Cloud · head to head
Qovery vs Vault

Qovery
Cloud
Deployment platform that provisions and operates Kubernetes inside your own cloud account
- From
- On request
- Rated
- -
The short version
- Only Vault has a free tier, so it costs nothing to try first.
- Each has a real cost: Qovery no plan publishes a price, deployment minute overage rates are not disclosed, and there is a 14 day trial rather than a free tier, so you cannot budget or compare against alternatives without going through sales.; Vault vault 1.15.0 and later is licensed under the Business Source License 1.1, not an OSI open source licence, with IBM Corporation as licensor
- They diverge on capability: Qovery covers Bring your own cloud, Vault covers Secrets management.
- Prices and features above were last checked on 31 August 2026.
Where they differ
Only the attributes on which Qovery and Vault actually diverge.
Identical on both: user rating (Not yet rated), category (Cloud).
What each one covers
Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.
Only in Qovery
- Bring your own cloud
- Preview environments
- Cluster lifecycle
- Terraform provider
- MCP server
- Policy as code
Only in Vault
- Secrets management
- Encryption
- Authentication
- Authorization
- Audit logging
- API access
- High availability
- Replication
What people use each for
The jobs each tool is most often brought in to do.
Qovery
- A regulated business that must keep application data inside its own AWS account but has nobody to build a deployment platformnot Vault
- Giving twenty engineers preview environments per pull request without writing and maintaining Terraform and Helm by handnot Vault
- Standardising deployment across AWS and GCP when acquisitions have left the organisation on two cloudsnot Vault
- Replacing a managed platform when data residency rules put every hosted option out of reachnot Vault
Vault
- Centrally storing and rotating secrets, API keys and database credentialsnot Qovery
- Issuing short-lived dynamic credentials to applications instead of static passwordsnot Qovery
- Encryption as a service and PKI certificate issuancenot Qovery
Where each one falls short
Documented limitations, not opinions. Every one is a constraint you would hit in normal use.
Qovery
- No plan publishes a price, deployment minute overage rates are not disclosed, and there is a 14 day trial rather than a free tier, so you cannot budget or compare against alternatives without going through sales.
- The GPL-3.0 engine and console do not constitute a self-hostable product, because the control plane and API are closed and the self-hosted option is gated behind Enterprise, so the open licence gives you no exit if the company changes direction.
- Qovery provisions managed Kubernetes into your account, which means the cloud bill sits on top of the licence and Qovery initiates control plane and ingress controller upgrades on infrastructure your team is accountable for.
- The company repositioned to agentic infrastructure in June 2026 and now ships a deployment platform, a browser development portal and autonomous coding agents concurrently, so a buyer of the deployment product is not at the centre of the roadmap.
- Team and Business are capped at two and three connected clusters with fixed 4 vCPU CI runners and no single sign-on on Team, which pushes teams of moderate size onto quoted Enterprise pricing earlier than the plan names imply.
Vault
- Vault 1.15.0 and later is licensed under the Business Source License 1.1, not an OSI open source licence, with IBM Corporation as licensor
- The Additional Use Grant forbids offering Vault to third parties on a hosted or embedded basis in a paid product that competes with IBM's paid versions of Vault
- Each version only converts to MPL 2.0 four years after that version is published, and the Change Date is tracked per version
- Replication, HSM support, namespaces, performance standby nodes, FIPS builds, control group authorisation, multi-factor authentication, secrets sync and lease count quotas all require a Vault Enterprise licence
- A Vault Enterprise licence must be applied to the cluster before any Enterprise feature can be used
Pricing, plan by plan
Qovery
On request- Team$undefined/year
- Billed on usage with no published rate card
- 10 users, up to 100 environments, 2 connected clusters
- 5,000 deployment minutes and 7 day audit logs
- Business$undefined/year
- Billed on usage with no published rate card
- 20 users, up to 250 environments, 3 connected clusters
- 10,000 deployment minutes and 30 day audit logs
- Enterprise$undefined/year
- Custom users, environments and clusters
- Self-hosted or air-gapped control plane
- On-premises and bring-your-own-Kubernetes
Vault
Free- Open SourceFree
- Secrets management
- Encryption as a service
- Identity management
- EnterpriseFree
- Advanced features
- Premium support
- Dedicated updates
Which should you pick?
Choose Qovery if
- You need bring your own cloud.
- You work on Web, CLI, REST API, Kubernetes.
- You also want preview environments.
Choose Vault if
- You need secrets management.
- You want to start without paying.
- You work on Linux, Windows, Mac, Cloud.
- You also want encryption.
Questions people ask
- Is Qovery or Vault better?
- Neither clearly leads. Qovery starts at On request and Vault at Free, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
- Which is cheaper, Qovery or Vault?
- Vault has a free tier; the other does not. Paid plans start at On request for Qovery and Free for Vault.
