KMSOpen source · GPL-3.0-or-later
GnuPG
Community project
The free, complete implementation of the OpenPGP standard: encrypts files and email and creates and verifies digital signatures, built around a distributed web of individually managed keypairs rather than a centralized key server. A GNU Project maintained by volunteers rather than a company, and the engine underneath many higher-level email encryption tools.
Verified Source: 1
- Product type
- Community project
- Deployment
- CLI
- Organization size
- IndividualSMBMid-marketEnterprise
- Pricing tier
- Free
Capability checklist
KMSHow GnuPG measures up against the full Encryption & Key Management taxonomy.
- Centralized key lifecycle management — not supported
- Creates, distributes, rotates, and retires encryption keys from one system.
- HSM-backed key storage — not supported
- Stores the most sensitive keys in dedicated hardware security modules.
- Encryption enforcement — supported
- Ensures data at rest and in transit is actually encrypted, not just capable of it.
- Automated key rotation — not supported
- Rotates keys on a schedule without requiring manual intervention.
- BYOK / HYOK cloud support — not supported
- Lets customers bring or hold their own keys for data stored in cloud provider services.
- Access audit logging — not supported
- Logs every use of a key for security review and compliance evidence.
Alternatives
Other Encryption & Key Management tools with overlapping capabilities, sized for similar teams.
Appears in stacks
Real-world stacks that include GnuPG.