HashiCorp Vault Reviews

Name: HashiCorp Vault
Brand: HashiCorp
Rating: 4.1 (16 reviews)

4.1 out of 5

16 reviews
88% willing to recommend

539 followers

What is HashiCorp Vault?

HashiCorp Vault is a cloud-agnostic solution used for security and secret management. Its valuable features include integration with other HashiCorp tools, token sharing, open source nature, cloud agnosticism, and on-the-fly encryption management.

Get the HashiCorp Vault Buyer's Guide and find out what your peers are saying about HashiCorp Vault, CyberArk Privileged Access Manager, Azure Key Vault and more!

HashiCorp Vault is the #4 ranked solution in top Enterprise Password Managers. PeerSpot users give HashiCorp Vault an average rating of 8.2 out of 10. HashiCorp Vault is most commonly compared to CyberArk Privileged Access Manager: HashiCorp Vault vs CyberArk Privileged Access Manager. HashiCorp Vault is popular among the large enterprise segment, accounting for 67% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 19% of all views.

Helped 831,158 peers since 2012

Featured reviews

KishoreKumar1

Architect at Accenture

The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applications, making it easy to set up and implement quickly. This allows you to test it easily and see good results rapidly. When you integrate an internal API or application, it quickly manages that application's secrets. The access management feature in HashiCorp is great, especially if you are considering situations where users are getting onboarded. They can manage their passwords themselves, and it integrates well with Active Directory or any other directory services. This is particularly useful for user management and applications that communicate with each other without human intervention.

Read full review

AKASHGUPTA3

Credit Analyst at Standard Chartered Bank

I would advise doing a Proof of Concept first and then deciding accordingly because your use case might be simple. You can try out AWS Key Management or Azure Key Vault. They are different products. Do the POC and then decide what you need. Overall, I would rate the solution a six out of ten. No solution is a ten in my opinion.

Read full review

Joble John

Vice President - Global Head of Privilege Access Management, Data Services and Certification at Barclays Capital

We use the solution for secret management. The product needs to improve its customization. It should be also more like easy to plug and play. I have been working with the product for three years. I would rate the product an eight out of ten. On-premises

Read full review

HashiCorp Vault mindshare

As of January 2025, the mindshare of HashiCorp Vault in the Enterprise Password Managers category stands at 15.0%, down from 17.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Enterprise Password Managers

PeerAnalyst reports

Type	Title	Date
Category	Enterprise Password Managers	Jan 21, 2025	Download
Product	Reviews, tips, and advice from real users	Jan 21, 2025	Download
Comparison	HashiCorp Vault vs Azure Key Vault	Jan 21, 2025	Download
Comparison	HashiCorp Vault vs AWS Secrets Manager	Jan 21, 2025	Download
Comparison	HashiCorp Vault vs CyberArk Privileged Access Manager	Jan 21, 2025	Download

Title	Rating	Mindshare	Recommending
CyberArk Privileged Access Manager	4.3	N/A	94%	203 interviews Add to research
Azure Key Vault	4.3	27.1%	97%	45 interviews Add to research

Valuable Features

HashiCorp Vault offers dynamic secrets and key revocation, excellent integration with HashiCorp tools, and strong encryption capabilities. Users value its ease in managing encryption on the fly and secret management. Its cloud-agnostic nature, open-source accessibility, secret engine, and API features enhance user experiences. The product supports dynamic password rotation, token sharing, and seamless key lifecycle management. Enterprises appreciate its secure vault for compliance, user-friendly interface, and integration with Active Directory and other services.

"The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applications, making it easy to set up and implement quickly. This allows you to test it easily and see good results rapidly. When you integrate an internal API or application, it quickly manages that application's secrets."
"It's stable. I would rate the stability a nine out of ten."
"The product is free and easy to use. It is well documented with an easy implementation process."

Room for Improvement

HashiCorp Vault users suggest improvements in several areas, including integration with service meshes and cloud APIs, detailed documentation, error handling, and technical support accessibility. They find the initial setup complex and costly, and believe pricing clarity is needed. They request better user interface options, automation for easier deployment, and enhanced customization. Advanced features, stability, and SAP integration are also desired, along with self-service onboarding and an efficient database plugin for secret management.

"In my opinion, HashiCorp Vault could improve its user interface. Right now, they don't offer much in terms of a graphical interface, which means you usually have to manage things manually through API calls. I think CyberArk has a better approach because it provides a UI that integrates features across all its components, making it easier, especially for new users or those from organizations with strict licensing policies."
"The onboarding is a challenge. It should be more self-service, but it involves reviews and approvals."
"There could be a plugin for the database to change the secret automatically. It would be an efficient feature for password security."