- Does Qovery or Vault run on more platforms?
- Qovery runs on Web, CLI, REST API, Kubernetes. Vault runs on Linux, Windows, Mac, Cloud.
- Can I use Vault for free?
- Yes. Vault has a free tier, so you can try it without paying. Qovery starts at On request.
- What is Qovery best used for?
- Qovery is most often used for a regulated business that must keep application data inside its own aws account but has nobody to build a deployment platform, giving twenty engineers preview environments per pull request without writing and maintaining terraform and helm by hand, standardising deployment across aws and gcp when acquisitions have left the organisation on two clouds, replacing a managed platform when data residency rules put every hosted option out of reach. Of those, a regulated business that must keep application data inside its own aws account but has nobody to build a deployment platform and giving twenty engineers preview environments per pull request without writing and maintaining terraform and helm by hand are not what Vault is typically brought in for.
- What can Qovery do that Vault cannot?
- Qovery covers Bring your own cloud, Preview environments, Cluster lifecycle, Terraform provider. Vault covers Secrets management, Encryption, Authentication, Authorization.
Answered from the vendors’ own pages
Qovery: Does Qovery run my applications on its own servers?
No. It provisions and operates Kubernetes inside your AWS, GCP, Azure or Scaleway account, so compute and data stay with your cloud provider and that bill is entirely separate from the Qovery licence.
Vault: Is HashiCorp Vault free to use?
Yes, Vault is available as a free, open-source project. The community version includes secrets management, certificate generation and rotation, encryption services, and credential management. Vault Enterprise is a commercial offering with additional features.
SourceQovery: Can I self-host Qovery?
Only on Enterprise. The deployment engine and console are GPL-3.0, but the control plane is closed source and the self-hosted and air-gapped deployments are commercial Enterprise features.
Vault: What are the differences between open-source Vault and Vault Enterprise?
Open-source Vault is free and self-hosted. Vault Enterprise includes additional features and commercial support. HashiCorp also offers Vault Dedicated on the HashiCorp Cloud Platform as a fully managed cloud option.
SourceQovery: What does it cost?
Qovery does not publish a rate card. Team and Business are billed on usage and quoted through sales, and Enterprise is fully custom. There is a 14 day trial with no card required.
Vault: Can I try HashiCorp Cloud Platform Vault without payment?
Yes, HashiCorp offers a free trial option for HCP Vault Dedicated. New users also receive a $500 credit to use across HashiCorp Cloud Platform services.
SourceQovery: What survives if I stop paying?
The Kubernetes cluster and the workloads keep running in your cloud account, but you lose the console, the deployment pipeline, preview environments and every process built on top of them.
Vault: What does Vault manage and protect?
Vault provides identity-based secrets management for users, machines, services, and AI agents. It automates authentication and authorization for access to secrets, passwords, certificates, encryption keys, and other sensitive data across your infrastructure.
SourceRelated pages
Other head to heads
- Qovery vs Render
- Qovery vs Porter
- Qovery vs Northflank
- Qovery vs CapRover
- Qovery vs Coolify
- Qovery vs Railway
- Qovery vs Dokku
- Qovery vs Scaleway
- Qovery vs Portworx
- Qovery vs Podman
- Qovery vs containerd
- Qovery vs Encore
- Qovery vs Oracle Cloud
- Qovery vs Orca Security
- Qovery vs Packer
- Qovery vs OpenTelemetry
- Qovery vs Rook
- Qovery vs AWS (Amazon Web Services)
- Qovery vs DigitalOcean
- Qovery vs Grafana Cloud
- Qovery vs Neon
- Qovery vs Crossplane
- Qovery vs Microsoft Azure
- Qovery vs Hetzner Cloud
- Qovery vs Linode
- Qovery vs Vultr
- Qovery vs Akamai
- Qovery vs Alibaba Cloud
- Qovery vs Chef
- Qovery vs Buildah
- Vault vs Render
- Vault vs Porter
- Vault vs Northflank
- Vault vs CapRover
- Vault vs Coolify
- Vault vs Railway
- Vault vs Dokku
- Vault vs Scaleway
- Vault vs Portworx
- Vault vs Podman
- Vault vs containerd
- Vault vs Encore
- Vault vs Oracle Cloud
- Vault vs Orca Security
- Vault vs Packer
- Vault vs OpenTelemetry
- Vault vs Rook
- Vault vs AWS (Amazon Web Services)
- Vault vs DigitalOcean
- Vault vs Grafana Cloud
- Vault vs Neon
- Vault vs Crossplane
- Vault vs Microsoft Azure
- Vault vs Hetzner Cloud
- Vault vs Linode
- Vault vs Vultr
- Vault vs Akamai
- Vault vs Alibaba Cloud
- Vault vs Chef
- Vault vs Buildah

