Secrets management · Comparison
Doppler vs Google Secret Manager
2 products compared side by side: what you pay for with each one first, then the five access facts, entry prices, recorded plan limits and the bottom line of each review. The evidence note under the table says how each product was checked.
Side by side
| Metric | Doppler | Google Secret Manager |
|---|---|---|
| What you're paying for | Saves engineering timeOne place to store, sync and rotate app secrets across environments, billed per engineer with machine identities free. | Worth the priceA pay-per-use secret store inside Google Cloud with a permanent free tier, IAM per secret and Google Cloud’s compliance coverage. |
| Overall score | 7.3 | 8.5Best |
| Free option | Free plan | Free plan |
| Card to start | No card needed | –Not measured |
| Getting access | Self-serve | Self-serve |
| Starter priceCheapest paid plan | $21/user/mo | $0.06/secret version/mo |
| Pricing model | Per seat | Usage-based |
| Pricing page | Public prices | Public prices |
| Billing unit | Per human user per month; no secret, API or usage fees | Per active secret version per location and per 10,000 access operations |
| Free option | Developer: 3 users free, $8 per additional user up to 25; 14-day Team trial, no card | Permanent free tier: 6 versions, 10,000 accesses, 3 rotation notifications a month |
| Reference scenario (monthly) | $210 on Team (10 × $21), computed | $14.61 (194 × $0.06 + 99 × $0.03), computed |
| Machine identities | Free; service accounts from Team | Service accounts and IAM principals, not billed |
| Audit log retention | 3 days on Developer, 90 days on Team, custom on Enterprise | Secret reads: 30 days once Data Access logs are on; admin activity 400 days |
| Dynamic secrets | Enterprise (AWS IAM, Azure Service Principal) | Not offered |
| Database rotation | Team for GCP Cloud SQL via API; proxied AWS databases on Enterprise | Managed Cloud SQL rotation in Preview (regional secrets); Pub/Sub notifications otherwise |
| Kubernetes | Doppler Kubernetes Operator and External Secrets provider, all plans | Secret Manager add-on for GKE (CSI driver), sync to Kubernetes Secrets |
| SAML SSO / SCIM | SAML on Team; SCIM on Enterprise | Through Cloud Identity Free; Entra ID provisioning guide |
| SOC 2 / ISO 27001 | SOC 2 Type II; ISO 27001 | SOC 1, 2, 3; ISO 27001, 27017, 27018 |
| HIPAA BAA | Not described | Covered by the Google Cloud BAA, every account |
| EU data storage | No EU region; GCP us-central1 | Regional secrets or user-managed replication in EU locations |
| Self-hosting | Doppler On-prem, Enterprise only | Not offered |
| Secret export | CLI and API download as JSON, .env or YAML | One version at a time |
| Bottom line | From its public pages, Doppler is a simple seat-priced secrets platform: machine identities are free, and Team at $21 a user adds SSO, rotation and 90-day logs. Dynamic secrets, SCIM, SIEM forwarding and customer-managed keys need Enterprise, and the cloud runs in the US only. | From its public pages, Google Secret Manager is the lowest-cost option here, at $14.61 a month for our scenario, with a permanent free tier and Google Cloud’s compliance coverage. Rotation is mostly yours to build, and there are no dynamic secrets or push syncs. |
Evidence: Doppler: facts checked 2026-10-16 from its public sign-up and pricing pages, no completed hands-on run; Google Secret Manager: facts checked 2026-10-16 from its public sign-up and pricing pages, no completed hands-on run. Prices in USD as listed, excluding tax. "–" means not recorded.
When to pick each
In the words of each review, with the date its facts were checked.
From our Google Secret Manager review
Checked Oct 16, 2026- Pick Google Secret Manager when
- You want per-use pricing with no seat fees and Google Cloud’s compliance coverage.
- Pick Doppler when
- You want push syncs to CI and hosting platforms and one UI for environments across clouds.
Entry price
Baseline: each product's cheapest paid plan, per month. Included usage differs, so read the line under each price.
- DopplerTeam$21/user/moBilled per seat per month, prorated; 14-day trial, no card; machine identities free
- SAML SSO and role-based access per project and environment
- Automatic secret rotation and 100 config syncs
- 90 days of activity logs
- Add-ons at $9/seat/mo: custom roles, user groups, 500 syncs
- Google Secret ManagerPay as you go$0.06/version/moPer active version per location; $0.03 per 10,000 access operations; $0.05 per rotation notification
- Management operations free; destroyed versions free
- Automatic replication billed as one location
- CMEK through Cloud KMS
- Custom quote on request
Prices as listed on each pricing page, in USD per month, excluding tax. Observed: Doppler 2026-10-16, Google Secret Manager 2026-10-16.
Which one fits
- If you need to start today without a sales call
- Google Secret ManagerSelf-serve sign-up; the highest score of the 2 self-serve products here (8.5/10).
- If you want to try it without entering a card
- DopplerFree plan, no card needed; scored 7.3/10.
- Lowest starter price
- Google Secret Manager$0.06/secret version/mo for the Pay as you go (plus $0.03 per 10,000 access operations) plan.
- Highest overall score
- Google Secret Manager8.5/10 (Excellent). The review shows the score breakdown and the run behind it.
Picked by fixed rules from the table above, not by hand. How we score
Full reviews
More in Secrets management
Add a product
Search by product name or by what it does, such as “email” or “feature flags”. 2 more fit in this comparison.