Secure property store for cloud applications

Alternative Solutions

Alternative Solutions

Cerberus was developed because we did not find another solution that met all our needs at the time.

Here are some other options you may want to consider:

AWS Secrets Manager

AWS Secrets Manager came out after Cerberus and is the official solution for secrets management with in AWS and should seriously be considered over Cerberus.

HashiCorp Vault with Consul backend

Vault is a popular open source secrets management tool created by HashiCorp. There is also an enterprise version that includes a UI and other additional features.

CyberArk Password Vault and AIM

CyberArk is a company that owns and licenses enterprise security solutions such as the Privileged Account Security Solution.


Confidant is open source solution developed by Lyft that provides user-friendly storage and access to secrets in a secure way. Uses KMS, IAM authentication, and Google OAuth.


Credstash is an easy to use credential management and distribution system that uses AWS Key Management Service (KMS) and DynamoDB.

AWS Parameter Store

Parameter Store is a feature of Amazon EC2 Systems Manager that was released about the same time as Cerberus.

S3 with Server Side Encryption

Some people simply store credentials in S3 with SSE which can be a viable option with the right policies in place.