starter.wiki

Platform-operated secrets and privileged-access system

HashiCorp Vault

A secrets and privileged-access system with auth methods, policies, secret engines, leases, audit devices, encryption services, and Community, Enterprise, or managed deployment routes.

Visit official site

Editorial verdict

Choose Vault only when dynamic credentials or explicit platform-control requirements justify its critical-system operating and licensing burden; simpler secrets needs should start elsewhere.12

Best for

  • Dynamic credentials and leases
  • Explicit auth-method and policy control
  • Platform teams operating a shared secrets service
12

Not ideal for

  • Small teams with simple static secrets
  • Organizations without critical-platform operations
  • Buyers treating Community, Enterprise, and HCP as interchangeable
12
Main trade-off

Vault can support advanced control models while transferring a substantial availability, storage, identity, policy, upgrade, recovery, monitoring, and licensing burden to the organization.12

Product boundary

Whether advanced identity, dynamic-secret, policy, and encryption workflows justify operating or purchasing a critical Vault service.

Vault provides auth methods, policies, secret engines, leases, audit, and encryption primitives. Community, Enterprise, and HCP Vault Dedicated differ materially; self-managed Vault transfers storage, high availability, unsealing, upgrades, backups, recovery, monitoring, and incident response to the operator.12

For: Platform and security teams with hard control requirements and capacity to operate a critical secrets service

  • Dynamic secrets or explicit control no longer justify the platform
  • The team cannot operate a critical secrets service
  • Enterprise license or HCP terms do not fit

Why teams consider HashiCorp Vault

  • Auth and policy modelClients authenticate through configured methods and receive policy-governed access.12
  • Secret enginesPlugins can store static values or issue dynamic credentials with leases.12
  • Deployment routesCommunity, Enterprise, and HCP Dedicated support different control and operations boundaries.12

Pricing

Vault Community has no vendor subscription price but carries full operating cost; Vault Enterprise and HCP Vault Dedicated require commercial licensing or consumption terms whose editions and entitlements must be verified.2

Current decision boundary

Community, Enterprise, and HCP Vault Dedicated

Verified 2026-07-27: Community software does not remove infrastructure or staffing cost; Enterprise requires a valid license and HCP Dedicated uses current commercial consumption terms.2

Community cost
Infrastructure, storage, HA, backup, upgrades, security, and staffing2
Commercial boundary
Enterprise licenses and HCP consumption or contracts2
Critical operations
Unseal, recovery, monitoring, plugins, policy, and incident response2
Pricing checked View official pricing

HashiCorp Vault vs alternatives

Doppler

Choose when
Cross-platform application configuration
Avoid when
One small hosting-platform boundary
Compared with HashiCorp Vault
Centralization reduces configuration drift while adding a networked control plane, service availability, per-seat pricing, integration behavior, and migration dependency.34

Infisical

Choose when
Cloud or self-hosted secrets management
Avoid when
Teams unable to operate a self-hosted security control plane
Compared with HashiCorp Vault
Deployment choice increases control while making edition boundaries and self-hosted encryption, storage, backups, upgrades, availability, and identity explicit responsibilities.56

AWS Secrets Manager

Choose when
AWS-native workload identity
Avoid when
Vendor-neutral cross-platform control planes
Compared with HashiCorp Vault
AWS alignment reduces integration work while stored secrets, API calls, rotation functions, KMS, regions, replication, and migration remain cloud-specific.78

Resources and sources

Official product, pricing, policy, and operating sources

  • What is Vault?
    Open
  • HashiCorp consumption pricing
    Open
  • Doppler documentation
    Open
  • Doppler pricing
    Open
  • Infisical introduction
    Open
  • Infisical pricing
    Open
  • AWS Secrets Manager introduction
    Open
  • AWS Secrets Manager pricing
    Open
  1. 1
    What is Vault?

    HashiCorp · Accessed Official

  2. 2
    HashiCorp consumption pricing

    HashiCorp · Accessed Official

  3. 3
    Doppler documentation

    Doppler · Accessed Official

  4. 4
    Doppler pricing

    Doppler · Accessed Official

  5. 5
    Infisical introduction

    Infisical · Accessed Official

  6. 6
    Infisical pricing

    Infisical · Accessed Official

  7. 7
    AWS Secrets Manager introduction

    AWS · Accessed Official

  8. 8
    AWS Secrets Manager pricing

    AWS · Accessed Official