Keyorix
The facts below are what the maker publishes about Keyorix, checked and dated. Our editors have not written about it yet.
The facts
Each one read from Keyorix's own pages, with the date it was checked.
What it does
- Access control
- The repository lists role-based and group-based permissions, service tokens for CI/CD, and dynamic secrets with time-to-live.checked 11 Oct 2026
- Audit
- Keyorix says it logs who accessed what, when, and from where, and provides dashboard alerts for secrets nearing rotation deadlines.checked 11 Oct 2026
- Compliance
- The maker lists NIS2, DORA, the AI Act, GDPR, and ENS under “EU Compliance-by-Design.”checked 11 Oct 2026
- Deployment
- The project describes itself as on-premise, air-gap ready, and available as a single binary.checked 11 Oct 2026
- Encryption
- The repository says secret values are encrypted with AES-256-GCM and that secrets are not logged or exposed in error messages.checked 11 Oct 2026
- Health scan
- The maker offers a free, read-only Vault and OpenBao health scan that does not read secret values or send telemetry.checked 11 Oct 2026
- Integrations
- The maker lists Go, Python, Node.js, and Java SDKs and an MCP server with read-only secret tools.checked 11 Oct 2026
- Intended users
- The repository describes Keyorix as lightweight on-premise secrets management for European enterprises.checked 11 Oct 2026
- Interfaces
- The maker's site lists REST and GraphQL interfaces and a CLI.checked 11 Oct 2026
- License and commercial terms
- The software is released under AGPL-3.0, and the maker says commercial licenses are available for organizations that cannot use AGPL.checked 11 Oct 2026
- Migration
- The project documents importing from Vault exports and .env files, and provides a separate migration binary for live Vault, OpenBao, and cloud secret managers.checked 11 Oct 2026
- Privacy
- The privacy policy says the software is self-hosted, sends no telemetry or license-check calls, and keeps secrets and data in the user's infrastructure.checked 11 Oct 2026
- Privacy policy
- The website privacy policy says it collects information submitted through its forms and does not use analytics, advertising, or tracking cookies.checked 11 Oct 2026
- Product
- Keyorix describes itself as open-source secrets management for teams that cannot use SaaS.checked 11 Oct 2026
- Purpose
- Keyorix is a secrets, keys, and certificates management platform designed for teams that cannot use SaaS.checked 11 Oct 2026
- SDKs
- The repository lists Go, Python, Node.js, and Java SDKs.checked 11 Oct 2026
- Secret handling
- Secrets can be injected into applications as environment variables through the CLI.checked 11 Oct 2026
- Secret management
- The product supports creating, reading, updating, deleting, and versioning secrets, with development, staging, and production environments.checked 11 Oct 2026
- Security
- The maker says access actions use cryptographic proofs and zero-knowledge protocols, and that interactions can be verified without exposing sensitive data.checked 11 Oct 2026
- Support
- The terms say paid services such as support are governed by a separate written agreement.checked 11 Oct 2026
- Zero trust
- The maker says short-lived credentials and cryptographic proofs continuously verify access across cloud, on-prem, edge, and IoT nodes.checked 11 Oct 2026
Where it runs
- Air-gapped use
- The repository says the core product needs no internet access and supports air-gapped deployment.checked 11 Oct 2026
The company
- Headquarters
- Valencia, Spainchecked 28 Sep 2026
Alternatives to Keyorix
- 1
Envshed
Free planWebAPILinuxmacOS7.6From $5 a month - 2
Keyway
Free planWebAPILinuxmacOS7.1From €9 a month - 3
Infisical
Free planWebAPILinuxSelf-hosted7.0From $2 a month - 4
Oracle Cloud Infrastructure Secret Management
Free planWebAPI7.0Free plan - 5
secr
Free planWebAPIExtensionLinux7.0From $6 a month - 6
SikkerKey
Free planWebAPILinuxmacOS7.0From $29 a month