
Infisical
Doppler
1Password
AWS Secrets Manager
Vault by HashiCorp
Bitwarden Secrets Manager
Rot
EnvKey
AttackForge
dradis
Faraday IDE
PlexTrac
SysReptor
Reconmap
oneVault.tech
PentestReportAI
Locally, it works with start/dev scripts to pull and inject environment variables into local environments automatically and supports git-like pull/push commands to sync and share .env files manually via CLI if needed.
It also supports a range of other options for accessing secrets: SDKs, CLI, API.
AttackForge is the #1 Penetration Testing Management & Collaboration Platform for Enterprise. Bringing Security & Business Together On Your Pentesting Program.
AttackForge helps Organizations: - Create Centralized, Standardised & Consistent approach to security testing, ensuring methodologies are defined, understood, agreed and in accordance with expectations. - Risk Reduction by reducing Time-To-Remediate (TTR) by sending vulnerability data to the right people in near real-time. - Improved Collaboration & Knowledge Sharing between Business, Technology & Security teams. This helps build knowledge about vulnerabilities, their impact & effective remediation strategies. - Full Visibility of Security Posture when it comes to security testing, across entire Organization or individual Agencies & Business Groups. - Analytics and Trend Discovery to better understand root cause of issues and where Organization needs to focus resources & effort. - Cost Savings up to 25% of security testing budget by providing on-demand reports & ticketing integration (JIRA, ServiceNow, Azure Dev Ops). Organizations spend ~$2K to $10K paying for reports on every project, and effort handling data to ticketing systems. AttackForge reduces/eliminates this entirely.
Infisical
AttackForgeNo Infisical videos yet. You could help us improve this page by suggesting one.
Based on our record, Infisical seems to be more popular. It has been mentiond 33 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
IMO env files are a bit of an anti-pattern, env vars should be set outside the context of your app so that your app doesn't need to care where they come from, it just uses standard env var APIs to read them. With that said, the problem still exists just one layer higher. If they are secrets, I use Infisical (https://infisical.com/) with a hook to infisical's export command. This means when I 'cd' into a project,... - Source: Hacker News / 3 months ago
Infisical is an open-source secrets management platform that helps you securely store, sync, and manage your application secrets across your entire development lifecycle. It provides a secure vault for API keys, database credentials, certificates, and other sensitive data with features like secret versioning, audit logs, and integrations with popular development tools. - Source: dev.to / about 1 year ago
We use Infisical for both our dev and prod environments. If you're a YC company you can get your first year free. https://infisical.com. - Source: Hacker News / almost 2 years ago
You might want to take a look at Infisical (https://infisical.com). - Source: Hacker News / almost 2 years ago
Infisical is an open-source secret management platform designed to help teams centralize their secrets, such as API keys, database credentials, and configurations. - Source: dev.to / about 2 years ago
Doppler - Doppler is the multi-cloud SecretOps Platform developers and security teams trust to provide secrets management at enterprise scale.
dradis - Dradis is the open-source reporting and collaboration tool for IT security professionals.
1Password - 1Password can create strong, unique passwords for you, remember them, and restore them, all directly in your web browser.
Faraday IDE - Collaborative Penetration Test and Vulnerability Management Platform that increases transparency...
AWS Secrets Manager - AWS Secrets Manager to Rotate, Manage, Retrieve Secrets
PlexTrac - PlexTrac is the #1 AI-powered platform for pentest reporting and threat exposure management, helping cybersecurity teams efficiently address the most critical threats and vulnerabilities.