Security
Secrets Store review
Score: 6/10Centralized secrets with minimal features, but better than duplication.
The breakdown explains the score. It is not an average. How to read these.
Last updated
Secrets Store gives you account-level secrets that multiple Workers can bind to, replacing the old pattern of duplicating the same API key across every Worker’s environment variables and inevitably forgetting one during rotation.
Having one place to update a credential is enough reason to adopt it. Scoped bindings control which Workers can read each secret, and the permissions fit sensibly into the dashboard’s existing RBAC.
It lacks the features of a mature secrets manager: automatic rotation, rollbackable versions, detailed audit trails, and integrations outside Workers. The name is accurate. This is a secrets store, not a secrets manager. Use it instead of duplicating environment variables, but do not expect Vault.
Status page incidents
Cloudflare publishes no status page component for Secrets Store.
Its incidents, if any were published, went out under a broader component. There is nothing to count per product here.