Vibr8Vault

Free plan APILinuxMacSelf-hostedWebWindows

What Vibr8Vault is

Vibr8Vault is a self-hosted secrets manager delivered as one MIT-licensed binary. It provides REST and gRPC APIs, a command-line tool, and a built-in web interface. Secrets use AES-256-GCM with individual keys, while Shamir's Secret Sharing protects the master key. Listed controls include TLS 1.3, HMAC-SHA256 token hashes, and policy-based access rules with glob matching. Access to secrets, token operations, and administrative actions is logged with timestamps, actors, paths, and results. Raft clustering supports multiple nodes, automatic leader election, and consistent reads. Official TypeScript and Python SDKs connect applications and scripts. A read-only Claude Code skill offers logged, path-scoped access. The optional Next.js interface can browse secrets, manage tokens, configure policies, and inspect audit logs. Vibr8Vault supports Linux, macOS, Windows, web, API, and self-hosted use, including CI/CD injection. It is free and open source, but remains in beta. Development mode keeps ephemeral data in memory.

Who it suits

It suits teams managing secrets for AI coding assistants, automated deployments, agentic pipelines, or CI/CD. Self-hosting users who need APIs, audit logs, and clustered operation may find the model appropriate.

What it does well

Free and open source under MIT License
REST, gRPC, CLI, and web interfaces
Per-secret encryption keys
Raft multi-node clustering
Audit logs include actor, path, and result

What to know first

Project is still in beta
Development mode uses ephemeral in-memory data
macOS binary may be quarantined
Self-hosted deployment required

Verdict

Vibr8Vault offers a broad self-hosted interface and security feature set for secret management. Its beta status and macOS signing caveat deserve attention before deployment.

Facts from Vibr8Vault's own pages

AI integration: The included Claude Code skill fetches secrets using natural language and is read-only with full audit logging. · vault.vibr8lab.work, 11 Oct 2026
Audit: Secret access, token operations, and admin actions are logged with a timestamp, actor, path, and result. · vault.vibr8lab.work, 11 Oct 2026
Availability: It supports Raft-based clustering across multiple nodes with automatic leader election and consistent reads. · vault.vibr8lab.work, 11 Oct 2026
Development mode: Dev mode uses in-memory storage and all data is ephemeral, which the site describes as suitable for testing and local development. · vault.vibr8lab.work, 11 Oct 2026
Development status: The About page says the project is in beta and is being developed and stabilized for production workloads. · vault.vibr8lab.work, 5 Oct 2026
Download caveat: The download page says the macOS binary is not signed with an Apple Developer certificate and may be quarantined by macOS. · vault.vibr8lab.work, 5 Oct 2026
Encryption: The site lists AES-256-GCM encryption with per-secret keys and Shamir's Secret Sharing for master-key protection. · vault.vibr8lab.work, 11 Oct 2026
Interfaces: It supports REST and gRPC APIs, a CLI, and a built-in web UI. · vault.vibr8lab.work, 11 Oct 2026
Maker: The About page identifies Vibr8Soft.com as the company behind Vibr8Vault; it does not state headquarters or founding date. · vault.vibr8lab.work, 11 Oct 2026
Platform caveat: The download page says the macOS binary is not signed with an Apple Developer certificate and may be quarantined by macOS. · vault.vibr8lab.work, 11 Oct 2026
Platforms: The product page says it works on Linux, macOS, and Windows. · vault.vibr8lab.work, 5 Oct 2026
Product: Vibr8Vault is a self-hosted secrets manager distributed as a single binary under the MIT License. · vault.vibr8lab.work, 11 Oct 2026
SDKs: Official TypeScript and Python SDKs are available for integrating applications with the vault. · vault.vibr8lab.work, 11 Oct 2026
Security: The security table lists TLS 1.3, HMAC-SHA256 token hashes, and policy-based access control with glob matching. · vault.vibr8lab.work, 11 Oct 2026
Status: The project is in beta and is being developed and stabilized for production workloads. · vault.vibr8lab.work, 11 Oct 2026
Target users: The site describes use for AI coding assistants, agentic pipelines, automated deployments, and CI/CD secret injection. · vault.vibr8lab.work, 11 Oct 2026
Web UI add-on: The Next.js web UI can browse secrets, manage tokens, configure policies, and review audit logs. · vault.vibr8lab.work, 11 Oct 2026

Where Vibr8Vault stands on Freedom251

Secrets Management Tools#24 of 46