Akeyless
Israeli SaaS secrets platform with dynamic credentials, zero-knowledge encryption and connectors to other vaults
Quick Overview
| Company | Akeyless Security Ltd. |
|---|---|
| Category | Secrets Management Software |
| Headquarters | Ramat Gan, Israel |
| Founded | Not stated |
| EU Presence | Yes - Israel (counts as European for EP) |
| Data Location | SaaS; hybrid deployment with on-premise gateways. Region choice not verified |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | Hybrid: SaaS control plane with gateways in your network |
| Main Features | Static secrets, dynamic secrets, just-in-time access, certificate lifecycle management, multi-vault governance, KMS, SecretlessAI for AI agents |
| Pricing | Free start available, enterprise priced by client count and add-ons, quote on request |
| Best For | Organisations that want a hosted vault and still keep an existing HashiCorp Vault in the loop |
| Replaces | HashiCorp Vault, AWS Secrets Manager, Azure Key Vault |
Detailed Review
Akeyless is the one vendor on this page that sells a hosted replacement for Vault rather than a Vault-compatible engine. Its own pricing page splits deployment into pure SaaS and a hybrid mode in which gateways run inside your network and the platform keeps the customer fragment of the encryption key out of Akeyless hands.
The contracting company is Akeyless Security Ltd., incorporated in Israel, which is the entity named as data controller in the privacy policy dated 5 May 2026. A US subsidiary, Akeyless Security USA, Inc., also appears in that policy, and the company lists an office in New York next to Ramat Gan.
Dynamic credentials and the Vault bridge
The product page describes requesting an AWS access key that is generated on demand with a preset expiry and revoked automatically afterwards. Connectors can synchronise secrets that live in AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, Kubernetes and HashiCorp Vault, which makes a gradual migration possible without a cut-over weekend.
The pricing page counts each connector as a licensed object, so a migration that touches many clusters has a visible cost.
Compliance claims
The trust page lists FedRAMP, FIPS 140-3, SOC 2 Type II, ISO 27001, PCI DSS and DORA. These are the vendor's own statements and the page does not say which product components each one covers, so ask for the reports before you rely on any of them.
How the price is built
Akeyless bills by clients: users, applications and servers that start a session, counted once per month and checked against an annual quota. Overage is invoiced at the end of the contract year. HSM integrations, certificates and connectors are separate units, and no list prices are published.
Limitations to Consider
There are no public prices, so a budget comparison with ayedo, which publishes a monthly figure, needs a sales call. The company has a US subsidiary and a New York office, which a strict sovereignty policy may weigh differently than an Israeli contract. The hybrid mode adds gateways you have to operate. Data region options were not visible on the pages checked.
Who Should Use Akeyless
Platform teams that want a managed vault with dynamic credentials and prefer one vendor over assembling an open source stack, and that are comfortable with an Israeli contracting entity.
Pros and Cons
Pros
- Dynamic secrets with automatic expiry
- Connectors to existing Vault and cloud stores
- Hybrid mode with gateways in your network
- Publishes compliance claims including DORA
- Free start available
Cons
- No published list prices
- US subsidiary and New York office exist
- Client counting can surprise growing estates
- Closed source, no self-hosted engine
Alternatives to Akeyless
Other European secrets management software worth comparing before you decide:
ayedo
Germany · Managed OpenBao on German infrastructure, run for you
Adfinis Secretz Enterprise
Switzerland · Flat-fee support subscription for running OpenBao in production
Passwork
Spain · Self-hosted password and secrets vault with REST API
Scaleway
France · Paris cloud with a pay-per-version Secret Manager
See all European secrets management software or compare them directly against HashiCorp Vault on our alternatives page.
Frequently Asked Questions
Yes. The pricing documentation lists HashiCorp Vault among the external vaults a connector can synchronise, next to AWS, Azure, GCP and Kubernetes secrets.
The contracting entity named in the privacy policy is Akeyless Security Ltd., incorporated in Israel. A US subsidiary and a New York office are also listed.
No. The pricing page explains the units (clients, connectors, certificates, HSM integrations) and sends you to an expert for numbers, with a free start offered.