# Secrets management: what AI models recommend, November 2026

Gane Index, November 2026 Edition. Asked as "secrets management tool" and as "secrets vault for applications and infrastructure", six framings each, to fourteen models with search on, on behalf of a mid-market B2B company. Page: https://www.gane.ai/index/it/identity/secrets-management

**Standing:** HashiCorp Vault leads with 32% of first choices; verdict contested. 53 first choices across the direct, paraphrase, budget and scale prompts.

## First-choice share

| Rank | Product | Share | Negative rate | Labels |
|---|---|---|---|---|
| 1 | [HashiCorp Vault](https://www.gane.ai/index/it/vendors/hashicorp-vault/index.md) | 32% | 21% | 81 |
| 2 | [Doppler](https://www.gane.ai/index/it/vendors/doppler/index.md) | 30% | 8% | 59 |
| 3 | [Infisical](https://www.gane.ai/index/it/vendors/infisical/index.md) | 23% | 2% | 46 |
| 4 | [AWS Secrets Manager](https://www.gane.ai/index/it/vendors/aws-secrets-manager/index.md) | 6% | 14% | 69 |
| 5 | [Azure Key Vault](https://www.gane.ai/index/it/vendors/azure-key-vault/index.md) | 4% | 12% | 58 |
| 6 | [Akeyless](https://www.gane.ai/index/it/vendors/akeyless/index.md) | 2% | 6% | 34 |
| 7 | [Google Secret Manager](https://www.gane.ai/index/it/vendors/google-secret-manager/index.md) | 2% | 14% | 43 |
| 9 | [SOPS](https://www.gane.ai/index/it/vendors/sops/index.md) | 0% | 0% | 13 |
| 10 | [OpenBao](https://www.gane.ai/index/it/vendors/openbao/index.md) | 0% | 0% | 13 |
| 11 | [1Password](https://www.gane.ai/index/it/vendors/1password/index.md) | 0% | 14% | 22 |
| 12 | [CyberArk Conjur](https://www.gane.ai/index/it/vendors/cyberark-conjur/index.md) | 0% | 25% | 20 |
| 14 | [Bitwarden Secrets Manager](https://www.gane.ai/index/it/vendors/bitwarden-secrets-manager/index.md) | 0% | 36% | 11 |

Rank is by share of first choices among all 61 products named; products with the same share are tied, and the order among them carries no meaning. The table lists those with at least 10 labels.

## Each model's first choice on the direct prompt

- Claude Haiku 4.5: no first choice; alternatives AWS Secrets Manager, Doppler, HashiCorp Vault
- GPT-5.4 mini: HashiCorp Vault; alternatives AWS Secrets Manager, Azure Key Vault
- Gemini 3.5 Flash: Doppler, Infisical; alternatives AWS Secrets Manager, Azure Key Vault, Google Secret Manager
- Perplexity Sonar: Infisical; alternatives AWS Secrets Manager, Akeyless, Doppler
- Grok 4.20: HashiCorp Vault; alternatives AWS Secrets Manager, Akeyless, Passwork
- Mistral Small: HashiCorp Vault; alternatives AWS Secrets Manager, Akeyless, Azure Key Vault, CyberArk Conjur
- DeepSeek V4 Flash: Doppler, Infisical; alternatives AWS Secrets Manager, Akeyless, HashiCorp Vault
- Llama 4 Maverick: Doppler; alternatives Akeyless, HashiCorp Vault
- Qwen 3.7 Flash: HashiCorp Vault; alternatives AWS Secrets Manager, Akeyless, Azure Key Vault, Infisical
- Kimi K2: Doppler; alternatives 1Password, HashiCorp Vault, Infisical
- GLM 4.7 FlashX: HashiCorp Vault; alternatives AWS Secrets Manager, Azure Key Vault, Doppler, Google Secret Manager
- MiniMax M2.5: HashiCorp Vault; alternatives AWS Secrets Manager, Akeyless, Azure Key Vault, CyberArk Conjur
- GPT-6 Luna: Doppler; alternatives AWS Secrets Manager, Infisical
- Muse Glimmer 30B: Doppler; alternatives AWS Secrets Manager, Akeyless, HashiCorp Vault

