( 5 )
Unclaimed: Are you working at Keeper Secrets Manager?
Keeper Secrets Manager Reviews: 4.4/5 — Solid Choice
Keeper Secrets Manager (KSM) is a fully managed, cloud-based, zero‑knowledge and zero‑trust secrets management solution for DevOps, IT and cloud infrastructure teams. It securely stores and manages infrastructure secrets — API keys, certificates, SSH keys, passwords, tokens and machine identities — to eliminate hard‑coded secrets in source code, configuration files and CI/CD pipelines. KSM provides SDKs, CLI tools, integrations for CI/CD and cloud platforms, automated secret rotation, RBAC, auditing and sync to external secret stores while preserving end‑to‑end encryption so Keeper cannot read secrets in plaintext.
| Company | Keeper Security, Inc. |
|---|---|
| Year founded | 2011 |
| Company size | 501-1000 employees |
| Headquarters | Chicago, Illinois, USA |
| Capabilities |
API
CLI
|
|---|---|
| Segment |
Mid Market
Enterprise
|
| Ease of use |
Intermediate
Advanced
|
| Deployment | Cloud / SaaS / Web-Based |
| Support | Email/Help Desk, Knowledge Base |
| Training | Documentation, Videos |
| Languages | English, Go, Java, JavaScript, .NET, PowerShell, Python, Ruby, Rust |
Keeper Secrets Manager Pros and Cons
- Zero‑knowledge / client‑side encryption architecture so Keeper cannot read secrets in plaintext.
- Automated rotation of secrets, API keys, SSH keys and certificates.
- Wide set of integrations for CI/CD, cloud platforms, containers and external secret stores.
- Explicit support for non‑human identities (machines, service accounts, agents).
- Fully managed cloud service for fast deployment without self‑hosted vault infrastructure.
- No simple public, per‑user pricing — Secrets Manager is sold as a Business/Enterprise add‑on requiring a quote.
- High cost at scale per AWS Marketplace tiers; annual prices for large API volumes can be substantial.
- Detailed SLAs and HA documentation were not clearly published in the reviewed resources.
- No clear documentation of built‑in secret scanning/detection in source code was found.
- Language/localization support for KSM interface not exhaustively documented.
Keeper Secrets Manager is not a product you can buy on its own, and Keeper does not publish what it costs. It is an add-on to a Keeper Business or Enterprise password-manager subscription — the feature table marks every secrets-management capability as “Add-on” against both tiers — and on the add-ons page where seven of nine items carry a published price, Secrets Manager reads “Custom Pricing — Request a Quote.” So the real entry cost is a per-seat password manager at $4 or $6 per user per month, plus an unquoted amount on top. One more thing to know before you click: the affiliate link does not land on Secrets Manager at all. It goes to Keeper’s consumer and small-business password-manager promotion.
- What it is: Cloud secrets management for DevOps — API keys, credentials and secrets in CI/CD, containers and scripts.
- Best for: Teams already standardising on Keeper who want to remove hard-coded credentials.
- Pricing: Not published. Requires a Keeper Business ($4/user/mo) or Enterprise ($6/user/mo) base.
- The honest catch: You cannot price it, buy it standalone, or reach it from the affiliate link.
What Is Keeper Secrets Manager?
Keeper Secrets Manager is a fully managed, cloud-based secrets manager aimed at DevOps. Its job is to get credentials out of your source code, config files and CI/CD systems and into an encrypted vault that machines can read at runtime — what the industry now calls protecting non-human identities.
Keeper’s own description is precise: it “eliminates secrets sprawl and helps DevOps teams protect sensitive credentials in CI/CD pipelines, containers, automation scripts and cloud infrastructure.”
The substance behind it is credible:
- Zero-knowledge, zero-trust encryption, with secrets decryptable only on devices you designate.
- Automated credential rotation for SSH keys, service accounts, API tokens and database passwords, both time-based and event-driven.
- Role-based access control, real-time access auditing and SIEM integration.
- Native DevOps integrations — GitHub Actions, Jenkins, Terraform, Kubernetes, Docker.
- SDKs for all popular languages, a REST API, and the Keeper Commander CLI.
- IDE plugins for VSCode, Cursor and JetBrains.
- AI agent integration via MCP, which is a current and unusual inclusion.
- Fully managed — no hosted software, no VPC peering, no infrastructure to run.
Keeper positions it against CyberArk, Delinea and BeyondTrust on its own comparison pages, which is the right neighbourhood.
The Findstack listing carries only 5 user reviews at 4.4 out of 5, so there is essentially no independent signal on this specific product.
