Skip to content
THREATWIRE

Open Source Tools · Alternatives

Open-source alternatives to HashiCorp Vault

HashiCorp Vault is a secrets management system. Since version 1.15 its source is published under the Business Source License (BSL 1.1), which is not an open-source licence. OpenBao is a community fork of the last MPL-licensed Vault code under the Linux Foundation; Infisical is another open-core option.

HashiCorp Vault is a commercial product by HashiCorp (IBM) (official site). Category: Identity, access and secrets management.

Comparison

ToolLicenceStarsLast commitBest for
InfisicalMITOpen source30ktodaySecrets, certificates and access management platform
OpenBaoMPL-2.0Open source8.6ktodayCommunity fork of Vault under an open-source licence

Open-source options

  • Infisical

    Secrets, certificates and access management platform

    Open-core platform to manage application secrets and environment variables across teams and infrastructure, with SDKs, a CLI and secret scanning.

    Stars
    30k
    Forks
    2.4k
    Last commit
    today
    MITOpen sourceIdentity, access and secrets management
    Alternative toHashiCorp Vault

  • OpenBao

    Community fork of Vault under an open-source licence

    Linux Foundation project that forked HashiCorp Vault's last MPL-licensed code to keep an open-source secrets manager with a compatible API.

    Stars
    8.6k
    Forks
    636
    Last commit
    today
    MPL-2.0Open sourceIdentity, access and secrets management
    Alternative toHashiCorp Vault

Product names are trademarks of their owners. ThreatWire is not affiliated with HashiCorp (IBM). The comparison covers what each tool is designed to do, not a feature-by-feature equivalence.