Passwork Cloud platform: Secrets and credentials management with API-first design

Manage API keys, SSH keys, database credentials, and certificates via REST API, Python SDK, or CI/CD pipeline. Docker and Kubernetes support included. NIS2-ready, ISO 27001 certified, EU hosted.

Trusted by top teams:

Maxon PWC Deutsche Post ArcelorMittal Victoria Police Technical University of Dresden

Why leading enterprises choose Passwork Cloud

  • Made in Europe

    Developed in Europe, with full GDPR and NIS2 compliance and data sovereignty

  • ISO 27001 certified

    Development and infrastructure meet the international benchmark for information security

  • Trusted by public sector

    Chosen by government agencies and highly regulated industries across Europe

  • Enterprise‑grade protection

    Zero-knowledge architecture with client-side encryption keeps your passwords private

  • Independent research shows 30% savings compared to competitors

Every secret type. One platform.
Zero-knowledge client-side encryption for all secrets.

Manage API keys, SSH keys, database credentials, OAuth tokens, certificates, and everything else your infrastructure needs.

  • API keys and OAuth tokens with rotation policies
  • SSH keys and database credentials
  • Certificates with expiration tracking
  • Custom fields for any secret type
  • Audit trail of every access and modification
  • Role-based access control by secret type

API-first design.
REST API and Python SDK for seamless integration into any workflow.

REST API

Full-featured REST API with OAuth 2.0 authentication and service accounts for CI/CD pipelines.

  • List, create, read, update, delete secrets
  • Service accounts with scoped permissions
  • API token management and rotation
  • Request rate limiting and throttling
  • Complete audit logging of API calls
  • JSON response format
  curl -H "Authorization: Bearer YOUR_API_TOKEN" \  https://api.passwork.pro/v1/secrets \  -d '{"name":"db-password","type":"password"}' # Response: { "id": "secret-12345", "name": "db-password", "created": "2026-04-02T10:30:00Z" }  
  from passwork import SecretsClient  client = SecretsClient(api_token="YOUR_API_TOKEN") # Retrieve a secret secret = client.get("db-password") # Update a secret client.update("db-password", value="new-password-123")  

Python SDK

Python interface for easy integration into scripts and applications. Supports async operations.

  • Simple client initialization
  • Full API coverage in Python
  • Async support for high-throughput workloads
  • Built-in retry and timeout handling
  • Context managers for safe credential handling
  • Available on PyPI

CI/CD and containerization

CI/CD pipelines

GitHub Actions, GitLab CI, and Jenkins. Inject secrets at build time without storing them in version control.

Docker support

Official Docker images with sidecar container support for secret injection and environment variable integration.

Kubernetes

Init container patterns for secret injection, native vault sync, and RBAC integration.

ISO 27001
Made in EU
Pentest by
HackerOne
GDPR
compliant
NIS2 ready
PCI DSS

Passwork vs traditional secrets managers

Feature
EU data hosting
REST API
Python SDK
CI/CD integration
Docker/K8s support
Free tier
Zero-knowledge encryption
Vendor independence
Passwork HashiCorp Vault AWS Secrets Manager Azure Key Vault
Yes Self-hosted Optional Optional
Yes Yes Yes Yes
Yes Yes Yes Yes
Yes Yes Yes Yes
Yes Yes Yes Yes
Yes (5 users) Yes No No
Yes (client-side) No (server-side) No (AWS-managed keys) No (Microsoft-managed)
Cloud + Self-hosted Self-hosted AWS locked-in Azure locked-in

Trusted by businesses
worldwide

One password manager. Every device.
Use Passwork anywhere - in your browser, on mobile, or on desktop.

Browser extension

Search, autofill, and create credentials without leaving the browser. Works with Chrome, Firefox, Edge, and Safari.

  • One-click autofill on any login page
  • Search across all vaults from the extension
  • Create and save new credentials instantly
  • Generate strong passwords on the fly
Available for
Browser extension password editing screenshot
Browser extension password generator screenshot
Browser extension password card screenshot
Browser extension settings screenshot

Mobile app

Quick access to your corporate passwords from your mobile device

Available in

2FA mobile app

Convenient login verification using the Passwork authenticator app

Available in

Desktop app

Full password management functionality in a native desktop application

Available for

Choose your plan.
All plans include REST API, Python SDK, and CI/CD integration.

  • Standard

    For growing teams. Shared vaults, SSO, audit logs. Password sharing for teams with 6+ users

    3€
    per month /
    per user
    Start trial
  • Advanced

    Secrets management, CI/CD integration, Python SDK, advanced auditing.

    4,5€
    per month /
    per user
    Start trial

Frequently Asked Questions

API keys, SSH keys, database credentials, TLS certificates, OAuth tokens, environment variables, and passwords. Anything you need to keep secure.

Yes. Passwork includes a REST API and Python SDK for automated secret retrieval. You can integrate with Jenkins, GitLab CI, GitHub Actions, and other CI/CD tools to inject secrets at build or deploy time without hardcoding them in code.

Yes. Passwork stores any type of credential: API keys, SSH keys, database passwords, TLS certificates, tokens, and environment variables. All are encrypted with the same zero-knowledge architecture used for passwords.

Yes. Passwork supports Docker deployment and Kubernetes orchestration. You can run Passwork self-hosted in your own K8s cluster or use the cloud version and pull secrets via the API.

Secrets are encrypted on the client side before they leave your device. Passwork uses a multi-layered key hierarchy: your master password, master key, user RSA key, vault keys, and entry keys. The server stores only encrypted data and cannot decrypt it.

Via OAuth 2.0 or API tokens. Service accounts support scoped access for CI/CD pipelines. Audit logs track every API call with full request details.

Yes. Passwork supports automated rotation policies, secret versioning, and full audit trails - all manageable via the API.

Yes. You can import secrets via CSV, JSON, or the REST API. Passwork also supports bulk operations for migrating large volumes of secrets from existing tools.

See also