HashiCorp Vault
Manage secrets and protect sensitive data with identity-based access across any infrastructure.
HashiCorp Vault is the industry standard for secrets management. It provides secure storage, dynamic secrets generation, data encryption, identity-based access, and audit logging. Features: KV secrets engine, PKI/TLS automation, database credential rotation, Kubernetes auth method, and dynamic AWS/Azure/GCP credentials. Vault is critical infrastructure — plan for operational overhead.
- Best for: Secrets Management
- Pricing: Free and open-source (MPL 2.0), HCP Vault from $1.58/hr (~$1,150/mo), Enterprise custom
Disclosure: We may earn a commission if you click this link and make a purchase, at no additional cost to you.
Visit HashiCorp VaultHashiCorp Vault Hub
Explore HashiCorp Vault
Compare HashiCorp Vault With
Features
Audit Logging
Track all secret access and changes
Comprehensive audit backend
CI/CD Integration
Native integration with CI/CD pipelines
Vault Agent, Terraform provider, API
Dynamic Secrets
Generate short-lived credentials on demand
Dynamic secrets for AWS, GCP, Azure, databases, PKI
Encryption at Rest
Secrets encrypted in storage
AES-256-GCM encryption at rest
End-to-End Encryption
Client-side encryption before storage
Transit engine for application-level encryption
Kubernetes Integration
Native K8s secret injection
Kubernetes auth method, injector sidecar
Multi-Cloud Sync
Sync secrets across cloud providers
Multi-datacenter, multi-cloud replication
RBAC
Role-based access control for secrets
ACL, namespaces, OIDC/LDAP auth
Secret Rotation
Automatic credential rotation on schedule
Secret rotation via secrets engines
Self-Hosted Option
Run on your own infrastructure
Self-hosted or HCP managed
Best For
Find the right DevOps tools for your specific needs. HashiCorp Vault is featured in these buying guides: