HashiCorp Vault Pros and Cons

The community and the overall functionality it provides, are easy to integrate with LDAP and OIDC, and it supports almost all the top secret management providers like AWS KMS and Google KMS. Its open-source nature of it enables other developers to create tools for Vault which is fantastic. Review collected by and hosted on G2.com.

Some of the documentation is very poor, especially when I was trying to integrate Keycloak I cannot find a good documentation. Review collected by and hosted on G2.com.

We have used Hashicorp Vault forever now and we have had no issues with it in terms of security of our data. The documentations also make it very easy to use.

Its integration with terraform and other tech is pretty straightforward. Review collected by and hosted on G2.com.

Nothing off the top of my head. Its actually the best given its competitors. Review collected by and hosted on G2.com.

One of the things I appreciate about HashiCorp Vault is its versatility. It supports a wide range of authentication methods, including tokens, user-pass, and LDAP, allowing us to choose the method that best suits our needs. The platform also supports dynamic secrets generation, making it easier to manage secrets at scale. Review collected by and hosted on G2.com.

While HashiCorp Vault is a robust and reliable solution for managing secrets, some users may find it challenging to set up and configure, particularly for more complex use cases. Additionally, some users may find the pricing model to be a bit expensive, especially for smaller teams or organizations with limited budgets. Review collected by and hosted on G2.com.

Vault provides amazing central place to keep secrets securely and manage the key values easily throgh beautiful user interface. The APIs are also easy to use. Review collected by and hosted on G2.com.

It takes time to learn the Vault so there is high learning curve. Review collected by and hosted on G2.com.

The vault setup process is quite easy. The backend engines are very useful for integrating authentication and authorization of existing services like Kubernetes. The path based secret storage is great where RBAC can be integrated for better security. Review collected by and hosted on G2.com.

The usage of vault can be bit complex to understand for beginners. Review collected by and hosted on G2.com.

Capability of encrypting files and handling loads is commendable. The ability to create sections tailored for document types is good. Its flexibility is incredibly valuable.HashiCorp Vault stands as a powerful tool for securing sensitive information. Review collected by and hosted on G2.com.

The initial setup and configuration process is complex and time consuming for organizations. Review collected by and hosted on G2.com.

it integrates with so many services, key being GitHub Action for me. Review collected by and hosted on G2.com.

Identifying tokens can be a bit of a hassle, and requires mulitple API calls to properly delete a key from a user-friendly identifier. Review collected by and hosted on G2.com.

We can store our third-party software passwords and retrieve them easily. We can also give vault access to users to recover certificates and passwords through PAT tokens from GHE. Review collected by and hosted on G2.com.

As of now, nothing. We can satisfy the basic necessity of retrieving passwords for our nexus repository. Most of the team members use it for that purpose alone so no concerns have been raised. Review collected by and hosted on G2.com.

Hashicorp vault is a great tool to store and manage secrets like passwords, private keys, certificates, etc.. in a secure environment, and it also rotates the keys to manage the secret lifecycle plus Hashicorp vault also comes in community edition and Hashicorp vault community is very active to provide various custom solution to fulfill various use-cases Review collected by and hosted on G2.com.

Hashicorp vault is not very useful for code and binary signing, especially in CI/CD environment and we can not integrate Hashicorp vault CI/CD tools to perform digital signatures without sharing the keys Review collected by and hosted on G2.com.

HashiCorp Vault is a secret store needed for enterprises to store secrets like passwords, oAuth tokens, metadata, etc. The beauty here is data stored and transmitted are hashed/encrypted.

It has both CLI(Command Line Interface) and User Graphical Interface. And also can retrieve secrets via Rest call as API.

Option to classify store based on namespace a parent and child namespace. This may help to have HashiCorp env for different environment (like QA/UAT/PT & Production)

The tokens are generated once and are presented for successive secret store/retrieval. Review collected by and hosted on G2.com.

I don't see an issue with the product. But to have a Graphical User Interface, it costs more and is not included in the basic product package cost. Review collected by and hosted on G2.com.