HashiCorp Vault has become a critical security platform for organizations managing secrets, credentials, certificates, cryptographic services, and machine and agentic access across hybrid and multi-cloud environments. As adoption expands to more applications, teams, business units, and regions, however, organizations face a new challenge: understanding and governing their growing Vault estate as a whole. What can be managed effectively within individual environments becomes increasingly complex as organizations need to understand operational health, security resources, usage, and lifecycle activity at enterprise scale.
Today, we are announcing the public preview of HashiCorp Secure Hub, a common governance layer that gives organizations a unified way to understand and govern their Vault estate. Secure Hub brings together visibility, reporting, and operational context from distributed Vault environments, giving platform, security, and governance teams a more complete view of the security resources they manage.
Secure Hub complements the security controls and enforcement within Vault Enterprise rather than replacing them. Vault continues to secure and enforce access within individual environments, while Secure Hub provides the enterprise-wide context needed to govern the broader Vault estate. Together, they enable organizations to maintain distributed security controls while establishing more consistent visibility and governance at enterprise scale.
»Extending the value of Vault Enterprise
Organizations often expand Vault usage organically as more teams and applications adopt secrets management, PKI, and other security services. Over time, that success can result in multiple Vault environments supporting different applications, regions, or organizational requirements.
Secure Hub brings these environments into a common governance experience without changing the role Vault plays in securing individual workloads. It gives teams a consolidated way to understand the health, security resources, activity, and consumption of their Vault estate with capabilities such as:
Centralized visibility. Establish a consolidated view of Vault environments, including information about cluster operational health, configuration, and versions, to help platform teams better understand and operate their Vault estate.
Improved secrets reporting. Gain greater visibility into the types of secrets that exist in different environments when they were modified or used, and other information that can help teams monitor security practices and respond to governance or audit requirements.
Improved certificate reporting. Greater visibility into issued and expiring certificates throughout the Vault estate, helping teams identify upcoming lifecycle events and coordinate renewal activities.
Consistent governance across environments. Establish enterprise-wide visibility and governance while preserving the policies, controls, and enforcement appropriate to each Vault environment.
Licensing consumption visibility. Track Resource Unit consumption by cluster and namespace to improve usage visibility and predictability.
»Build on the Vault investments you have today
Secure Hub is designed to deliver value for organizations operating Vault Enterprise today. Customers can build on their existing deployments and operating models while gaining additional reporting and governance capabilities across teams, regions, and use cases.
Secure Hub is also designed to support Vault Arc, providing continuity as organizations introduce the new generation of Vault alongside their existing environments. This creates a path toward consistent governance of Vault Enterprise and Vault Arc as the portfolio evolves. Vault Arc, however, is not a prerequisite for Secure Hub. Organizations can begin realizing the value of Secure Hub with the Vault Enterprise environments they operate today.
»Expanding Security Lifecycle Management
Security Lifecycle Management requires organizations to understand not only individual secrets, certificates, and cryptographic assets, but how those resources are created, used, governed, and ultimately retired through the enterprise. As Vault adoption expands, that lifecycle increasingly spans teams, environments, regions, and generations of Vault.
Secure Hub expands SLM from managing security resources within individual environments toward governing their lifecycle in the enterprise. That becomes increasingly important as machine identities proliferate and organizations adopt agentic AI, creating more identities, credentials, certificates, and access relationships that must be understood and governed at scale.
Together, Vault Enterprise, Vault Arc, Secure Hub, and capabilities from the broader IBM security portfolio can provide a foundation for discovering, securing, and governing human, machine, workload, and agentic access in increasingly autonomous environments.
The public preview gives customers an opportunity to experience this new approach to governing Vault at enterprise scale and provide feedback that helps shape the evolution of Secure Hub. As Vault estates continue to expand and security lifecycles become more distributed, that feedback will help define how Secure Hub evolves to meet the governance needs of increasingly complex and autonomous environments.
Join the HashiCorp Secure Hub public preview to explore the new capabilities, share your feedback, and evaluate how Vault Arc can extend your organization's Security Lifecycle Management strategy.
Learn more about the SLM announcements at TechXchange.
