Sealed Secrets
Encrypt Kubernetes secrets into a format safe to store in Git
Pricing: Free (open source)
Reviewed by the CyberSecTool editorial team against the public sources cited below · Last reviewed April 2026 · How we review listings
What is Sealed Secrets?
Sealed Secrets is a Kubernetes controller from Bitnami that lets you store encrypted secrets directly in Git. You use the kubeseal CLI to encrypt a regular Kubernetes Secret into a SealedSecret custom resource, which only the controller running in your cluster can decrypt. This makes secret material safe to commit, review, and diff in version control without a separate secrets manager.
- ✓ No external secrets backend needed; just Git plus cluster
- ✓ Perfect fit for pure GitOps workflows
- ✓ Simple mental model: encrypt once, commit, done
- ✓ Backed by Bitnami (VMware) with stable release cadence
- • Key rotation requires re-sealing every secret
- • Lose the cluster key, lose every sealed secret
- • No per-key RBAC; anyone who can create a SealedSecret can decrypt it once applied
- • No rotation or lifecycle features like a real secrets manager
Reported in public reviews and vendor documentation. See sources below.
Key Features
Are you Sealed Secrets? Improve this listing with screenshots, case studies and more.
Sources & references
Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.
Spot an error, or do you represent Sealed Secrets? Request a correction.
Quick Info
| Pricing | Free (open source) |
| Model | Open Source |
| Founded | 2017 |
| Cloud | No |
| Self-Hosted | Yes |
| Open Source | Yes |
Last updated: Apr 23, 2026
Sealed Secrets Alternatives
View All AlternativesFeaturedSplitSecureDistributed secrets management — no vault, no vendor depende...