Side by side
CRACI vs Google Cloud Secret Manager
Both stand on software supply chain security software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Paid Web
CRACI combines managed Linux CI runners with dependency capture, vulnerability monitoring and policy gates. Its current CI integration is GitHub Actions, and build time is metered even though Pro has no monthly fee.
Visit CRACI Free plan Web
Visit Google Cloud Secret Manager The facts
| CRACI | Google Cloud Secret Manager | |
|---|---|---|
| Free plan | No | Yes |
| Open source | Not published | Not published |
| Runs on | Web | Web |
| Lowest paid plan | Free or on request | See the plans |
| Plans published | 2 | 14 |
| Maker | Not published | Not published |
| Website | craci.com | cloud.google.com |
| On software supply chain security software | #19 of 24 | #15 of 24 |
CRACI: what it does well
- SBOMs include transitive dependencies and licenses
- Exports available in CycloneDX or SPDX
- Policy gates can stop builds in real time
- Linux runners available on x86-64 and ARM64
- Build data is hosted in Europe
What to know first
- GitHub Actions is the only supported CI integration today
- Windows, macOS and on-prem runners are roadmap items
- No report export is available
- Build time is metered at $0.002 /vCPU-minute
Google Cloud Secret Manager: what it does well
Alternatives to CRACI Alternatives to Google Cloud Secret Manager The whole list