HashiCorp Vault

HashiCorp Vault provides identity-based secrets management and data protection for applications, systems, and infrastructure. Vault centrally manages and tightly controls access to tokens, passwords, certificates, and encryption keys.

The platform supports dynamic secrets that are generated on demand for databases, cloud providers, and other systems, eliminating the need for long-lived credentials. Automatic rotation and revocation reduce the risk of credential exposure.

Vault's encryption-as-a-service capabilities enable applications to encrypt data without managing cryptographic keys directly. Transit secrets engine provides encryption, decryption, signing, and verification operations via API.

Vault supports multiple authentication methods including OIDC, LDAP, Kubernetes, and cloud IAM, enabling identity-based access policies that integrate with existing identity infrastructure.