leader▲+7Since October 2026: 61% → 68%, +7 points. Inside the 11-point floor: within noise.Standing →The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a mid-market B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01HashiCorp Vault32%21%81endorsed leader▲+1Since October 2026: 31% → 32%, +1 point. Inside the 11-point floor: within noise.31% → 32%
HashiCorp Vault32%21%81endorsed leader▲+1Since October 2026: 31% → 32%, +1 point. Inside the 11-point floor: within noise.31% → 32%02Doppler30%8%59endorsed leader▲+1Since October 2026: 29% → 30%, +1 point. Inside the 11-point floor: within noise.29% → 30%
Doppler30%8%59endorsed leader▲+1Since October 2026: 29% → 30%, +1 point. Inside the 11-point floor: within noise.29% → 30%03
Infisical23%2%46accepted challenger▲+8Since October 2026: 15% → 23%, +8 points. Inside the 11-point floor: within noise.15% → 23%
Infisical23%2%46accepted challenger▲+8Since October 2026: 15% → 23%, +8 points. Inside the 11-point floor: within noise.15% → 23%04
AWS Secrets Manager6%14%69accepted challenger▼−2Since October 2026: 8% → 6%, −2 points. Inside the 11-point floor: within noise.8% → 6%
AWS Secrets Manager6%14%69accepted challenger▼−2Since October 2026: 8% → 6%, −2 points. Inside the 11-point floor: within noise.8% → 6%05
Azure Key Vault4%12%58accepted challenger▲+1Since October 2026: 3% → 4%, +1 point. Inside the 11-point floor: within noise.3% → 4%
Azure Key Vault4%12%58accepted challenger▲+1Since October 2026: 3% → 4%, +1 point. Inside the 11-point floor: within noise.3% → 4%06
Akeyless2%6%34accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
Akeyless2%6%34accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%07
Google Secret Manager Lab in the set2%14%43accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
Google Secret Manager Lab in the set2%14%43accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%Show the five products at 0%, ordered by negative rate
12
Bitwarden Secrets Manager0%36%11criticized challenger▼−3Since October 2026: 3% → 0%, −3 points. Inside the 11-point floor: within noise.3% → 0%
Bitwarden Secrets Manager0%36%11criticized challenger▼−3Since October 2026: 3% → 0%, −3 points. Inside the 11-point floor: within noise.3% → 0%11
CyberArk Conjur0%25%20criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
CyberArk Conjur0%25%20criticized challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%10
1Password0%14%22accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
1Password0%14%22accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%09
OpenBao0%0%13accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
OpenBao0%0%13accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%08SOPS0%0%13accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Google Secret Manager is made by Google, whose model Gemini 3.5 Flash is in the set. On the four share prompts that model made it the first choice zero times of 4; the other thirteen models one time of 52. Lab treatment is defined on the method page; the row is marked, not excluded.
Head to head
All twenty-one head-to-head pages: the top seven products, each against each
HashiCorp Vault vs Azure Key VaultHashiCorp Vault vs AkeylessHashiCorp Vault vs Google Secret ManagerDoppler vs InfisicalDoppler vs AWS Secrets ManagerDoppler vs Azure Key VaultDoppler vs AkeylessDoppler vs Google Secret ManagerInfisical vs AWS Secrets ManagerInfisical vs Azure Key VaultInfisical vs AkeylessInfisical vs Google Secret ManagerAWS Secrets Manager vs Azure Key VaultAWS Secrets Manager vs AkeylessAWS Secrets Manager vs Google Secret ManagerAzure Key Vault vs AkeylessAzure Key Vault vs Google Secret ManagerAkeyless vs Google Secret Manager
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01020304050607S08
09101112Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative50%
Key
01HashiCorp Vault32%
HashiCorp Vault32%02Doppler30%
Doppler30%03Infisical23%
Infisical23%04AWS Secrets Manager6%
AWS Secrets Manager6%05Azure Key Vault4%
Azure Key Vault4%06Akeyless2%
Akeyless2%07Google Secret Manager2%
Google Secret Manager2%08SOPS0%
09OpenBao0%
OpenBao0%101Password0%
