Need advice about which tool to choose?Ask the StackShare community!

Keywhiz

12
47
+ 1
3
Strongbox

0
5
+ 1
0
Add tool

Keywhiz vs Strongbox: What are the differences?

Keywhiz: A system for distributing and managing secrets. Keywhiz is a secret management and distribution service that is now available for everyone. Keywhiz helps us with infrastructure secrets, including TLS certificates and keys, GPG keyrings, symmetric keys, database credentials, API tokens, and SSH keys for external services — and even some non-secrets like TLS trust stores. Automation with Keywhiz allows us to seamlessly distribute and generate the necessary secrets for our services, which provides a consistent and secure environment, and ultimately helps us ship faster; Strongbox: A secret manager for AWS. Strongbox is a CLI/GUI and SDK to manage, store, and retrieve secrets (access tokens, encryption keys, private certificates, etc). Strongbox is a client-side convenience layer on top of AWS KMS, DynamoDB and IAM. It manages the AWS resources for you and configure them in a secure way.

Keywhiz and Strongbox can be categorized as "Secrets Management" tools.

Some of the features offered by Keywhiz are:

  • Keywhiz Server provides JSON APIs for accessing and managing secrets. It is written in Java and based on Dropwizard.
  • KeywhizFs is a FUSE-based file system, providing secrets as if they are files in a directory. Transparently, secrets are retrieved from a Keywhiz Server using mTLS with a client certificate.
  • Presenting secrets as files makes Keywhiz compatible with nearly all software. Outside of Keywhiz administration, consumers of secrets only have to know how to read a file.

On the other hand, Strongbox provides the following key features:

  • Serverless
  • Simple access model
  • Encryption

Keywhiz and Strongbox are both open source tools. Keywhiz with 2.09K GitHub stars and 166 forks on GitHub appears to be more popular than Strongbox with 244 GitHub stars and 21 GitHub forks.

Get Advice from developers at your company using StackShare Enterprise. Sign up for StackShare Enterprise.
Learn More
Pros of Keywhiz
Pros of Strongbox
  • 3
    Fuse FS
    Be the first to leave a pro

    Sign up to add or upvote prosMake informed product decisions

    What is Keywhiz?

    Keywhiz is a secret management and distribution service that is now available for everyone. Keywhiz helps us with infrastructure secrets, including TLS certificates and keys, GPG keyrings, symmetric keys, database credentials, API tokens, and SSH keys for external services — and even some non-secrets like TLS trust stores. Automation with Keywhiz allows us to seamlessly distribute and generate the necessary secrets for our services, which provides a consistent and secure environment, and ultimately helps us ship faster.

    What is Strongbox?

    Strongbox is a CLI/GUI and SDK to manage, store, and retrieve secrets (access tokens, encryption keys, private certificates, etc). Strongbox is a client-side convenience layer on top of AWS KMS, DynamoDB and IAM. It manages the AWS resources for you and configure them in a secure way.

    Need advice about which tool to choose?Ask the StackShare community!

    Jobs that mention Keywhiz and Strongbox as a desired skillset
    CBRE
    Netherlands Noord-Holland Amsterdam
    What tools integrate with Keywhiz?
    What tools integrate with Strongbox?
      No integrations found
      What are some alternatives to Keywhiz and Strongbox?
      Vault
      Vault is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more. Vault provides a unified interface to any secret, while providing tight access control and recording a detailed audit log.
      AWS Secrets Manager
      AWS Secrets Manager helps you protect secrets needed to access your applications, services, and IT resources. The service enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.
      Docker Secrets
      A container native solution that strengthens the Trusted Delivery component of container security by integrating secret distribution directly into the container platform.
      Doppler
      Stop struggling with scattered environment variables, hacking together home-brewed tools, and avoiding access controls. Keep your team and servers in sync with Doppler.
      Torus CLI
      Torus simplifies the modern development workflow enabling you to store, share, and organize secrets across services and environments. With Torus, you can standardize on one tool across all environments. Map Torus to your workflows using projects, environments, services, teams, and machines.
      See all alternatives