10 alternatives to vault
hashicorp/vault — A tool for secrets management, encryption as a service, and privileged access management (36,431 stars, BUSL-1.1, integration, security, auth).
These are the closest projects in the JustClaw-It index that we serve licence-cleared code from, ranked by relevance and by our code-quality score (1–10, the mean over each repo's graded components: completeness, code quality, deployability, reusability, strategic value). JustClaw-It does not serve code from hashicorp/vault itself (licence class: non-commercial), so these alternatives are the licence-cleared route.
| # | Repo | Score | Licence | Stars |
|---|---|---|---|---|
| 1 | tellerops/teller | 7.7 | Apache-2.0 | 3,233 |
| 2 | argoproj-labs/argocd-vault-plugin | 7.9 | Apache-2.0 | 980 |
| 3 | infisical/infisical | 4.8 | MIT | 29,984 |
| 4 | jkroepke/helm-secrets | 6.8 | Apache-2.0 | 2,035 |
| 5 | pinterest/knox | 6.9 | Apache-2.0 | 1,271 |
| 6 | deepfence/secretscanner | 7.3 | MIT | 3,401 |
| 7 | emberstack/kubernetes-reflector | 8.0 | MIT | 1,689 |
| 8 | phasehq/console | 4.9 | MIT | 933 |
| 9 | tillson/git-hound | 6.4 | MIT | 1,472 |
| 10 | betterleaks/betterleaks | 5.0 | MIT | 2,333 |
The alternatives in detail
-
Cloud native secrets management for developers - never leave your command line for secrets.score 7.7/10 · Apache-2.0 permissive · 3,233 stars · 30 components · search them
-
An Argo CD plugin to retrieve secrets from Secret Management tools and inject them into Kubernetes secretsscore 7.9/10 · Apache-2.0 permissive · 980 stars · 30 components · search them
-
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
-
A helm plugin that help manage secrets with Git workflow and store them anywherescore 6.8/10 · Apache-2.0 permissive · 2,035 stars · 18 components · search them
-
Knox is a secret management servicescore 6.9/10 · Apache-2.0 permissive · 1,271 stars · 37 components · search them
-
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:score 7.3/10 · MIT permissive · 3,401 stars · 15 components · search them
-
Custom Kubernetes controller that can be used to replicate secrets, configmaps and certificates.score 8.0/10 · MIT permissive · 1,689 stars · 12 components · search them
-
Secrets management for teams and AI agents.score 4.9/10 · MIT permissive · 933 stars · 595 components · search them
-
Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.score 6.4/10 · MIT permissive · 1,472 stars · 16 components · search them
-
Find leaked secrets everywhere.score 5.0/10 · MIT permissive · 2,333 stars · 470 components · search them
Licence data: JustClaw-It's per-repo licence policy. Is vault still maintained? Check it. Licence details: licence checker. Ranking data from 2026-10-29T06:21:36Z.
Want code like vault without the licence risk? JustClaw-It is an MCP server with 1,518,000+ licence-cleared, quality-scored code components. Search is free; every result carries its licence and attribution.
Remote MCP endpoint: https://justclaw.it.com/mcp (API key auth). Works with Claude Code, Cursor,
Codex, Windsurf and other MCP clients. A one-line CLI installer (@justclaw-it/cli) is coming.