# Azure Key Vault vs OpenBao

**Leader by Vioscale score:** OpenBao

| Attribute | Azure Key Vault | OpenBao |
|---|---|---|
| **Vioscale score** | 50 (6% (low)) | 56.9 (41% (low)) |
| activity.commits_last_30d | - | 100 |
| adoption.dependent_repos | - | 0 |
| adoption.github_stars | - | 7,176 |
| deployment.options | `{"cloud":true}` | `{"on_prem":true,"self_hosted":true}` |
| description.long | - | A centralized system for storing and managing sensitive data like API keys and database credentials, with automatic credential generation for external systems, automatic expiration after a set lease period, and identity-based access controls. |
| features.capabilities | `{"hosting":"cloud","tool_type":"store"}` | `{"hosting":"both","tool_type":"store","cncf_project":"none","audit_logging":true,"dynamic_secrets":true,"secret_rotation":true,"open_source_core":true,"kubernetes_native":true,"fine_grained_policy":true,"encryption_as_a_service":true}` |
| integrations.count | - | 7 |
| integrations.list | - | `[{"name":"Kubernetes"},{"name":"PostgreSQL"},{"name":"AWS"},{"name":"S3"},{"name":"Flux"},{"name":"SOPS"},{"name":"Cosign"}]` |
| language.primary | - | Go |
| license.spdx | - | MPL-2.0 |
| platform.support | - | `{"cli":true,"linux":true,"windows":true}` |
| pricing | - | `{"type":"open_source","freeTier":true,"sourceUrl":"https://openbao.org/","retrievedAt":"2026-08-05T13:26:33.292Z"}` |
| pricing.free_tier | - | yes |
| pricing.model | commercial | open_source |
| pricing.price_level | - | free |
| pricing.transparent | - | yes |
| release.cadence_days | - | 26 |
| release.history | - | `[{"url":"https://github.com/openbao/openbao/releases/tag/v2.6.2","date":"2026-08-18T16:21:00Z","type":"stable","version":"v2.6.2"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.6.1","date":"2026-07-22T14:37:36Z","type":"stable","version":"v2.6.1"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.6.0","date":"2026-07-14T17:06:32Z","type":"stable","version":"v2.6.0"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.6.0-beta20260622","date":"2026-06-22T19:58:29Z","type":"prerelease","version":"v2.6.0-beta20260622"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.5.5","date":"2026-06-17T11:27:10Z","type":"stable","version":"v2.5.5"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.5.4","date":"2026-05-20T16:15:07Z","type":"stable","version":"v2.5.4"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.5.3","date":"2026-04-20T19:35:06Z","type":"stable","version":"v2.5.3"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.5.2","date":"2026-03-25T16:23:32Z","type":"stable","version":"v2.5.2"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.5.1","date":"2026-02-23T17:34:23Z","type":"stable","version":"v2.5.1"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.5.0","date":"2026-02-04T16:26:04Z","type":"stable","version":"v2.5.0"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.5.0-beta20251125","date":"2025-11-25T19:36:21Z","type":"prerelease","version":"v2.5.0-beta20251125"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.4.4","date":"2025-11-24T20:01:19Z","type":"stable","version":"v2.4.4"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.4.3","date":"2025-10-22T20:27:25Z","type":"stable","version":"v2.4.3"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.4.1","date":"2025-09-11T20:32:45Z","type":"stable","version":"v2.4.1"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.4.0","date":"2025-08-28T20:39:37Z","type":"stable","version":"v2.4.0"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.3.2","date":"2025-08-08T04:11:06Z","type":"stable","version":"v2.3.2"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.3.1","date":"2025-06-25T19:26:24Z","type":"stable","version":"v2.3.1"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.2.2","date":"2025-05-29T19:43:18Z","type":"stable","version":"v2.2.2"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.3.0-beta20250528","date":"2025-05-28T21:56:16Z","type":"prerelease","version":"v2.3.0-beta20250528"},{"url":"https://github.com/openbao/openbao/releases/tag/v2.2.1","date":"2025-04-22T20:39:12Z","type":"stable","version":"v2.2.1"}]` |
| reliability.status_page | yes | yes |
| security.gdpr | yes | - |
| security.scorecard | - | 8.5 |
| security.vulnerabilities | - | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fopenbao%2Fopenbao%2Ftools&per_page=100","last_12m":0,"max_severity":null}` |

## Capabilities (Secrets Management Tools)

| Capability | Azure Key Vault | OpenBao |
|---|:--:|:--:|
| **Core** |  |  |
| Tool type | Secret store / engine | Secret store / engine |
| Dynamic (short-lived) secrets | - | ✓ |
| **Deployment** |  |  |
| Hosting | Cloud only | Cloud + self-hosted |
| **Lifecycle** |  |  |
| Automatic secret rotation | - | ✓ |
| **Crypto** |  |  |
| Encryption as a service (transit) | - | ✓ |
| **Compliance** |  |  |
| FIPS 140-2/3 validated crypto | - | - |
| HSM support | - | - |
| **Access** |  |  |
| Fine-grained / identity-based policy | - | ✓ |
| **Governance** |  |  |
| Audit logging | - | ✓ |
| **Integration** |  |  |
| Kubernetes native (CRD / CSI / K8s auth) | - | ✓ |
| **Scope** |  |  |
| PKI / certificate authority | - | - |
| **Licensing** |  |  |
| Open-source core | - | ✓ |
| **Ecosystem** |  |  |
| CNCF maturity | - | None |

*Source: Vioscale. Generated 2026-09-01T16:33:45.286Z. "-" = undocumented, not absent.*