1Password0%11CyberArk Conjur0%
CyberArk Conjur0%12Bitwarden Secrets Manager0%
Bitwarden Secrets Manager0%What they warned about
Three of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, Gemini 3.5 Flash, Perplexity Sonar, Grok 4.20, DeepSeek V4 Flash, Llama 4 Maverick, Qwen 3.7 Flash, GLM 4.7 FlashX, MiniMax M2.5, GPT-6 Luna and Muse Glimmer 30B changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
AWS Secrets Manager14%
10 of 69 labels negative · 8 of 14 models · 2 hard negative
“Not recommended for small teams due to vendor lock-in and complexity.” Mistral Small, negative prompt
HashiCorp Vault21%
17 of 81 labels negative · 7 of 14 models · 2 hard negative
“Often recommended to avoid unless you already have a dedicated platform/security team” Mistral Small, negative prompt
Azure Key Vault12%
7 of 58 labels negative · 6 of 14 models
“sensible for single-cloud deployments, but using each as a separate source of truth can create fragmentation and inconsistent policy across clouds” Perplexity Sonar, negative prompt
Kubernetes Secrets100%
5 of 5 labels negative · 5 of 14 models · 4 hard negative
“Kubernetes Secrets is a tool that should be used with caution or avoided due to its security limitations and management complexities” Llama 4 Maverick, negative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
70 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 785 links across 194 sites, every framing counted. Ranked by the number of answers carrying the site or page. 45 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
39 answers · 52 citations · 12 models
vendor site · Akeyless33 answers · 50 citations · 13 models
vendor site · Infisical28 answers · 45 citations · 12 models
20 answers · 22 citations · 10 models
vendor site · OWASP16 answers · 17 citations · 9 models
publisher (Gane)15 answers · 16 citations · 9 models
vendor site · GitHub14 answers · 31 citations · 7 models
12 answers · 18 citations · 7 models
11 answers · 13 citations · 9 models
vendor site · Microsoft11 answers · 12 citations · 8 models
vendor site · G211 answers · 11 citations · 7 models
vendor site · HashiCorp10 answers · 13 citations · 3 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
21 answers · 10 models
16 answers · 9 models
16 answers · 8 models
13 answers · 6 models
12 answers · 7 models
12 answers · 9 models
11 answers · 7 models
11 answers · 5 models
10 answers · 5 models
9 answers · 8 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best secrets management tool”, “secrets management tool”, “secrets management tools”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| HashiCorp Vault hashicorp.com | 32% | 400 | 5,400 | 317 | 173,934 | $26 | 29 | 7 |
| Doppler doppler.com | 30% | 159 | 90,500 | 11,875 | 2,255 | 12 | ||
| Infisical infisical.com | 23% | 177 | 4,400 | 40 | 4,742 | 14 | 3 | |
| AWS parent site AWS Secrets Manager 6%, AWS Systems Manager Parameter Store 0% | 6% | 195 | 368,000 | 114,001 | ||||
| Azure parent site Azure Key Vault 4% | 4% | 157 | 301,000 | 47,904 | ||||
| Akeyless akeyless.io | 2% | 138 | 1,000 | 16 | 3,357 | $916 | 24 | 2 |
| Google Secret Manager cloud.google.com | 2% | 115 | 1,000 | 46 | 7,405,347 | |||
| Secret Manager | 2% | |||||||
| SOPS | 0% | 74,000 | 8,602 | |||||
| OpenBao openbao.org | 0% | 46 | 1,600 | 13 | 1,491 |
Google's top ten for the three searches hold 20 sites; 3 of them are among the sites the models cited here (akeyless.io, github.com, infisical.com). The first result for “best secrets management tool” is tigergate.dev.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best secrets management tool for a mid-market B2B company?”Paraphrase“Which secrets vault for applications and infrastructure would you recommend to a mid-sized B2B company?”Comparative“What are the top secrets management tools and how do they differ?”Budget-constrained“What is the best secrets management tool for a company with a limited budget?”Scale-constrained“We are a 500 person company evaluating a secrets management tool. What should we look at?”Negative“Which secrets management tools should I avoid or be cautious about?”
