SecretHub
SecretHub (KeyLocker BV) was a Delft-based developer secrets management platform offering end-to-end encrypted credential storage and runtime injection for DevOps teams across AWS, GCP, and Azure. It was acquired by 1Password in April 2021 and wound down by January 2022.
- Company typePrivate
- Founded2018
- HeadquartersDelft, Netherlands
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What SecretHub does
SecretHub (legal entity KeyLocker BV) was a Netherlands-based developer secrets management platform founded in 2018 and headquartered in Delft. The product enabled DevOps teams and engineering organizations to store, distribute, and inject secrets (API keys, database passwords, TLS certificates) without hardcoding credentials in source code. Its core technical proposition was a client-side end-to-end encryption architecture — secrets were encrypted on the client using 4096-bit RSA account keys and 256-bit AES secret keys (RSA-OAEP/SHA256 and AES-GCM with 96-bit nonces), with metadata further protected via HMAC-SHA256 blind names — such that the SecretHub server never had access to plaintext secrets or key material. The platform comprised a CLI (the primary developer touchpoint, distributed via apt, yum, apk, npm, Homebrew, and Scoop), SDKs in Go, Python, and .NET, a Kubernetes mutating webhook, an official HashiCorp Terraform provider with a .tfstate backend, an Ansible module, and an HTTP proxy — plus native keyless authentication integrations with AWS (IAM, KMS, STS) and GCP (Cloud IAM, Cloud KMS, Workload Identity) that eliminated static credential files.
The commercial model combined a self-serve SaaS subscription for individual developers with an organizational premium/enterprise tier offering custom hosting, uptime SLAs, advanced support, and SCIM provisioning; pricing was not publicly listed. Distribution was product-led through the CLI and developer documentation, supplemented by content marketing, GitHub, Discord, and a small enterprise sales overlay. On April 13, 2021, SecretHub was acquired by 1Password to extend that platform from human credentials into machine credential management; existing SecretHub customers were supported through a transition period to migrate to 1Password Business, with the SecretHub service sunset on January 1, 2022.
SecretHub firmographics
Firmographics- Name
- SecretHub
- Legal name
- KeyLocker BV
- Website
- https://secrethub.io
- Company type
- Private
- Founded year
- 2018
- Operating status
- Acquired
- Headcount range
- 11–50 employees
- Short description
- SecretHub (KeyLocker BV) was a Delft-based developer secrets management platform offering end-to-end encrypted credential storage and runtime injection for DevOps teams across AWS, GCP, and Azure. It was acquired by 1Password in April 2021 and wound down by January 2022.
- Ownership category
- akta.pro rank
SecretHub industry classification
Industry- Product category
- Secrets Management Software
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Secrets Management & Credential Vaulting (HDADAAAJ)
- akta.pro secondary industries
- Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD), Secrets Management & Machine Identity (API keys, certificates, workload identity) (HDAEAJAJ)
Keywords
Where SecretHub is headquartered
LocationHeadquarters
- HQ city
- Delft
- HQ country
- Netherlands
- HQ region
- Europe
Offices1 record
Markets served
SecretHub business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales
Revenue model
- SaaS Subscription - Individual Accounts: Individual developers can sign up for accounts through the CLI or web dashboard. Paid premium plans available for organizations requiring additional features, support SLAs, and team collaboration capabilities.
- Enterprise Plans: Enterprise plan with custom hosting options, uptime SLAs, advanced support plans, and SCIM provisioning for large organizations. Premium plans are billed at organizational level rather than individual seats.
Go-to-market motion1 record
Distribution channels4 records
Marketing channels5 records
SecretHub product offering
Product offeringCore offering
SecretHub provides an end-to-end encrypted SaaS platform for managing and distributing secrets (API keys, database passwords, TLS certificates, tokens) across development, CI/CD, and production environments. Secrets are encrypted on the client before leaving the device, with the server never seeing plaintext, and are automatically injected into applications at runtime across AWS, GCP, Azure, Kubernetes, and Terraform workflows. The platform is delivered via a CLI-first interface, cloud-native identity providers, and a Kubernetes mutating webhook for keyless cloud authentication.
Product overview
SecretHub is a secrets management platform offered as a unified product with multiple integration modules. The core platform consists of the SecretHub service with end-to-end encryption, the SecretHub CLI for managing secrets, and cloud-native identity providers for AWS (IAM/KMS) and GCP (Cloud IAM/KMS). Additional modules include the Terraform Provider for infrastructure-as-code secret management, the Kubernetes Mutating Webhook for container environments, and SDKs in Go, Python, and .NET for programmatic access. The platform emphasizes keyless authentication for cloud workloads, eliminating the need to manage static credential files.