How Keeper Secrets Manager Is Sold
This is where the buying decision actually happens, and it takes a moment to establish because Keeper’s site spreads it across three pages.
Secrets Manager is an add-on, not a plan. In Keeper’s business feature comparison, the rows for secrets management, automated credential rotation, Secrets Manager CLI and SDKs, AI agent integration with MCP, CI/CD, IaC, ITSM and DevOps integrations, VSCode/Cursor/JetBrains plugins and developer SDKs are all marked “Add-on” against the Business and Enterprise password-manager tiers. Business Starter cannot add it at all.
So the base subscription comes first:
| Keeper Business plan | Per user/month, billed annually | Can add Secrets Manager? |
|---|---|---|
| Business Starter (5–10 users) | $2.00 | No |
| Business | $4.00 | Yes, as an add-on |
| Enterprise | $6.00 | Yes, as an add-on |
| KeeperMSP | Contact Sales | — |
Then Secrets Manager is quoted separately.
Keeper Secrets Manager Pricing
Keeper’s add-ons page is mostly a model of clarity. Nine add-ons, seven with a number on the card:
| Add-on | Price |
|---|---|
| Endpoint Privilege Manager | $36/endpoint/year |
| Secure File Storage | from $132/year |
| BreachWatch | $24/user/year |
| Advanced Reporting & Alerts | $12/user/year |
| Compliance Reports | $12/user/year |
| KeeperChat | $24/user/year |
| Professional Services | from $270/year |
| Connection Manager | Custom Pricing |
| Keeper Secrets Manager | Custom Pricing |
Secrets Manager is one of only two items on that page without a price, sitting directly beside add-ons quoted to the dollar per user per year. That contrast is what makes the omission conspicuous — Keeper clearly can publish add-on pricing, and does, seven times over on the same screen.
What you can and cannot budget
For a 25-person team on Enterprise, the priced portion is entirely knowable:
- Enterprise seats — 25 × $6 × 12 = $1,800/year
- + BreachWatch at $24/user — $2,400
- + Advanced Reporting & Alerts at $12/user — $2,700
- + Compliance Reports at $12/user — $3,000
- + Keeper Secrets Manager — no published figure
So you can build a Keeper quote to within one line item and then stop. For a team evaluating Doppler, Infisical or HashiCorp Vault — all of which publish per-secret or per-seat rates — that final unknown is the whole comparison.
Ask for the Secrets Manager quote at the same time as the seat quote, and ask specifically how it is metered: per user, per secret, per application, or as a flat platform fee. Nothing on Keeper’s site says which.
The affiliate link goes somewhere else entirely
Findstack lists this product as Keeper Secrets Manager. The affiliate link resolves to Keeper’s “Personal and Business” affiliate landing page, which promotes the consumer and small-business password manager:
- Personal — $4.30 → $2.15/month, 1 user (50% off)
- Family — $9.20 → $4.60/month, 5 users (50% off)
- Business Starter — $10 → $7.00/month, 5 users minimum (30% off)
All three discounts apply to the first year only, for new customers.
Two things follow. Business Starter is the one Keeper business plan that cannot add Secrets Manager, so the only business plan on the affiliate page is the one that does not lead to the product being reviewed. And a developer arriving from a secrets-management search lands on a password-manager promotion with no obvious route to what they came for.
If you want Secrets Manager, go to Keeper’s business pricing and request a quote directly — the discounted landing page will not get you there.
A unit-of-quote trap worth knowing
The affiliate page and the main pricing page quote the same plan in different units, both labelled “/month.”
The affiliate page shows Business Starter at $10/month for 5 users. The main business pricing page shows Business Starter at $2.00 user/month. Those are the same price — 5 × $2.00 = $10 — but a buyer comparing the two pages side by side sees a fivefold difference and no explanation.
Neither figure is wrong. Check whether a Keeper price is per user or per account before comparing it to anything.
What actually decides your cost
- Your base plan — Business at $4 or Enterprise at $6 per user per month; Business Starter is not eligible.
- Seat count, since the base is per user.
- The Secrets Manager quote itself, which is unpublished and whose meter is unstated.
- Which other add-ons you take, at $12 to $36 per user or endpoint per year.
- Whether you are a new customer, since the advertised discounts are first-year only.
- Not infrastructure. It is fully managed — no self-hosting, no VPC peering.
