About HashiCorp Vault
Vault is a secrets management tool from HashiCorp. It stores and controls access to tokens, passwords, certificates and encryption keys, and it can also encrypt data for applications.
What it does
Vault keeps sensitive values in one place and controls who or what can read them. Applications, systems and infrastructure can request secrets through a web UI, a command-line tool or an HTTP API. It can generate database credentials on demand and manage their lifecycle, and it offers encryption as a service, so applications do not need to handle keys directly.
Key features
- Stores passwords, tokens and certificates
- Controls access to secrets with policies
- Creates database credentials with a managed lifecycle
- Encrypts data in transit and at rest
- Offers a managed cloud option, HCP Vault Dedicated
Who it's for
DevOps teams, platform engineers and backend developers who need a controlled place for application secrets. Security teams running many services or cloud environments are a common match.
Pricing and good to know
Vault is available as a community edition, and the Enterprise edition adds features such as disaster recovery replication. HCP Vault Dedicated is a managed service with a free trial. Check HashiCorp's pricing information for current terms before you plan a production rollout.
Highlights
- Store passwords, tokens and certificates in one place
- Control access to secrets with policies
- Create database credentials with a managed lifecycle
- Encrypt data with encryption as a service
- Use a managed cloud option, HCP Vault Dedicated
