Softwr
HashiCorp Vault logo

HashiCorp Vault

Manage secrets and protect sensitive data

Overview

What HashiCorp Vault does

HashiCorp Vault is a tool for managing secrets and protecting sensitive data. It provides secure storage, dynamic secrets, encryption as a service, and identity-based access.

What people use it for

  • Secrets management
  • Database credentials
  • API keys
  • SSH access
  • PKI and certificates

The honest half

Where it falls short

Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about HashiCorp Vault.

  • Policies are written in HCL with no graphical user interface for policy management or editing
  • Unsealing requires managing multiple key shares and coordinating a quorum of operators
  • Community Edition lacks enterprise features like namespaces and disaster recovery replication
  • Requires additional monitoring solutions for alerting and observability

Cross-shopped

What people choose instead of HashiCorp Vault

Each pairing was judged by two reviewers asking whether a buyer would genuinely weigh the two against each other. The ones that failed were deleted rather than published.

  • HashiCorp Vault logo
    HashiCorp Vault
    vs
    1Password logo
    1Password

    1Password: Centralized secrets and password manager for teams with encryption at rest and in transit, SSO support, and audit logging for regulatory compliance.

  • HashiCorp Vault logo
    HashiCorp Vault
    vs
    LastPass logo
    LastPass

    LastPass: Enterprise password and secrets manager offering single sign-on, zero-knowledge encryption, and detailed access controls for teams and organizations.

  • HashiCorp Vault logo
    HashiCorp Vault
    vs
    Bitwarden logo
    Bitwarden

    Bitwarden: Open-source password manager with self-hosting option, zero-knowledge architecture, and API-driven secrets management suitable for security-conscious teams.

Pricing

What HashiCorp Vault costs

Taken from the vendor's own pricing page. Prices move, so check before you buy.

Open Source

Free

  • Secrets management
  • Encryption
  • Community support
  • Self-hosted

Vault Enterprise

$6,000 /yr

  • Replication
  • HSM support
  • Advanced audit
  • 24/7 support

Capabilities

Features

  • Secret storage

    Secret storage capability

  • Dynamic secrets

    Dynamic secrets capability

  • Encryption as a service

    Encryption as a service capability

  • Identity-based access

    Identity-based access capability

  • Audit logging

    Audit logging capability

  • Leasing and renewal

    Leasing and renewal capability

  • Secret engines

    Secret engines capability

  • Auth methods

    Auth methods capability

  • Terraform

    Integration with Terraform

  • Kubernetes

    Integration with Kubernetes

  • AWS

    Integration with AWS

  • Azure

    Integration with Azure

Answered, with sources

Questions people ask

Each answer names the page it came from, so you can check it rather than take our word for it.

Does HashiCorp Vault have a free version?

Yes. The open-source Community Edition is completely free and includes core secrets management, dynamic secrets, and encryption as a service. It is self-hosted with no licensing fees or secret count limits, but lacks enterprise features like namespaces, disaster recovery replication, and Sentinel policies.

Source
Can I use HashiCorp Vault in production?

The Community Edition is suitable for non-production environments and small teams. For production deployments, organizations typically use HCP Vault Dedicated (managed cloud service starting at approximately 22 USD per month) or Vault Enterprise with custom pricing that includes disaster recovery, performance replication, and 24/7 support.

Source
What are the main integrations available?

Vault integrates with AWS, Azure, Google Cloud, Active Directory, Okta, and 80+ other platforms. It supports dynamic credential generation for cloud providers, database systems, and identity services, enabling centralized secret management across multi-cloud infrastructure.

Source
Does Vault work offline?

Vault requires network connectivity to function as it is a centralized secrets management server. However, it can be deployed on-premises for air-gapped environments, and clients can cache short-lived tokens for temporary offline access once authenticated.

Source

Behind it

Who makes HashiCorp Vault

Company
HashiCorp
Based in
San Francisco, CA

Keep looking

Where to go from HashiCorp Vault

Best Security Cybersecurity software for

Compare HashiCorp Vault with

Other Security Cybersecurity software

Softwr does not host reviews and shows no star rating for HashiCorp Vault, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.

More on HashiCorp Vault