Who Should Use Keeper Secrets Manager
Keeper Secrets Manager fits an organisation that already runs Keeper for password management and wants machine secrets under the same zero-knowledge roof, the same admin console and the same audit trail. That consolidation is the genuine argument for it: one vendor, one encryption model, one set of RBAC policies covering both human and non-human identities. The DevOps integration list is complete enough for most stacks, and the managed model means there is no Vault cluster to operate.
It fits badly for a team that only needs secrets management. You would be buying a password-manager subscription you do not want in order to add the product you do, and you cannot price the combination without a sales conversation. Doppler, Infisical and HashiCorp Vault all sell secrets management directly, and most publish rates.
Honest Pros and Cons
What works well:
- Zero-knowledge, zero-trust encryption with device-scoped decryption.
- Fully managed — no infrastructure, no VPC peering, no cluster to operate.
- Automated rotation for SSH keys, service accounts, API tokens and database passwords.
- A complete DevOps integration set — GitHub Actions, Jenkins, Terraform, Kubernetes, Docker.
- SDKs, REST API and the Keeper Commander CLI, plus VSCode, Cursor and JetBrains plugins.
- AI agent integration via MCP, which few competitors currently offer.
- RBAC, real-time access auditing and SIEM integration through the same admin console as the password manager.
- Keeper publishes its other add-on prices to the dollar, and names its own competitors.
What to watch:
- No published price — “Custom Pricing, Request a Quote,” on a page where seven of nine add-ons show a figure.
- Not sold standalone — it requires a Keeper Business or Enterprise password-manager subscription first.
- Business Starter cannot add it, so the cheapest business plan is a dead end for this product.
- The metering basis is not stated — per user, per secret, per application or flat.
- The affiliate link lands on the consumer and small-business password manager, not on Secrets Manager.
- Advertised discounts are first-year, new-customer only.
- The same plan is quoted per-account on one page and per-user on another, both labelled “/month.”
- Only 5 Findstack reviews, so independent evidence is negligible.
- Findstack has no secrets-management category, so this sits under password managers.
Keeper Secrets Manager Alternatives and How It Compares
- HashiCorp Vault is the reference implementation for secrets management, self-hostable and free in its open-source form — powerful, and considerably more work to operate than a managed service.
- Doppler and Infisical are the modern managed alternatives, both with published per-seat pricing and developer-first onboarding.
- AWS Secrets Manager, Azure Key Vault and Google Secret Manager are the cloud-native options, priced per secret per month, and usually the cheapest answer if your infrastructure lives in one cloud.
- CyberArk and Delinea are the enterprise PAM incumbents Keeper names itself, both quote-only and both substantially heavier.
- 1Password offers a developer-focused secrets product alongside its password manager, in the same consolidate-with-one-vendor shape as Keeper.
The honest comparison: Keeper’s case is consolidation, not price or capability. If you already pay Keeper for password management, adding secrets to the same vault and the same audit trail is a real operational simplification. If you do not, you are buying a password manager to reach a secrets manager, and the cloud-native options will be cheaper and quicker to adopt.
The Verdict
The product is sound. Zero-knowledge encryption, automated rotation, a full DevOps integration set, MCP support for AI agents, and no infrastructure to run is a competitive package, and running human and machine credentials through one console with one RBAC model is a genuine advantage for an organisation already on Keeper.
The commercial presentation is the problem. Secrets Manager cannot be bought alone, cannot be priced from the website, and cannot be reached from the link Findstack sends you to. On a page where Keeper prices BreachWatch, Compliance Reports and Advanced Reporting to the dollar, leaving this one at “Request a Quote” reads as a choice rather than a necessity.
If you already use Keeper, request the add-on quote — the consolidation argument is strong and you have already paid the base cost. Ask how it is metered, because that determines whether it scales with your team or your secret count, and the site does not say.
If you do not use Keeper, price Doppler, Infisical and your cloud provider’s native secrets manager first. All of them publish rates and none requires you to buy a password manager to get started. Then, if Keeper still appeals, get the full quote — base seats plus add-on — and compare that total, not the $6 seat price.
FAQ
How much does Keeper Secrets Manager cost?
Keeper does not publish a price. On its business add-ons page, Secrets Manager is listed as “Custom Pricing — Request a Quote” — one of only two of nine add-ons without a figure, alongside Connection Manager. What is published is the base you need underneath it: a Keeper Business subscription at $4.00 per user per month or Enterprise at $6.00, both billed annually. Keeper also does not state how Secrets Manager is metered — per user, per secret, per application or as a flat fee — so ask that alongside the quote.
Can I buy Keeper Secrets Manager on its own?