Pricing

Enterprise users report varied experiences with HashiCorp Vault pricing. Many start with the free open-source version, incurring costs primarily in engineering time and infrastructure. Transitioning to the paid enterprise version can become costly, especially with specific needs like global redundancy and scalability. While some note competitive pricing, others find costs rising with premium features and support. Licensing complexity and bespoke pricing factors can delay cost transparency, often aligning with broader industry standards.

"In my case, the open-source version works well. It's advisable for small to medium-scale organizations, but for large-scale organizations, you should go with the enterprise version."
"The product is expensive."
"The solution's cost is reasonable."

Popular Use Cases

HashiCorp Vault's primary use case is managing secrets, storing keys, certificates, and passwords across various platforms like Kubernetes and OpenShift. Users employ it for centralized storage, security compliance, and integrating with key management services. It supports on-premise and cloud solutions, enabling secure machine communication and management of credentials in diverse environments, particularly beneficial for companies needing a common storage for dynamic and static credentials.

Deployment

HashiCorp Vault's initial setup varies in complexity. Some find it easy and not complex, requiring around 20 minutes to set up. Others encounter complexity, especially with cloud integration needing error tracking. Documentation is clear, and with support, the process can be straightforward. Automation and team involvement can help, but manual intervention is often needed. Ease with prior experience contrasts with onboarding challenges. It is generally rated between seven to nine out of ten for ease.

Scalability

HashiCorp Vault demonstrates impressive scalability. Users highlight ease in scaling through clusters, reliable infrastructure, and critical data storage capabilities. Many organizations use it continuously, emphasizing its crucial role in automation and security. The scalability is notable across diverse infrastructure, with a positive rating from several users.

Stability

HashiCorp Vault is generally stable, with feedback highlighting its suitability for production workloads. Many find it works well without issues. However, some experience occasional bugs and glitches, possibly due to network latency. Ratings vary, with some giving high scores while others note imperfections. Users mention stable performance but point out limitations such as the UI and access controls when compared to alternatives. It performs well for machine-to-machine communication, albeit with scaling challenges in different regions.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our HashiCorp Vault Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

19%

Computer Software Company

15%

Manufacturing Company

Government

Healthcare Company

Retailer

Insurance Company

Comms Service Provider

University

Media Company

Educational Organization

Energy/Utilities Company

Real Estate/Law Firm

Construction Company

Wholesaler/Distributor

Non Profit

Legal Firm

Hospitality Company

Recreational Facilities/Services Company

Transportation Company

Logistics Company

Outsourcing Company

Performing Arts

Pharma/Biotech Company

Recruiting/Hr Firm

Leisure / Travel Company

Compare HashiCorp Vault with alternative products

Learn more about HashiCorp Vault

The solution provides encryption of data at rest, in use, in transit, on the fly, and linked with applications. It is free to use, and the interface is simple to navigate. HashiCorp Vault has helped organizations with its multiple authentication methods and RESTful API.

HashiCorp Vault Features

Data encryption: The solution is capable of encrypting and decrypting data, and will not store it. Organizations’ security personnel define their own encryption protocols; developers can store the encrypted data where they choose and are not obligated to design specific encryption processes.
Robust secrets: For systems such as AWS or SQL databases, Vault is able to generate secrets automatically. HashiCorp Vault is able to generate AWS keypairs with all the appropriate permissions when necessary, and when the approved time expires, will nullify them.
Secure secret storage: Any type of value or key secrets can be stored in the Vault. The Vault automatically encrypts the desired secrets before recording them into persistent storage, keeping them safe and secure. Users can record data using HCP Vault’s Consul service or disk, or choose from other options.
Nullification: Vault is able to nullify single secrets or all secrets from a particular group or specific user. This process is integral in securing systems in the event of an attack or inappropriate access.

Reviews from Real Users

“The greatest benefit of HashiCorp is its ability to manage encryption on the fly. It provides encryption of data at rest, in use, in transit, on the fly, and linked with applications, which was really attractive. The lifecycle of a key is so easy to manage in terms of rotating, revoking, and issuing. They have different auth methods, and I tried all different auth methods. It is seamless.”- Project Manager at a comms service provider.

“The most valuable feature of HashiCorp Vault is that it's an open source solution. Second, it's cloud-agnostic, so it's very easy to maintain and control, which is why we prefer HashiCorp. “ - Mohamed A., Lead DevOps Engineer at Etisalat.