Logo
Deploy Now

SaaS Alternative

Doppler AWS Secrets Manager Azure Key Vault

Categories

DevOps Security Infrastructure Encryption Identity Management Secrets Management PKI

Stars

36,161

Forks

4,738

Watchers

777

Developer links

Last Updated: 08-24-2026 05:15 PM (UTC)

HashiCorp Vault

With over 36,000 GitHub stars and adoption by organizations including Adobe, Shopify, and Roblox, HashiCorp Vault is the industry-standard platform for secrets management, encryption services, and privileged access control across hybrid and multi-cloud infrastructure. The key/value secrets engine stores arbitrary secrets with full versioning, soft-delete, and metadata tracking, while dynamic secrets engines generate on-demand, short-lived credentials for AWS, Azure, GCP, databases including PostgreSQL, MySQL, MongoDB, and MSSQL, and SSH access with automatic revocation after configurable lease periods. The PKI secrets engine dynamically issues X.509 certificates on demand with automatic rotation and ACME protocol support, eliminating manual certificate management workflows entirely. Encryption as a service through the transit secrets engine lets applications encrypt, decrypt, sign, verify, and generate HMACs without managing cryptographic keys directly, supporting AES-GCM-256, ChaCha20-Poly1305, RSA-2048/4096, ECDSA-P256/P384, and ED25519 algorithms. Authentication integrates with LDAP, OIDC/OAuth2, SAML, AppRole for machine-to-machine access, Kubernetes service accounts, AWS IAM, Azure Active Directory, and GitHub tokens. Fine-grained ACL policies use path-based rules with glob patterns and sentinel policies for programmatic enforcement. The integrated Raft storage backend provides high-availability clustering without external dependencies, while alternative backends include Consul, S3, DynamoDB, PostgreSQL, and MySQL. The built-in web UI provides a visual interface for browsing secrets, managing policies, configuring auth methods, and monitoring cluster health. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSL 1.1 licensed.

HashiCorp Vault
HashiCorp Vault
HashiCorp Vault
HashiCorp Vault
HashiCorp Vault

Benefits

  • Dynamic Secrets With Auto-Revocation
  • Generate on-demand credentials for AWS, Azure, GCP, databases, and SSH with configurable lease durations and automatic revocation, eliminating long-lived static credentials entirely.
  • PKI Certificate Automation
  • Dynamically issue X.509 certificates via the PKI secrets engine with automatic rotation, ACME protocol support, and configurable TTLs for zero-touch certificate lifecycle management.
  • Transit Encryption as a Service
  • Encrypt, decrypt, sign, and verify data without storing it, supporting AES-GCM-256, ChaCha20-Poly1305, RSA, ECDSA, and ED25519 with automatic key versioning and rotation.
  • Integrated HA With Raft Consensus
  • Built-in Raft storage backend provides high-availability clustering with leader election and log replication without external dependencies like Consul, simplifying production deployment.

Features

  • Secret Engines
  • Key/value with versioning, dynamic credentials for AWS, Azure, GCP, PostgreSQL, MySQL, MongoDB, MSSQL, SSH, PKI certificates, and TOTP generation through pluggable engines.
  • Authentication Methods
  • LDAP, OIDC, SAML, AppRole, Kubernetes service accounts, AWS IAM, Azure AD, GCP IAM, GitHub tokens, and TLS certificate authentication with configurable policies per method.
  • Audit Logging
  • Every API request and response is logged to file, syslog, or socket backends with HMAC-SHA256 hashing of sensitive values for tamper-evident compliance records.
  • Web UI Dashboard
  • Built-in browser interface for browsing secrets, managing policies, configuring auth methods, viewing cluster health, and generating wrapped tokens without CLI access.
  • Policy Engine
  • Path-based ACL policies with glob patterns control granular access to secrets and operations, with Sentinel policies enabling programmatic rule enforcement for compliance requirements.