On-Premises Secrets Manager Offers Compliance Path for Restricted Networks

Keyorix is an open-source credentials management system designed for organizations unable to use cloud-based services, particularly air-gapped networks and European companies subject to NIS2 and DORA regulations. The tool encrypts all stored secrets with AES-256-GCM and provides role-based access controls, audit logging, and integrations with popular programming languages through a single-binary deployment model. Teams can import existing configurations from other systems and run the complete solution using Docker Compose without external internet connectivity.

Keyorix addresses a specific market gap for organizations operating under strict data residency and regulatory constraints. The tool distinguishes itself through a minimalist design philosophy—deployable as a single executable file without requiring internet access or specialized infrastructure—making it particularly suitable for isolated computing environments where cloud connectivity is restricted or prohibited.

The system implements defense-in-depth principles through layered encryption and access controls. Secrets remain protected via AES-256-GCM encryption, with administrative passphrases never stored persistently. Organizations can choose between lightweight SQLite databases for smaller teams or PostgreSQL for enterprise deployments, while comprehensive audit trails document all credential access across multiple layers of logging.