Claude Haiku 4.5no first choiceagainst: CyberArk Secrets ManagerAWS Secrets Manager, Azure Key VaultChangedHashiCorp Vaultagainst: Azure Key VaultDopplerno first choiceagainst: Kubernetes Secrets
Three alternatives
AWS Secrets Manager, Doppler, HashiCorp VaultThree alternatives
1Password, Dashlane, HashiCorp VaultFour alternatives
AWS Secrets Manager, Akeyless, CyberArk Secrets Manager, InfisicalThree alternatives
Bitwarden Secrets Manager, HashiCorp Vault, InfisicalGPT-5.4 miniHashiCorp Vaultagainst: Akeyless, DopplerHashiCorp VaultHeldHashiCorp VaultGoogle Secret Managerno first choicenothing named
Two alternatives
AWS Secrets Manager, Azure Key VaultTwo alternatives
AWS Secrets Manager, Azure Key VaultThree alternatives
AWS Secrets Manager, Azure Key Vault, Google Secret ManagerTwo alternatives
AWS Secrets Manager, HashiCorp VaultGemini 3.5 FlashDoppler, Infisicalagainst: HashiCorp VaultDopplerChangedHashiCorp VaultInfisicalagainst: AWS Secrets Manager, HashiCorp VaultHashiCorp Vaultagainst: AWS Secrets Manager, Azure Key Vault, CyberArk Secrets Manager, Google Secret Manageragainst: 1Password, HashiCorp Vault, KeePass, Kubernetes `Secret`, git-crypt, git-secret, pass
Three alternatives
AWS Secrets Manager, Azure Key Vault, Google Secret ManagerFive alternatives
AWS Secrets Manager, Azure Key Vault, Google Secret Manager, HashiCorp Vault, InfisicalSeven alternatives
AWS Secrets Manager, Akeyless, Azure Key Vault, Doppler, Google Secret Manager, Infisical, OpenBaoSix alternatives
AWS Systems Manager Parameter Store, Azure Key Vault, Bitwarden Secrets Manager, Doppler, Google Secret Manager, SOPSThree alternatives
Akeyless, Doppler, InfisicalPerplexity SonarInfisicalagainst: HashiCorp VaultDopplerChangedagainst: HashiCorp VaultAkeyless, HashiCorp VaultInfisicalagainst: HashiCorp Vaultno first choiceagainst: AWS Secrets Manager, Azure Key Vault, Doppler, Google Secret Manager, HashiCorp Vault, Kubernetes Secrets
Three alternatives
AWS Secrets Manager, Akeyless, DopplerThree alternatives
AWS Secrets Manager, Infisical, OpenBaoEight alternatives
1Password, AWS Secrets Manager, Azure Key Vault, CyberArk Conjur, Doppler, Google Secret Manager, Infisical, OpenBaoThree alternatives
AWS Secrets Manager, Doppler, Google Secret ManagerGrok 4.20HashiCorp Vaultagainst: CyberArk Secrets ManagerDopplerChangedHashiCorp VaultInfisicalno first choiceagainst: AWS Secrets Manager, Azure Key Vault, Google Secret Manager, HashiCorp Vaultagainst: AWS Secrets Manager, Akeyless, Ansible Vault, Azure Key Vault, Bitwarden Secrets Manager, Doppler, Google Secret Manager, Gopass, HashiCorp Vault, Infisical, KeePass, Sealed Secrets, pass
Three alternatives
AWS Secrets Manager, Akeyless, PassworkFive alternatives
AWS Secrets Manager, Akeyless, HashiCorp Vault, Infisical, OpenBaoSix alternatives
AWS Secrets Manager, Akeyless, Azure Key Vault, Doppler, Google Secret Manager, InfisicalFive alternatives
AWS Secrets Manager, Azure Key Vault, Google Secret Manager, HashiCorp Vault, SOPSThree alternatives
Akeyless, Doppler, InfisicalMistral SmallHashiCorp VaultHashiCorp VaultHeldHashiCorp VaultHashiCorp Vaultno first choiceagainst: AWS Secrets Manager, Azure Key Vault, CyberArk Conjur, HashiCorp Vault
Four alternatives
AWS Secrets Manager, Akeyless, Azure Key Vault, CyberArk ConjurThree alternatives
Akeyless, Doppler, InfisicalSeven alternatives
AWS Secrets Manager, Azure Key Vault, CyberArk Conjur Secrets Manager, Doppler, Google Secret Manager, Infisical, SOPSThree alternatives
Akeyless, Doppler, InfisicalDeepSeek V4 FlashDoppler, InfisicalDoppler, HashiCorp VaultChangedHashiCorp VaultInfisicalHashiCorp Vaultnothing named
Three alternatives
AWS Secrets Manager, Akeyless, HashiCorp VaultOne alternative
InfisicalSeven alternatives
AWS Secrets Manager, Akeyless, Azure Key Vault, CyberArk Conjur, Doppler, Google Secret Manager, InfisicalOne alternative
HashiCorp VaultFive alternatives
AWS Secrets Manager, Akeyless, Azure Key Vault, Doppler, InfisicalLlama 4 MaverickDopplerHashiCorp VaultChangedno first choiceInfisicalno first choiceagainst: Kubernetes Secrets
Two alternatives
Akeyless, HashiCorp VaultThree alternatives
Doppler, OpenBao, SOPSQwen 3.7 FlashHashiCorp VaultDopplerChangedHashiCorp VaultDoppler, Infisicalagainst: AWS Secrets Manager, HashiCorp Vaultno first choiceagainst: CyberArk Secrets Manageragainst: HashiCorp Vault, Kubernetes Native Secrets
Four alternatives
AWS Secrets Manager, Akeyless, Azure Key Vault, InfisicalFour alternatives
AWS Secrets Manager, Azure Key Vault, Bitwarden Secrets Manager, HashiCorp VaultSix alternatives
AWS Secrets Manager, Akeyless, Azure Key Vault, Doppler, SOPS, Sealed SecretsOne alternative
Bitwarden Secrets ManagerFour alternatives