No. It is an add-on to a Keeper business password-manager subscription, and Keeper’s own feature comparison marks every secrets-management capability — secrets management, automated rotation, the CLI and SDKs, MCP agent integration, CI/CD and IaC integrations, and IDE plugins — as “Add-on” against the Business and Enterprise tiers. Business Starter, the $2.00-per-user plan for 5–10 users, cannot add it at all. So the minimum path is Business at $4 per user per month plus an unquoted add-on.
What does Keeper Secrets Manager actually do?
It removes hard-coded credentials from source code, config files and CI/CD systems, storing them in a zero-knowledge encrypted vault that applications retrieve at runtime. Core capabilities are automated rotation of SSH keys, service accounts, API tokens and database passwords; role-based access control with real-time auditing and SIEM integration; and native integrations with GitHub Actions, Jenkins, Terraform, Kubernetes and Docker, plus SDKs, a REST API, the Keeper Commander CLI, VSCode/Cursor/JetBrains plugins and AI agent access via MCP. It is fully managed — no self-hosting and no VPC peering.
Why does Keeper’s affiliate link go to the password manager?
Because it points at Keeper’s consumer and small-business affiliate landing page rather than at Secrets Manager. That page promotes Personal at $2.15/month, Family at $4.60/month for 5 users, and Business Starter at $7.00/month for 5 users, all discounted for the first year for new customers only. Note that Business Starter is the single Keeper business plan that cannot add Secrets Manager. If Secrets Manager is what you want, go to Keeper’s business pricing page and request a quote directly.
How does Keeper Secrets Manager compare to HashiCorp Vault?
Different trade-offs. Vault is the reference implementation, self-hostable, free in open source, and enormously capable — at the cost of running and securing the cluster yourself. Keeper is fully managed with no infrastructure to operate, and its distinctive advantage is consolidation: machine secrets sit in the same zero-knowledge vault, admin console and audit trail as your employees’ passwords. If you already run Keeper for password management, that consolidation is the argument. If you do not, Vault, Doppler, Infisical or your cloud provider’s native secrets manager will all be quicker to price and adopt.
I like having a secure one stop shop password management solution that requires authentication. The ease of use to install browser plugins and having the choice to auto fill sites.
Having to authenticate each time you power on your computer; though a hindersnce, it surely is more secure than other password management tools available. I'd like to see more suggestions for auto filling when accessing websites.
It is solving the problem of credential management for any site you choose, and it is very beneficial to admins by saving time having to remember so many different passwords.
Keeper's strengths, in my experience, are password management in a cloud environment, which allows me to access my passwords wherever I am without relying on a VPN connection or anything in-house. Added to the rotation of passwords that it has makes it an excellent tool to manage your accesses, and when used as a team, the ability to manage which keys each one can see is excellent.
Points that I don't like, I'm not sure but maybe it would be the paradigm that cloud key management tools face, since not being in a controlled on-premise environment it could be considered "not secure" but this is rather a paradigm, not a negative point of the tool.
The problem that the keeper solved is the use of on-premise password management tools, which stored passwords on the user's local computer, which, when violated, exposed all of the person's critical accesses.
Keeper Secrets Manager makes it possible to manage our company's passwords and secrets without having to employ an IT team. It provides really handy tools like security audits and compliance reports, which make it easy to monitor issues on a continuous basis.
The service is a bit pricey, but functionality-wise, we haven't found anything we don't like about the service. We would like to have the option of a lower priced subscription with fewer licenses.
Keeper Secrets Manager allows our very small organization to protect our valuable intellectual property by allowing us to quickly deploy encrypted access to our engineering and R&D data.
With a wide array of integrations, Keeper Secrets Manager comes as a helpful tool to manage your API keys, credentials and passwords without having to worry about it being leaked, a zero-knowledge platform on the cloud easy to rollout and to use with comprehensive features.
The base features while nice, don't cover all functionalities, in order to get more juice from it, you'd need to get additional add-ons which are mostly paid, incrementing the costs and management.
Having one place to store everything is such a nice headache relief, and like previously said, the wide array of integrations such like Bitbucket, makes it easier to rollout and implement.
Keeper on the surface is a great product, ticks all the boxes including MSP resell support.
The bortswer extension UI is very poor, its ability to just take over text fields that arent a email/username and password is second to none, in a bad way. Autofilling things that arent supposed to be even when autofill is turned off.
In todays day and age, resuse of passwords is a biog problem, having a password manager that allows you to never reuse a password and for every password to be completely random and auto generated should be in the top 5 things everyone does and has.
