Try our new research platform with insights from 80,000+ expert users
HashiCorp Vault Logo

HashiCorp Vault pros and cons

Vendor: HashiCorp
4.1 out of 5
538 followers
Post review

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

HashiCorp Vault is platform agnostic, offering seamless integration across PaaS, CaaS, and KaaS environments.
Being open source and cloud agnostic, HashiCorp Vault is easy to maintain and control.
HashiCorp Vault ensures comprehensive data encryption at rest, in use, and in transit.
Dynamic rotation of password credentials makes HashiCorp Vault valuable.
The secret engine in HashiCorp Vault integrates smoothly with various applications for easy setup and rapid implementation.

CONS

A drawback for some clients who have to be PCI compliant is that they still need to use and subscribe to an HSM (Hardware Security Module) solution, which adds complexity.
Documentation is very general and lacks examples and use cases, especially concerning integrations.
Technical support is hard to reach and sometimes lacks adequate service.
HashiCorp Vault's initial setup process is complicated, requiring improvements for easier implementation.
There is a need for better customization, with a desire for a more plug-and-play experience.
 

HashiCorp Vault Pros review quotes

reviewer1591359 - PeerSpot reviewer
Mar 30, 2022
We were using it because we have compliance requirements around secret management. Having a secure vault and encrypting data was an additional requirement. When we looked at it first, we were just looking for a vault, like a lockbox. The greatest benefit of HashiCorp is its ability to manage encryption on the fly. It provides encryption of data at rest, in use, in transit, on the fly, and linked with applications, which was really attractive.
BP
Dec 18, 2023
It's stable. I would rate the stability a nine out of ten.
SN
Mar 30, 2020
This solution is easy to use and to integrate.
Learn what your peers think about HashiCorp Vault. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,067 professionals have used our research since 2012.
MK
Jul 23, 2021
The interface is very simple to navigate.
KishoreKumar1 - PeerSpot reviewer
Apr 15, 2024
The feature I find most beneficial in HashiCorp Vault is the secret engine. It integrates smoothly with many applications, making it easy to set up and implement quickly. This allows you to test it easily and see good results rapidly. When you integrate an internal API or application, it quickly manages that application's secrets.
MA
Dec 16, 2021
The most valuable feature of HashiCorp Vault is that it's an open source solution. Second, it's cloud agnostic, so it's very easy to maintain and control, which is why we prefer HashiCorp.
SD
Sep 25, 2019
It is an added value for our customers to have a Secrets Management workflow available that is PaaS/CaaS/KaaS Platform agnostic.
AKASHGUPTA3 - PeerSpot reviewer
Jul 27, 2023
For me, the most valuable features include that it's easy to manage and maintain the password API for retrieving passwords and other things.
RB
Mar 16, 2021
It can still be configured by a separate team other than developers. That's why I think it's more secure.
RS
Dec 14, 2021
The solution is stable. It has been working perfectly without any problem.
 

HashiCorp Vault Cons review quotes

reviewer1591359 - PeerSpot reviewer
Mar 30, 2022
In terms of features, the only thing that I found a little bit hinky was that there was no revocation or deletion on the model we were using. Once in a financial year, a client interacts, and you pay for that client for the year. So, there are just little things like that in the pricing. There should be more clarity around the end of the key. I know there is no system like this. They all are the same. I tested Microsoft, Google, and some others, and none of them really want you to delete a key, which makes sense. You delete a key, and you lose everything that it has wrapped or encrypted, but it's actually just a language. Deletion isn't really deletion. It's really revocation, but overall, HashiCorp Vault ticked all the boxes for us, and I couldn't fault it.
BP
Dec 18, 2023
The onboarding is a challenge. It should be more self-service, but it involves reviews and approvals.
SN
Mar 30, 2020
The documentation is very general; it should have more examples and more use cases.
Learn what your peers think about HashiCorp Vault. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,067 professionals have used our research since 2012.
MK
Jul 23, 2021
The technical support was hard to get a hold of and lacking in service.
KishoreKumar1 - PeerSpot reviewer
Apr 15, 2024
In my opinion, HashiCorp Vault could improve its user interface. Right now, they don't offer much in terms of a graphical interface, which means you usually have to manage things manually through API calls. I think CyberArk has a better approach because it provides a UI that integrates features across all its components, making it easier, especially for new users or those from organizations with strict licensing policies.
MA
Dec 16, 2021
I don't think there are any major improvements required—so far, so good. However, I think that having more training materials, such as videos, and documentation available would be helpful. I would prefer to have more videos available either on the official site or on YouTube.
SD
Sep 25, 2019
A drawback for some clients who have to be PCI compliant is that they still need to use and subscribe to an HSM (Hardware Security Module) solution.
AKASHGUPTA3 - PeerSpot reviewer
Jul 27, 2023
I would rate the stability a six out of ten. There are some bugs and glitches. We are in touch with the vendor to resolve them.
RB
Mar 16, 2021
We could use more documentation, primarily to do with integrations.
RS
Dec 14, 2021
The solution could be much easier to implement.