## Sources the answers cite

70 of 84 answers came back with a source list, from 14 of 14 models. Sites named in the most answers:

- securityboulevard.com: 39 answers, 52 citations
- akeyless.io: 33 answers, 50 citations
- infisical.com: 28 answers, 45 citations
- startwithidentity.com: 20 answers, 22 citations
- cheatsheetseries.owasp.org: 16 answers, 17 citations
- gane.ai/index: 15 answers, 16 citations
- github.com: 14 answers, 31 citations
- digital.va.gov: 12 answers, 18 citations

Pages named in the most answers:

- https://securityboulevard.com/2026/05/top-16-secrets-management-tools-and-platforms-for-2026-compared (21 answers)
- https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html (16 answers)
- https://securityboulevard.com/2024/02/top-secrets-management-tools-for-2024 (16 answers)
- https://akeyless.io/blog/the-essential-guide-to-secrets-management (13 answers)
- https://digital.va.gov/wp-content/uploads/2024/12/Secrets-Management-ETG_12_2024.docx (12 answers)
- https://gane.ai/index/it/identity/secrets-management (12 answers)
- https://akeyless.io/blog/best-secret-management-tools (11 answers)
- https://startwithidentity.com/articles/top-8-secrets-management-tools.md (11 answers)
- https://guideflow.com/blog/secrets-management-software (10 answers)
- https://ibm.com/think/topics/secrets-management-developers (9 answers)

## Warned against

- AWS Secrets Manager: 10 of 69 labels negative. "Not recommended for small teams due to vendor lock-in and complexity." (Mistral Small, negative prompt)
- HashiCorp Vault: 17 of 81 labels negative. "Often recommended to avoid unless you already have a dedicated platform/security team" (Mistral Small, negative prompt)
- Azure Key Vault: 7 of 58 labels negative. "sensible for single-cloud deployments, but using each as a separate source of truth can create fragmentation and inconsistent policy across clouds" (Perplexity Sonar, negative prompt)
- Kubernetes Secrets: 5 of 5 labels negative. "Kubernetes Secrets is a tool that should be used with caution or avoided due to its security limitations and management complexities" (Llama 4 Maverick, negative prompt)

## Movement since October 2026

Floor: 11 points of share, measured on the calibration repeat.
Same leader: HashiCorp Vault at 32%.

- Infisical: 15% to 23%, +8. Inside the floor by 3 points · rank 3 of 61, unchanged.
- Bitwarden Secrets Manager: 3% to 0%, −3. Inside the floor by 8 points · rank 6 → 14 of 61.
- AWS Secrets Manager: 8% to 6%, −2. Inside the floor by 9 points · rank 4 of 61, unchanged.
- Akeyless: 0% to 2%, +2. Inside the floor by 9 points · rank 13 → 6 of 61.
- Google Secret Manager: 0% to 2%, +2. Inside the floor by 9 points · rank 12 → 7 of 61.
- SOPS: 2% to 0%, −2. Inside the floor by 9 points · rank 9 of 61, unchanged.
- 1Password: 2% to 0%, −2. Inside the floor by 9 points · rank 8 → 11 of 61.
- HashiCorp Vault: 31% to 32%, +1. Inside the floor by 10 points · rank 1 of 61, unchanged.
- Doppler: 29% to 30%, +1. Inside the floor by 10 points · rank 2 of 61, unchanged.
- Azure Key Vault: 3% to 4%, +1. Inside the floor by 10 points · rank 5 of 61, unchanged.
- OpenBao: 0% to 0%, ±0. Inside the floor by 11 points · rank 15 → 10 of 61.
- CyberArk Conjur: 0% to 0%, ±0. Inside the floor by 11 points · rank 14 → 12 of 61.

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.