HashiCorp Vault

Manage Secrets & Protect Sensitive Data

Also known as
hashicorp-vault

What is HashiCorp Vault?

Secure, store, and tightly control access to tokens, passwords, certificates, encryption keys, and other sensitive data using a UI, CLI, or HTTP API.

Independently observed

What HashiCorp Vault does

The capabilities that matter for secrets management tools, normalised so it lines up with every alternative. “-” means we haven't confirmed it, not that it's missing.

Core
Tool type
Secret store / engine
Dynamic (short-lived) secrets
Deployment
Hosting
Cloud + self-hosted
Lifecycle
Automatic secret rotation
-
Crypto
Encryption as a service (transit)
Compliance
FIPS 140-2/3 validated crypto
-
HSM support
-
Access
Fine-grained / identity-based policy
Governance
Audit logging
Integration
Kubernetes native (CRD / CSI / K8s auth)
-
Scope
PKI / certificate authority
-
Licensing
Open-source core
-
Ecosystem
CNCF maturity
-
Independently observed

Platform & deployment

Independently observed
Platforms
  • CLI
  • Web
Deployment
  • Cloud / SaaS
  • Self-hosted

HashiCorp Vault alternatives

Other secrets management tools we track, ranked by the same independent score.

Independent · unbought · dated

The Vioscale score: one lens on the evidence

Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for HashiCorp Vault, not the verdict.

Balanced composite 72 / 100
low · 34%
Signal contributions to the composite score
SignalScoreWeightContributionEvidence
Security Posture7040.002800.0
Github Activity6318.001135.8
Release Cadence9110.00911.1
Capabilities6712.00805.4
Github Stars865.00429.8
Integrations012.000.0-
Package Downloads026.000.0-
Stackoverflow Activity012.000.0-

Computed . Re-weight it by intent, or see the full method.

All data & sourcesshow ↓

Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.

Activity

AttributeValueEvidence
Commits last 30d100mediumsource · 2026-08-01 · 65%

Adoption

AttributeValueEvidence
Github stars36,041highsource · 2026-08-01 · 90%

Features

AttributeValueEvidence
Capabilities{"hosting":"both","tool_type":"store","audit_logging":true,"dynamic_secrets":true,"fine_grained_policy":true,"encryption_as_a_service":true}mediumsource · 2026-08-01 · 60%

Language

AttributeValueEvidence
PrimaryGohighsource · 2026-08-01 · 90%

Release

AttributeValueEvidence
Cadence days16mediumsource · 2026-08-01 · 70%

Reliability

AttributeValueEvidence
Status pageYesmediumsource · 2026-08-01 · 60%

Security

AttributeValueEvidence
Disclosure policyYesmediumsource · 2026-08-01 · 60%
Iso27001Yeshighsource · 2026-08-01 · 75%
Soc2Yeshighsource · 2026-08-01 · 75%