LunaDefend is an end-to-end data security system designed to protect your application by transparently encrypting sensitive data, from browser to database.
Cost / License
- Free
- Open Source
Platforms
- Mac
- Windows
- Linux
- Self-Hosted
- Amazon Web Services



Apps similar to Vault by HashiCorp include Arca Secrets, which is open source with a free version. Other options are Passbolt, Psono, Vaulteron and Bitwarden Secrets Manager. Password Managers like Vault by HashiCorp are a crowded field, with more than 25 alternatives for Mac, Linux, Windows, the web and self-hosting.
LunaDefend is an end-to-end data security system designed to protect your application by transparently encrypting sensitive data, from browser to database.



Post-quantum signing API built on ML-DSA-65 (NIST FIPS 204) — sign tokens, issue certificates, and verify signatures without managing cryptographic infrastructure.

Cloud-privileged access governance platform that automates Just-in-Time and Just-Enough access for humans and non-human identities across AWS, GCP, Azure, and Kubernetes.



Offers secure password management with AES encryption, zero-knowledge protocol, two-factor authentication, biometric options, unique password generation, breach alerts, remote logout, browsing history deletion, and bank card storage for safe online checkouts.



SOPS is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.
VMware Secrets Manager for Cloud-Native Apps is a lightweight secrets manager to protect your sensitive data. It’s perfect for edge deployments where energy and footprint requirements are strict—See more: https://vsecm.com/.
Akeyless Vault is an end-to-end SaaS platform for secrets management and zero trust access for all use cases, across hybrid cloud, multi-cloud and legacy environments.




Mac app that stores developer API keys in iCloud Keychain by project and runs your commands with them, so you don't need .env files.


macOS secret manager for AI coding agents — keys live in the Keychain, per-request Touch ID via MCP, values never enter the chat context.




Centralizes team environment variables and encrypted secrets by project and environment, with scoped access and audit logs. Its CLI pulls or pushes .env files, validates configuration, injects secrets into processes, and syncs variables to deployment platforms.




App-Vault is an iPhone and iPad app that creates an encrypted vault for photos, files, and documents. Encryption happens entirely on-device with Apple's CryptoKit framework, so plaintext content and keys never leave the phone and there is no App-Vault server involved.



git-crypt enables transparent encryption and decryption of files in a git repository. Files which you choose to protect are encrypted when committed, and decrypted when checked out. git-crypt lets you freely share a repository containing a mix of public and private content.