SikkerKey
SikkerKey is a secrets manager and vault for application and infrastructure credentials.
What SikkerKey is
SikkerKey is a secrets manager and vault for application and infrastructure credentials. It supports standard, structured, managed, leased, certificate, canary and TTL secrets, as well as rotation and dynamic secrets. Machines authenticate by signing each request with an Ed25519 private key that stays on the host. Teams can connect SikkerKey to CI/CD systems, containers, app platforms, serverless functions, servers and on-premise systems through its CLI, SDKs or signed HTTP. Official SDKs are available for Go, Python, Node.js, .NET, Kotlin and PHP. The service uses three-layer envelope encryption, with per-secret AES-256-GCM data keys, per-project master keys and a separate root key. Its MCP server gives AI agents a separate identity class that cannot retrieve plaintext secret values. SikkerKey says its vault, secrets and audit trail stay in the EU and are operated from Denmark. The free Developer plan includes 10 machines; Teams is $29 a month, billed monthly. Every plan includes direct in-dashboard support and unlimited secret, project, read-volume and rotation counts.
Good
- Supports multiple secret types, including leased and TTL
- Official SDKs cover six programming languages
- AI agents cannot retrieve plaintext secret values
- Every plan includes direct in-dashboard support
- Secret and project counts are unlimited
Watch out
- Free plan includes 10 machines
- Developer plan has 1 month audit retention
- No free trial
Who it suits
SikkerKey is designed for software engineers, DevOps teams and organizations managing application secrets, including those connecting credentials to infrastructure and development workflows.
Verdict
SikkerKey offers a free plan and paid plans starting at $29 a month, billed monthly. Its plan limits include machine counts, audit retention and webhook deliveries, while secret and project counts are unlimited.
Plans and prices
From SikkerKey's own pricing page, checked 30 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Developer | Free | 10 machines included · 1 month audit retention · 20 webhook deliveries/day · +$5 per additional machine/month |
| Teams | $29 a month | 25 machines included · 12 months audit retention · 1,000 webhook deliveries/day · +$4 per additional machine/month · 5 private-infrastructure tunnels · monthly |
| Teams Pro | $79 a month | 75 machines included · 24 months audit retention · 5,000 webhook deliveries/day · +$3 per additional machine/month · 10 private-infrastructure tunnels · monthly |
The facts
Each one read from SikkerKey's own pages, with the date it was checked.
What it does
- AI access
- Its MCP server gives AI agents a separate identity class that cannot retrieve plaintext secret values.checked 30 Sep 2026
- Compliance
- The service processes data in the EEA and states that GDPR safeguards apply to its processing and transfers.checked 30 Sep 2026
- Encryption
- Secrets use three-layer envelope encryption with per-secret AES-256-GCM data keys, per-project master keys and a separate root key.checked 30 Sep 2026
- EU hosting
- SikkerKey says its vault, secrets and audit trail stay in the European Union and are operated from Denmark.checked 30 Sep 2026
- Integrations
- SikkerKey integrates through its CLI, SDKs or signed HTTP with CI/CD, containers, app platforms, serverless functions, servers and on-premise systems.checked 30 Sep 2026
- Product
- SikkerKey is a secrets manager and vault for application and infrastructure credentials.checked 30 Sep 2026
- SDKs
- Official SDKs are available for Go, Python, Node.js, .NET, Kotlin and PHP.checked 30 Sep 2026
- Secret types
- The platform supports standard, structured, managed, leased, certificate, canary and TTL secrets.checked 30 Sep 2026
- Support
- Direct in-dashboard support is included on every plan.checked 30 Sep 2026
- Target users
- The service is designed for software engineers, DevOps teams and organizations managing application secrets.checked 30 Sep 2026
- Usage limits
- Secret count, project count, read volume and rotation frequency are unlimited on every plan.checked 30 Sep 2026
Where it runs
- CLI platforms
- The packaged CLI supports Linux x64 and ARM64, macOS Intel and Apple Silicon, and Windows x64.checked 30 Sep 2026
- Machine authentication
- Machines authenticate by signing each request with an Ed25519 private key that remains on the host.checked 30 Sep 2026
The company
- Headquarters
- Denmarkchecked 28 Sep 2026
Alternatives to SikkerKey
- 1
Envshed
Free planWebAPILinuxmacOS7.6From $5 a month - 2
Keyway
Free planWebAPILinuxmacOS7.1From €9 a month - 3
Infisical
Free planWebAPILinuxSelf-hosted7.0From $2 a month - 4
Oracle Cloud Infrastructure Secret Management
Free planWebAPI7.0Free plan - 5
secr
Free planWebAPIExtensionLinux7.0From $6 a month - 6
KeyEnv
Free planWebAPILinuxmacOS6.9From $40 a year