HashiCorp Vault

HashiCorp Vault provides identity-based security to centrally manage access to secrets and protect sensitive data. Vault lets organizations authenticate and authorize access to secrets and other sensitive information, using short-lived, just-in-time credentials that expire automatically to reduce secret sprawl and limit exposure. The product supports centralized storage, programmatic access, and distribution of secrets, generation and on-demand rotation/revocation of certificates, and lifecycle management for keys. Vault also offers encryption-as-a-service to protect data in transit and at rest and uses policy-driven controls and a single API to automate secret creation, consumption, expiration, and rotation. It is designed to scale across large IT environments to consolidate redundant secret-storage tools, lower operational cost, and speed up audits. Vault is extensible and pluggable, with support for custom authentication engines and secrets engines. Additional functionality includes inspection of code repositories and collaboration tools to identify unsecured credentials, and the ability to connect machines, people, and networks using trusted identities to authenticate and authorize requests. Vault emphasizes preventing unauthorized access through identity-based controls and automating secret lifecycle management to reduce manual effort and compliance risk.