Differentiator
Problem solved
Functional benefit
Products and services
- SecretHub Platform
Quantifiable outcome
- SecretHub enables infrastructure scaling 20x with minimal changes (Turn.io case)
- +2 more outcomes
Companies that use SecretHub
Customer profileNamed customers7 records
Segments4 records
Ideal customer profiles3 records
SecretHub technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration20 records
Feature9 records
SecretHub partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- 1PasswordflagshipSecretHub announced it is joining 1Password on April 13, 2021. The SecretHub team joined 1Password to help every business manage both human and machine credentials in one unified platform. The combined entity aims to bring best-in-class secrets management to both individuals and enterprise customers.
Scale indicators4 records
Recent moves5 records
Expansion highlights4 records
SecretHub competitors and assessment
Company assessmentDirect peers
- HashiCorp Vault: HashiCorp Vault is the dominant open-source and enterprise secrets management platform; SecretHub's marketing and customer testimonials explicitly position against Vault on simplicity and ease of use. It is the closest direct competitor with the same target persona (developers/DevOps).
- AWS Secrets Manager: AWS-native secrets management service tightly integrated with IAM and KMS. SecretHub's AWS keyless integration is in part a competitive response, and AWS Secrets Manager is the default option for AWS-only workloads.
- Google Cloud Secret Manager: GCP-native secrets management integrated with Cloud IAM and Cloud KMS, directly analogous to SecretHub's GCP identity provider integration. Customers using GCP workloads have this as a bundled alternative.
- Microsoft Azure Key Vault: Azure's native secrets/keys/certificates management service. SecretHub lists Azure integration as a supported cloud, competing for the same Azure customer workloads.
- Akeyless: SaaS-based secrets management and vaultless encryption platform with similar developer/DevOps positioning and keyless/cloud-credential authentication. Closest newer direct peer in the SaaS-native secrets management category.
- Doppler: Developer-focused secrets management platform with strong CLI and framework integrations. Targets the same developer-led adoption motion that SecretHub pioneered and is often compared with in PLG analyst write-ups.
- Infisical: Open-source, developer-first secrets management platform with native Kubernetes, CI/CD, and cloud integrations. Direct PLG competitor in the same horizontal secrets management category.
Broad incumbents
- CyberArk: Large enterprise IAM/privileged access management vendor whose Conjur product overlaps with secrets management for DevOps workloads. Much broader portfolio (PAM, workforce IAM) but competes in the same buyer evaluations.
- Keeper Security: Broad password and secrets management vendor with enterprise vault capabilities. Adjacent to SecretHub's human+ machine credentials thesis and competes for the same enterprise security budget line.
Emerging players
- Bitnami Sealed Secrets: Open-source Kubernetes-focused secrets management offering using one-way encrypted secrets. Overlaps with SecretHub's Kubernetes Mutating Webhook use case, particularly for K8s-only shops.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks5 records
Key highlights7 records
Customer concentration
SecretHub social profiles
Digital presenceSecretHub compliance and trust
Trust signalCompliance2 records
SecretHub financial estimates
Financial estimateRevenue estimate
Valuation estimate
SecretHub leadership team
Management profileNumber of profiles
Profiles1 record
SecretHub funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
SecretHub M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about SecretHub
What does SecretHub do?
SecretHub provides an end-to-end encrypted SaaS platform for managing and distributing secrets (API keys, database passwords, TLS certificates, tokens) across development, CI/CD, and production environments. Secrets are encrypted on the client before leaving the device, with the server never seeing plaintext, and are automatically injected into applications at runtime across AWS, GCP, Azure, Kubernetes, and Terraform workflows. The platform is delivered via a CLI-first interface, cloud-native identity providers, and a Kubernetes mutating webhook for keyless cloud authentication.
Is SecretHub a public or private company?
SecretHub is a private company. It is classified as corporate owned and is currently acquired.
When was SecretHub founded?
SecretHub was founded in 2018. It employs 11 to 50 people.
Where is SecretHub based?
SecretHub is headquartered in Delft, Netherlands, in the Europe region.
How does SecretHub make money?
Two revenue lines are on record. SaaS Subscription - Individual Accounts are the primary driver. The others are enterprise Plans.
Who are SecretHub's main competitors?
Direct peers on record are HashiCorp Vault, AWS Secrets Manager, Google Cloud Secret Manager, Microsoft Azure Key Vault, Akeyless, Doppler and Infisical. Broad incumbents are CyberArk and Keeper Security. Bitnami Sealed Secrets is listed as an emerging player.
Does SecretHub have an API?
Yes. SecretHub offers a REST API that allows developers to programmatically manage secrets, access control, and integrate with their infrastructure. The API supports cURL and multiple SDKs including Go, Python, and .NET. Service accounts can be created and managed through the API for CI/CD and cloud deployments. Developer documentation is at secrethub.io/docs.
What industry is SecretHub in?
SecretHub's product category is Secrets Management Software. Its primary akta.pro industry code is HDADAAAJ, Secrets Management & Credential Vaulting, with a secondary code of HDADAFAD, Secrets Management (Passwords, API Keys, Tokens). Its SIC code is 7372.