# CyberArk Conjur vs External Secrets Operator

**Leader by Vioscale score:** External Secrets Operator

| Attribute | CyberArk Conjur | External Secrets Operator |
|---|---|---|
| **Vioscale score** | 44.7 (30% (low)) | 55 (42% (low)) |
| activity.commits_last_30d | 6 | 70 |
| adoption.dependent_repos | 0 | 5 |
| adoption.github_stars | 944 | 6,808 |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true,"on_prem":true,"self_hosted":true}` |
| description.long | Centralized secrets management platform for hybrid and multicloud environments that provides enterprise-grade storage, automated rotation, and lifecycle controls for application credentials and machine identities. | External Secrets Operator integrates Kubernetes with third-party secret management services like AWS Secrets Manager, HashiCorp Vault, and others, automatically fetching and injecting secret values into native Kubernetes Secrets. |
| features.capabilities | `{"hosting":"self","tool_type":"store","audit_logging":true,"dynamic_secrets":true,"secret_rotation":true,"open_source_core":true,"kubernetes_native":true,"fine_grained_policy":true}` | `{"hosting":"both","tool_type":"sync_inject","open_source_core":true,"kubernetes_native":true,"fine_grained_policy":true}` |
| integrations.count | - | 8 |
| integrations.list | - | `[{"name":"AWS Secrets Manager"},{"name":"HashiCorp Vault"},{"name":"Google Secrets Manager"},{"name":"Azure Key Vault"},{"name":"IBM Cloud Secrets Manager"},{"name":"Akeyless"},{"name":"CyberArk Secrets Manager"},{"name":"Pulumi ESC"}]` |
| language.primary | Ruby | Go |
| license.spdx | - | Apache-2.0 |
| platform.support | - | `{"cli":true}` |
| pricing | - | `{"type":"open_source","sourceUrl":"https://external-secrets.io/","retrievedAt":"2026-08-14T12:14:24.415Z"}` |
| pricing.free_tier | - | yes |
| pricing.model | commercial | open_source |
| pricing.price_level | - | free |
| pricing.transparent | - | yes |
| release.cadence_days | 49 | 1 |
| release.history | `[{"url":"https://github.com/cyberark/conjur/releases/tag/v1.27.0","date":"2026-06-16T16:00:40Z","type":"stable","version":"v1.27.0"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.24.0","date":"2025-11-20T20:24:03Z","type":"stable","version":"v1.24.0"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.22.3","date":"2025-09-24T21:09:35Z","type":"stable","version":"v1.22.3"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.21.6","date":"2025-09-24T21:08:17Z","type":"stable","version":"v1.21.6"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.22.2","date":"2025-07-23T18:34:26Z","type":"stable","version":"v1.22.2"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.22.1","date":"2025-07-15T18:36:50Z","type":"stable","version":"v1.22.1"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.22.0","date":"2025-04-30T17:07:19Z","type":"stable","version":"v1.22.0"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.21.3","date":"2025-02-19T20:39:44Z","type":"stable","version":"v1.21.3"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.21.2","date":"2024-11-22T15:40:40Z","type":"stable","version":"v1.21.2"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.21.0.1","date":"2024-09-18T15:07:34Z","type":"prerelease","version":"v1.21.0.1"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.21.1","date":"2024-09-18T21:14:23Z","type":"stable","version":"v1.21.1"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.20.1-4405","date":"2023-08-17T19:56:23Z","type":"prerelease","version":"v1.20.1-4405"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.20.0","date":"2023-08-04T21:07:07Z","type":"stable","version":"v1.20.0"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.19.6-4066","date":"2023-07-06T17:35:00Z","type":"prerelease","version":"v1.19.6-4066"},{"url":"https://github.com/cyberark/conjur/releases/tag/v0.0.5-13","date":"2023-07-18T12:47:35Z","type":"prerelease","version":"v0.0.5-13"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.19.3.1-6","date":"2023-07-13T23:25:29Z","type":"prerelease","version":"v1.19.3.1-6"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.19.5","date":"2023-05-17T19:48:54Z","type":"stable","version":"v1.19.5"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.19.3","date":"2023-01-26T20:38:30Z","type":"stable","version":"v1.19.3"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.19.2","date":"2023-01-18T15:57:47Z","type":"stable","version":"v1.19.2"},{"url":"https://github.com/cyberark/conjur/releases/tag/v1.19.1","date":"2022-12-08T16:24:04Z","type":"stable","version":"v1.19.1"}]` | `[{"url":"https://github.com/external-secrets/external-secrets/releases/tag/helm-chart-2.9.0","date":"2026-08-08T12:43:21Z","type":"stable","version":"helm-chart-2.9.