Doppler Review

Doppler is a hosted secrets manager built around the developer workflow: you keep secrets in projects and environments, pull them into a local shell with its CLI, and sync them out to Vercel, AWS, GitHub Actions and other targets.

Its pricing message is the selling point: per-seat fees for humans, nothing for the apps, pipelines and AI agents that read secrets.

That split matters more in 2026 than it used to. Every CI job, preview deployment and coding agent now needs credentials, and secrets managers that bill per identity or per secret turn that growth into a bigger invoice. Doppler's model keeps the bill flat as machines multiply, and pushes the cost onto headcount instead.

Toolradar data: Toolradar, the software directory we run, tracks 868 security tools as of October 20, 2026, and 45% of them are free, freemium or open source, according to its security software ranking.

On the Doppler page, Toolradar data for October 2026 places Doppler #15 (joint) by rating among the 308 security tools with 20 or more reviews.

How we compared: every price was read on the vendor's own page on October 21, 2026: Doppler pricing, Infisical pricing, Bitwarden Secrets Manager, AWS Secrets Manager pricing and HashiCorp pricing for HCP Vault Dedicated.

Costs below are our arithmetic on those list prices; we did not run workloads on any of them.

Doppler is a secrets management platform delivered as SaaS, with an on-prem option for Enterprise customers. Secrets live in projects, each project holds environments such as development, staging and production, and each environment holds configs.

Developers use the Doppler CLI to inject a config into a local process, so nobody copies a .env file over Slack. Applications and pipelines authenticate with service tokens or, on Team and above, service accounts, and integrations push configs into the platforms where code runs.

The 2026 pitch leans on AI agents. Doppler's pricing page lists an official MCP server on its plans and says agents and non-human identities ride free, which is aimed at teams wiring coding agents into repositories that need real credentials.

If you are still choosing where those workloads run, the dev tools for startups guide covers the wider stack Doppler plugs into.

You create a workplace, add projects, and pick a plan. The Developer plan is generous on features and tight on scale: up to 25 users, 10 projects, 4 environments, 50 service tokens, 5 config syncs and 3 days of activity logs.

Team lifts those ceilings to 500 users, 250 projects, 15 environments, 500 service tokens and 100 config syncs, keeps 90 days of activity logs, and adds the controls a security review asks about: SAML SSO, role-based access, change requests, automatic secret rotation, trusted IPs and service accounts.

Billing is monthly and prorated. Doppler's FAQ says it charges per seat per month and that moving from Developer to Team mid-month bills only the time on the paid plan. It does not ask for a card at signup; the Team trial lasts 14 days, and you can cancel or downgrade at any time.

A user is anyone with their own login in your workplace, and all users are billed at the same plan rate. With no base, licensing or usage fees on top, a Team budget is a single multiplication: people with logins times the per-user price.

Doppler publishes every price except Enterprise on its pricing page, read on October 21, 2026. The model is human seats only, so the bill tracks headcount, not secrets, API calls or connected apps.

Small teams pay little or nothing. On Developer, a 5-person team pays for 2 extra users, $16 a month, and a 10-person team pays $56 a month for 7 extra users, our arithmetic on the per-user price. That plan has no SSO, no role-based access and only 3 days of logs, so most companies outgrow it on controls before they outgrow it on seats.

Team is where the real cost starts. Ten users on Team cost $210 a month, or $2,520 over 12 monthly bills. Adding custom roles and user groups for those 10 seats adds $180 a month, which takes the total to $390. Nonprofits, students and educators can ask for a 33% discount on Team.

The rivals price on a different unit. Infisical bills each identity, human or machine, so 10 developers plus 15 machine identities on Pro come to $575 a month on monthly billing, or $500 a month billed annually.

Bitwarden Secrets Manager Teams is $6 per user a month on an annual subscription, with 20 machine accounts included.

AWS Secrets Manager bills $0.40 per secret a month plus $0.05 per 10,000 API calls, so 200 secrets are $80 a month before calls.

HCP Vault Dedicated Essentials starts at $1.58 per cluster hour plus $73 a month per Vault client, which is about $1,153 a month for one cluster before clients at a 730-hour month, on HashiCorp's pricing page.

Doppler fits a team of roughly 5 to 50 engineers that deploys to several platforms and wants one source of truth for configuration. The CLI fixes local development, the syncs fix drift between Vercel, a container host and CI, and the bill does not move when you add pipelines or agents.

It is the strongest fit when machine identities outnumber people. A team with 10 developers and dozens of services, preview environments and CI runners pays the same Team bill whether there are 15 machines or 150, which is where per-identity pricing elsewhere gets expensive.

Skip Doppler if most of your users only read secrets, because every login pays the Team rate. Skip it too if you are all-in on AWS with a modest secret count, where the native per-secret pricing can cost less, or if compliance requires self-hosting without an Enterprise contract.

Teams standardizing their delivery pipeline should read the CI/CD tools ranking and the CI/CD pricing comparison, since CI runners are a common consumer of service tokens.

Infrastructure-as-code shops can pair it with the picks in Terraform and IaC tools, and cluster operators with Kubernetes tools.

Devshot data: this newsletter goes to 28,000+ developers, and the audience file updated October 18, 2026 shows a 32% average open rate. Subscribe free to get the next pricing change in your inbox.