Open-source secrets management platform designed for developers and DevOps teams. Phase makes it easy to generate, store, rotate, and audit sensitive application credentials across all environments. Secure your API keys, database passwords, certificates from development to production.
Phase is an open-source secrets manager built for fast-moving engineering teams that need a secure, auditable, and scalable way to manage application secrets. It provides a unified workflow for generating, storing, rotating, and distributing sensitive credentials such as API keys, database passwords, certificates, JWT signing keys, and encrypted configuration values.
Designed with a developer-first approach, Phase integrates seamlessly into CI/CD pipelines, infrastructure provisioning systems, and runtime applications. Its self-hosted architecture gives organizations complete control over their security posture while still offering cloud-native performance, automated key rotation, and advanced access-policy enforcement. All secrets are encrypted end-to-end, ensuring they remain protected both in transit and at rest.
Highlights
End-to-end encrypted, open-source secrets management platform that gives organizations full control through a self-hosted deployment model.
Designed for developers and DevOps teams with seamless integration into CI/CD workflows, infrastructure automation tools, and application runtimes.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Annual subscription enterprise license for the self-hosted version of Phase. Grants access to paid features for a 12-month term. License key is delivered by the seller after purchase.
You buy one option: an Enterprise License as an annual subscription for the self-hosted version of Phase. Pricing is a 12-month contract, so you commit for a full year at a time. This license unlocks the paid features of the self-hosted deployment, which you run on your own infrastructure. After purchase, the seller delivers a license key to activate those features. There are no separate usage-based charges or tiered add-ons in this listing—access is granted for the term through the single license.
Top-of-mind questions for buyers
What does the Enterprise License let me run, and what infrastructure do I supply?
The license unlocks paid features on the self-hosted version, which you run on your own machines. You provide the container runtime, a TLS certificate, and a database. You also handle backups, updates, firewall protection, and rate limiting. The seller delivers a license key after purchase to activate the paid features.
Does my cost change as I add more users or applications during the term?
No. This listing bills as a single annual license, not per user or per application. You pay one flat fee for the 12-month term regardless of how many users, service accounts, apps, or environments you run. Cost does not scale with usage during the committed year.
What paid features does this license unlock that the free self-hosted version lacks?
The license unlocks capabilities such as custom roles, network access policies, point-in-time recovery, automated secret rotation, and audit logging. It also enables dynamic secrets, which generate short-lived credentials leased on demand. You configure and manage all of these within the self-hosted console you operate.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Accelerate your migration to AWS with Loka's expert guidance through the Migration Acceleration Program (MAP) Assess Phase - 75%-100% funded by AWS. As an AWS Advanced Tier Partner, Loka conducts in-depth discovery and analysis to outline potential costs, optimal migration strategies, and the most effective AWS tools for an efficient transition to AWS Cloud. Our approach culminates in a comprehensive business and technical case, equipping technical leaders to make informed decisions on cloud migration and modernization.
Rego specializes in delivering world-class, responsive guidance and support for Apptio. Our support model ensures that you have experienced, knowledgeable resources addressing your requests and exceeding your expectations.
Our Apptio Managed Support is driven by our team of senior Apptio consultants, who together have over 100+ years of combined Apptio experience. Not only do we specialize in ApptioOne, we are also expert Technology Business Management (TBM) practitioners who can guide you in best practices.
You will work with the same named resources day-to-day, who will know you, your organizations needs, and your Apptio implementation inside and out. With guaranteed same-day responses, you will form a lasting partnership with dedicated resources you know and trust.
Are you getting the most value from your Apptio investment? Is your current model challenging to maintain, outdated, or over-customized?
If you need to maximize the return on your ApptioOne investment, Rego can help. The Apptio Configuration and Adoption Assessment is a low-cost and low engagement assessment that is performed remotely. We quickly identify configuration issues that impede features or performance.
The assessment is performed by our team of senior Apptio consultants, who together have over 100+ years of combined Apptio experience. Not only do we specialize in ApptioOne, we are also expert Technology Business Management (TBM) practitioners who can guide you in best practices.
Rego specializes in delivering world-class, responsive guidance and support for Apptio. Our support model ensures that you have experienced, knowledgeable resources addressing your requests and exceeding your expectations.
Our Apptio Managed Support is driven by our team of senior Apptio consultants, who together have over 100+ years of combined Apptio experience. Not only do we specialize in ApptioOne, we are also expert Technology Business Management (TBM) practitioners who can guide you in best practices.
You will work with the same named resources day-to-day, who will know you, your organizations needs, and your Apptio implementation inside and out. With guaranteed same-day responses, you will form a lasting partnership with dedicated resources you know and trust.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.