Welcome to the External Secrets blog

Running ESO in production? See how our enterprise drop-in replacement delivers stability, SLAs, and advanced features — while continuing to strengthen the open source project.

Our newest contribution to Open Source - External Secrets Reloader allows you to reload a given Kubernetes Object (ExternalSecrets, Deployments, Certificates) based on all sorts of external events!

Secret sprawl is inevitable—External Secrets Enterprise helps you manage it, not fight it, with tools to track duplication, enforce policy, and maintain secure, flexible control across all your secret stores.

Optimize your use of AWS Parameter Store with External Secrets Inc.—using smart config patterns and Just-in-Time Rotation to reduce API calls and instantly reflect changes across your clusters.

Use External Secrets Operator to automatically sync secrets across namespaces—no manual duplication, no stale data, just up-to-date, secure access everywhere you need it.

Instantly sync secrets on change or event—now available for free with no cluster limits, full multi-cloud support, and Terraform-powered setup to get you going fast.

With External Secrets Inc.’s Agent, you can deploy ESO per namespace—automatically and securely—without the headaches of manual Helm installs or complex RBAC setups.

Get started with External Secrets Inc. to deploy and manage ESO with ease—no complex RBAC, automatic updates, and soon: event-driven Async Rotation to simplify secrets management across your infrastructure.

We’re building a long-requested enterprise feature for External Secrets—event-driven, immediate secret sync—so you can update secrets exactly when needed, not just on a schedule.

External Secrets Inc. is live! Backed by Open Core Ventures, we're building the orchestration layer for secrets management—starting with a managed ESO service and aiming to simplify secure infrastructure across every environment.