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/v2.9.0","date":"2026-08-07T16:37:22Z","type":"stable","version":"v2.9.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/helm-chart-2.8.0","date":"2026-07-18T16:52:08Z","type":"stable","version":"helm-chart-2.8.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/v2.8.0","date":"2026-07-18T05:36:33Z","type":"stable","version":"v2.8.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/v2.7.0","date":"2026-06-26T12:05:27Z","type":"stable","version":"v2.7.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/helm-chart-2.7.0","date":"2026-06-26T13:35:17Z","type":"stable","version":"helm-chart-2.7.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/helm-chart-2.6.0","date":"2026-06-07T06:20:46Z","type":"stable","version":"helm-chart-2.6.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/v2.6.0","date":"2026-06-05T17:56:12Z","type":"stable","version":"v2.6.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/v2.5.0","date":"2026-05-15T12:27:05Z","type":"stable","version":"v2.5.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/helm-chart-2.5.0","date":"2026-05-15T13:06:51Z","type":"stable","version":"helm-chart-2.5.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/v2.4.1","date":"2026-04-28T10:26:32Z","type":"stable","version":"v2.4.1"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/helm-chart-2.4.1","date":"2026-04-28T11:07:11Z","type":"stable","version":"helm-chart-2.4.1"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/v2.4.0","date":"2026-04-24T15:15:37Z","type":"stable","version":"v2.4.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/helm-chart-2.4.0","date":"2026-04-24T18:43:56Z","type":"stable","version":"helm-chart-2.4.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/v2.3.0","date":"2026-04-10T12:31:07Z","type":"stable","version":"v2.3.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/helm-chart-2.3.0","date":"2026-04-10T14:45:52Z","type":"stable","version":"helm-chart-2.3.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/v2.2.0","date":"2026-03-20T13:59:17Z","type":"stable","version":"v2.2.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/helm-chart-2.2.0","date":"2026-03-20T16:41:33Z","type":"stable","version":"helm-chart-2.2.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/helm-chart-2.1.0","date":"2026-03-07T17:36:39Z","type":"stable","version":"helm-chart-2.1.0"},{"url":"https://github.com/external-secrets/external-secrets/releases/tag/v2.1.0","date":"2026-03-06T17:43:29Z","type":"stable","version":"v2.1.0"}]` |
| reliability.status_page | yes | - |
| security.disclosure_policy | yes | - |
| security.scorecard | 4.4 | 8.2 |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fcyberark%2Fconjur&per_page=100","last_12m":0,"max_severity":null}` | `{"count":5,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fexternal-secrets%2Fexternal-secrets&per_page=100","last_12m":3,"max_severity":"CRITICAL"}` |

## Capabilities (Secrets Management Tools)

| Capability | CyberArk Conjur | External Secrets Operator |
|---|:--:|:--:|
| **Core** |  |  |
| Tool type | Secret store / engine | Sync / injection |
| Dynamic (short-lived) secrets | ✓ | - |
| **Deployment** |  |  |
| Hosting | Self-hosted only | Cloud + self-hosted |
| **Lifecycle** |  |  |
| Automatic secret rotation | ✓ | - |
| **Crypto** |  |  |
| Encryption as a service (transit) | - | - |
| **Compliance** |  |  |
| FIPS 140-2/3 validated crypto | - | - |
| HSM support | - | - |
| **Access** |  |  |
| Fine-grained / identity-based policy | ✓ | ✓ |
| **Governance** |  |  |
| Audit logging | ✓ | - |
| **Integration** |  |  |
| Kubernetes native (CRD / CSI / K8s auth) | ✓ | ✓ |
| **Scope** |  |  |
| PKI / certificate authority | - | - |
| **Licensing** |  |  |
| Open-source core | ✓ | ✓ |
| **Ecosystem** |  |  |
| CNCF maturity | - | - |

*Source: Vioscale. Generated 2026-09-01T17:10:26.528Z. "-" = undocumented, not absent.*