Excellent choice for you business Secrets Management Solution
We leverage HashiCorp Vault capabilities for storing and managing our secrets and company passwords. HashiCorp Vault integrates with …
Starting at $0.03
View Pricing Overview
What is HashiCorp Vault?
HashiCorp offers Vault, an encryption tool of use in the management of secrets including credentials, passwords and other secrets, providing access control, audit trail, and support for multiple authentication methods. It is available open source, or under an enterprise license.
Recent Reviews
Reviewer Pros & Cons
Pricing
Cloud - HCP Vault
$0.03/hr
Cloud
Open Source
Free
Cloud
Enterprise
Contact sales team
Cloud
Entry-level set up fee?
- No setup fee
For the latest information on pricing, visithttps://www.hashicorp.com/products/vaul…
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Product Details
- About
- Competitors
- Tech Details
- FAQs
What is HashiCorp Vault?
HashiCorp Vault is an identity-based secrets and encryption management system. A secret is anything that one wants to tightly control access to, such as API encryption keys, passwords, and certificates.
Vault provides encryption services that are gated by authentication and authorization methods. Using Vault’s UI, CLI, or HTTP API, access to secrets and other sensitive data can be securely stored and managed, tightly controlled (restricted), and auditable.
Vault provides encryption services that are gated by authentication and authorization methods. Using Vault’s UI, CLI, or HTTP API, access to secrets and other sensitive data can be securely stored and managed, tightly controlled (restricted), and auditable.
HashiCorp Vault Features
- Supported: Secrets Management
- Supported: Database Credential Rotation
- Supported: Advanced Data Protection
HashiCorp Vault Screenshots
HashiCorp Vault Competitors
HashiCorp Vault Technical Details
| Deployment Types | Software as a Service (SaaS), Cloud, or Web-Based |
|---|---|
| Operating Systems | Unspecified |
| Mobile Application | No |
Frequently Asked Questions
HashiCorp offers Vault, an encryption tool of use in the management of secrets including credentials, passwords and other secrets, providing access control, audit trail, and support for multiple authentication methods. It is available open source, or under an enterprise license.
CyberArk Privileged Access Management, ARCON PAM, and Delinea Secret Server are common alternatives for HashiCorp Vault.
Reviewers rate Support Rating highest, with a score of 6.3.
The most common users of HashiCorp Vault are from Enterprises (1,001+ employees).
Comparisons
Compare with
Reviews and Ratings
(21)
Community Insights
TrustRadius Insights are summaries of user sentiment data from TrustRadius reviews and, when necessary, 3rd-party data sources. Have feedback on this content? Let us know!
- Recommendations
Users have made a few common recommendations based on their experiences with Vault.
Firstly, they recommend defining roles and policies at the beginning of the setup process. This helps save time and ensures cost-effectiveness by clearly establishing access levels and permissions.
Secondly, users advise investing time in careful planning before going into production with Vault. This includes defining paths, naming conventions, and policies to streamline the implementation process and prevent potential issues.
Lastly, users emphasize the importance of exploring learning resources such as documentation, user groups, and other knowledge-sharing platforms. These resources offer valuable insights into best practices, troubleshooting tips, and real-world use cases.
Overall, users believe that while Vault is a comprehensive and powerful tool, it may require some initial effort in terms of setup and planning. They also mention that additional user features could further improve its competitiveness. However, users encourage others to research and evaluate Vault for its affordability and data security benefits, as they believe it won't disappoint.
Attribute Ratings
Reviews
(1-6 of 6)Companies can't remove reviews or game the system. Here's why
Score 8 out of 10
Vetted Review
Verified User
We leverage HashiCorp Vault capabilities for storing and managing our secrets and company passwords. HashiCorp Vault integrates with applications and tools to enable transparent secure sensitive information retrieval programmatically. By leveraging HashiCorp Vault we can go with IAC/CAC on almost everything we build. HashiCorp Vault also makes it easy to share secrets between team members and the organization.
- Store secrets
- Store configurations
- Integrate with kubernetes
- Audit log of changes
- Team secret sharing
- Real time in transit encryption
- Session Management is terrible to manage
- Monitoring is hard and not enough information
- User management
- Configuration is too complex
- More user friendly UI
August 11, 2022
HashiCorp Vault - Credentials, passwords, and any kind of secrets in your environment reliably managed.
We are centralizing several config data of our application into a Vault cluster spread into different regions through AWS. It is a solution which was implemented by the DevOps team initially to support the DevOps environment, going later to all production environments. What we used to handle with config files before is maintained by HashiCorp Vault.
- A great repository for credentials and secrets.
- Good scalability with its own clustering solution and high availability.
- Easy to install like other Hashicorp products, it is based on just one executable.
- Documentation could be better.
- The multiple key unseal process can be a problem if the need arises.
- It would make more sense if HashiCorp Vault combined with HashiCorp Consul to create a unique product.
January 20, 2021
HashiCorp Vault for the win!
It is used to manage secrets, credentials and other sensitive data among the company and our clients. It's a centralized secret management solution which mitigates security breaches and improves code development
- Credentials generation
- Secret management
- Preventing secret sprawling
- UI can improve
September 18, 2019
Vault is a flexible and safe secrets managment solution.
We use Hashicorp Vault to protect secrets used by our application teams such as database connection strings, passwords that run jobs, and meta-data about the environment around the application. This tool helps us ensure that our accounts are secure, passwords are private and our data can't be accessed by anyone that shouldn't have access to the system.
- The HTTP API you use to write and read secrets is open and can be used by any application.
- It keeps our sensitive data/credentials out of our Gitlab repositories.
- Sealing and unsealing the Vault on demand adds an additional layer of security.
- Vault requires a complex setup when getting started.
- Vault requires decisions around the backend type to be made up front.
- Vault tokens appear to be managed manually in most cases.
August 11, 2019
Keeping Your Secrets a Secret with HashiCorp Vault
HashiCorp Vault is our go-to for secrets management in our cloud implementation. Having used many other HashiCorp products, it was easy enough for us to translate that into the use of Vault. We also use it in a limited capacity with Chef, used in conjunction with encrypted data bags. HashiCorp Vault has allowed us to securely use secrets across applications without the need to expose those secrets. It has also made it easier to implement sane key rotation and achieve automation.
- HashiCorp Vault manages secrets extremely well.
- It works well as a cloud-agnostic or multi-cloud solution.
- HashiCorp Vault works extremely well with other HashiCorp products.
- Vault integrates with other systems very well because everything is API driven.
- It doesn't have an interface. This isn't entirely bad because of the purpose it serves, but it does make the barrier to entry a little difficult.
- Unlike many other HashiCorp products, the documentation feels like it leaves some steps out. Step by step documentation lowers the barriers to entry a little bit, and going through even the installation documentation and setup leaves a little bit of the caveats out.
- It needs a fair bit of supporting infrastructure. You cannot just have a Vault instance. Having a HashiCorp Vault instance means also having a consul cluster for the backend.
January 21, 2019
One of a Kind
We have looked into HashiCorp Vault as a solution to generate, store, and manage secrets in a container-oriented production platform. Currently, our systems rely on Vault to store TLS certificates and credentials to stateful services in our customer-facing applications. We are also using Vault to store application-level credentials for some of our products.
- Automated revocation of credentials via leases
- Provides many plugins for federated authorization through different platforms
- Dynamic credential generation
- Documentation for the API moves slower than changes in the API itself
- The database secret engine's API design isn't as elegant as it could be
- No support for revocation of all secrets under one path