1Password, AWS Secrets Manager, Doppler, HashiCorp VaultKimi K2DopplerDopplerHeldHashiCorp Vaultagainst: DopplerInfisicalagainst: AWS Secrets Manager, HashiCorp VaultAkeyless, HashiCorp Vaultagainst: 1Password, Bitwarden Secrets Manager, CyberArk Conjur, Delinea Secret Server, Doppler, Google Secret Manageragainst: Ansible Vault, HashiCorp Vault, Keytar, dotenv / .env Files, kubernetes-external-secrets
Three alternatives
1Password, HashiCorp Vault, InfisicalOne alternative
HashiCorp VaultFive alternatives
AWS Secrets Manager, Akeyless, Azure Key Vault, CyberArk Conjur, InfisicalTwo alternatives
OpenBao, SOPSTwo alternatives
AWS Secrets Manager, Azure Key VaultGLM 4.7 FlashXHashiCorp Vaultagainst: CyberArk ConjurAWS Secrets Manager, Azure Key VaultChangedHashiCorp Vaultagainst: 1Password, CyberArk ConjurDoppleragainst: Bitwarden Secrets Manager, CyberArk Secrets ManagerHashiCorp Vaultagainst: CyberArk Conjuragainst: Ansible Vault, Bitwarden Secrets Manager, Passbolt, Puppet hiera-eyaml, aws-vault, kubernetes-external-secrets, pass
Five alternatives
AWS Secrets Manager, Azure Key Vault, Doppler, Google Secret Manager, InfisicalOne alternative
HashiCorp VaultEight alternatives
AWS Secrets Manager, Akeyless, Azure Key Vault, Doppler, Google Secret Manager, Infisical, OpenBao, SOPSFive alternatives
AWS Secrets Manager, Azure Key Vault, Google Secret Manager, HashiCorp Vault, InfisicalFour alternatives
AWS Secrets Manager, Akeyless, Azure Key Vault, Keeper Secrets ManagerMiniMax M2.5HashiCorp VaultDopplerChangedHashiCorp VaultHashiCorp Vault, Infisicalagainst: AWS Secrets Managerno first choicenothing named
Five alternatives
AWS Secrets Manager, Akeyless, Azure Key Vault, CyberArk Conjur, DopplerFour alternatives
AWS Secrets Manager, Azure Key Vault, HashiCorp Vault, InfisicalSix alternatives
AWS Secrets Manager, Akeyless, Azure Key Vault, CyberArk Conjur, Doppler, Google Secret ManagerTwo alternatives
Akeyless, DopplerGPT-6 LunaDoppleragainst: HashiCorp VaultAWS Secrets ManagerChangedno first choiceSecret Managerno first choiceagainst: AWS Secrets Manager, Azure Key Vault, GitHub Actions Secrets, Google Secret Manager, HashiCorp Vault, Kubernetes Secrets, Terraform state
Two alternatives
AWS Secrets Manager, InfisicalThree alternatives
Azure Key Vault, Google Secret Manager, HashiCorp VaultSix alternatives
AWS Secrets Manager, Azure Key Vault, Doppler, Google Secret Manager, HashiCorp Vault, InfisicalThree alternatives
Infisical, Parameter Store, Secrets ManagerMuse Glimmer 30BDopplerHashiCorp VaultChangedDoppler, HashiCorp VaultInfisicalno first choiceagainst: Kubernetes Secrets
Three alternatives
AWS Secrets Manager, Akeyless, HashiCorp VaultThree alternatives
AWS Secrets Manager, Azure Key Vault, DopplerSeven alternatives
1Password, AWS Secrets Manager, Akeyless Secrets Management, Azure Key Vault, CyberArk Conjur, Google Secret Manager, InfisicalFour alternatives
Akeyless, Doppler, HashiCorp Vault Community / OpenBao, SOPSBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 19:36 | no | 0 | 5 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 14:37 | yes | 5 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 15:41 | yes | 14 | 27 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 10:34 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:35 | yes | 5 | 12 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 15:32 | yes | 5 | 5 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 10:10 | yes | 19 | 18 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 17:57 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 11:53 | no | 0 | 25 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 15:43 | yes | 15 | 24 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 16:21 | yes | 23 | 162 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 14:22 | yes | 5 | 24 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 19:10 | yes | 4 | 19 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:48 | yes | 13 | 18 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 18:58 | no | 0 | 4 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 09:01 | yes | 4 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 16:26 | no | 0 | 17 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 08:49 | yes | 10 | 5 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 13:51 | yes | 15 | 14 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 16:49 | yes | 5 | 4 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 16:06 | yes | 23 | 51 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 08:43 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 19:20 | no | 0 | 28 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 12:16 | yes | 15 | 19 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 15:29 | yes | 23 | 38 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 17:15 | yes | 5 | 23 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 16:49 | yes | 4 | 11 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 15:11 | yes | 15 | 24 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 10:36 | yes | 9 | 8 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:40 | yes | 6 | 7 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 09:38 | yes | 11 | 24 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 15:23 | yes | 10 | 7 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 15:35 | yes | 5 | 19 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 18:28 | yes | 5 | 9 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:44 | yes | 18 | 23 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 17:36 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 15:20 | yes | 5 | 32 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:43 | yes | 15 | 40 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 11:40 | yes | 22 | 50 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 09:48 | yes | 5 | 17 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 14:12 | yes | 6 | 18 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 13:56 | yes | 13 | 27 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 15:19 | yes | 16 | 9 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 09:24 | yes | 4 | 5 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 16:20 | no | 0 | 17 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 18:48 | yes | 10 | 3 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:36 | yes | 5 | 7 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 18:32 | yes | 5 | 6 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 12:56 | yes | 15 | 18 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 13:31 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 15:36 | yes | 15 | 44 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 14:27 | yes | 9 | 21 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 09:54 | no | 0 | 20 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 14:22 | yes | 20 | 44 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 10:57 | yes | 3 | 12 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:43 | yes | 14 | 18 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 10:45 | no | 0 | 6 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 19:33 | no | 0 | 9 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:00 | no | 0 | 20 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 12:40 | yes | 10 | 8 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 17:31 | yes | 5 | 64 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 11:35 | no | 0 | 6 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 11:33 | yes | 23 | 56 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 18:30 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 11:25 | no | 0 | 32 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 09:56 | yes | 15 | 56 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 09:43 | yes | 13 | 38 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 14:18 | yes | 13 | 25 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 19:27 | yes | 2 | 15 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 12:11 | yes | 13 | 25 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 13:55 | yes | 20 | 12 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 13:13 | no | 0 | 4 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 08:57 | yes | 9 | 31 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 10:35 | yes | 10 | 4 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 18:55 | yes | 19 | 19 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 13:57 | yes | 5 | 5 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 18:46 | yes | 21 | 20 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 12:56 | yes | 5 | 3 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 10:05 | yes | 20 | 60 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:57 | yes | 25 | 52 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 11:27 | yes | 23 | 50 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 11:19 | no | 0 | 29 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 14:42 | yes | 5 | 15 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 10:20 | yes | 21 | 31 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
BeyondTrust read as BeyondTrust Password Safe
Bitwarden read as Bitwarden Secrets Manager
CyberArk read as CyberArk Secrets Manager
Delinea read as Delinea Secret Server
Thycotic read as Delinea Secret Server
Unresolved, counted raw
Age
Akeyless Secrets Management
Berglas
CyberArk Conjur Secrets Manager
ESO Enterprise Secrets Manager
External Secrets Operator - ESO
Google Cloud KMS
Gopass
HashiCorp Vault Community / OpenBao
Keytar (Node.js library)
Kubernetes `Secret`
Leapp
Puppet hiera-eyaml
Secrets Manager
Secrets Store CSI driver
Terraform state
aws-vault
dotenv / .env Files
external-secrets-operator
Discontinued, still offered
No shut-down product was recommended here.