Choose a product offering
Free
Freeup to 25 secrets
Secrets lifecycle management for static secrets, designed for small projects or proof of concepts.
Standard
Starting at$0.50per secret per month
Centralized secrets lifecycle management for static secrets.
Plus
Starting at$0.95per secret per month
Advanced secret lifecycle management capabilities for enterprises.
HCP Vault Secrets features
| Feature | Free | Standard | Plus |
|---|---|---|---|
| User & group management | |||
| Service principals | |||
| SSO | |||
| MFA | |||
| Role-based access control | |||
| Resource-based access control | |||
| Workload Identity Federation |
| Feature | Free | Standard | Plus |
|---|---|---|---|
| Static secrets | |||
| Auto-rotating secrets | |||
| Dynamic secrets | |||
| Secrets sync | |||
| Secret versioning | |||
| Secret import | |||
| Webhooks |
| Feature | Free | Standard | Plus |
|---|---|---|---|
| HCP Terraform | |||
| AWS | |||
| Azure | |||
| Google Cloud Platform | |||
| Kubernetes | |||
| GitHub | |||
| Vercel | |||
| MongoDB Atlas | |||
| Twilio | |||
| Log streaming |
| Feature | Free | Standard | Plus |
|---|---|---|---|
| Audit log | 7-day retention | 30-day retention | Log streaming |
| SOC 2 | |||
| 99.9% SLA |
HCP Vault Secrets support
| Support level | Free | Standard | Plus |
|---|---|---|---|
| Community | |||
| Bronze | |||
| Silver | |||
| Gold |
HCP Vault Secrets FAQs
What is the difference between HCP Vault Secrets and HCP Vault Dedicated?
Where is HCP Vault Secrets hosted?
What are the pricing metrics for HCP Vault Secrets?
Is each dynamic secret or rotated secret charged as a new secret?
What payment options do you accept?
What’s the difference between pay-as-you-go and annual offerings?
I have billing questions, where should I direct these?
Standard
Starting at$1.58 per cluster per hour
Secure secrets, keys, and certificates with highly available clusters designed to scale with production workloads.
Plus
Starting at$1.84per cluster per hour
Secure secrets, keys, and certificates across multiple datacenters with high-availability replication.
HCP Vault Dedicated features
| Feature | Standard | Plus |
|---|---|---|
| Versioned key value storage | ||
| User & group management | ||
| Vault agent | ||
| UI with cluster management | ||
| Encryption as a Service | ||
| Dynamic secrets | ||
| Leasing & revoking secrets | ||
| Workload Identity Federation plugin | ||
| Secrets sync |
| Feature | Standard | Plus |
|---|---|---|
| Detailed audit logs | ||
| Event notifications |
| Feature | Standard | Plus |
|---|---|---|
| Access control | ||
| Encryption key rotation | ||
| AWS KMS auto-unseal | ||
| Azure Key Vault auto-unseal | ||
| Google Cloud KMS auto-unseal | ||
| HSM auto-unseal | ||
| Transform/tokenization (ADP) | ||
| KMIP (ADP) | ||
| KMSE (ADP) |
| Feature | Standard | Plus |
|---|---|---|
| Tenant isolation/Namespaces | ||
| Automated snapshots | ||
| User configurable resource quotas | ||
| Performance standby nodes | ||
| High availability | ||
| Performance replication | ||
| Disaster recovery replication |
| Feature | Standard | Plus |
|---|---|---|
| SSO integration (Okta, Ping, Duo) | ||
| Monitoring telemetry with Splunk |
| Feature | Standard | Plus |
|---|---|---|
| Multi-factor authentication | ||
| Sentinel policies | ||
| Control groups | ||
| FIPS-140-2 & seal wrap | ||
| Entropy augmentation | ||
| Long term support releases |
HCP Vault Dedicated support
| Feature | Standard | Plus |
|---|---|---|
| Community | ||
| Bronze | ||
| Silver | ||
| Gold |
HCP Vault Dedicated FAQs
What public clouds does HCP Vault Dedicated support?
What is the difference between HCP Vault Dedicated and HCP Vault Secrets?
What payment options do you accept?
What’s the difference between pay-as-you-go and annual offerings?
I have billing questions, where should I direct these?
Custom
Self-managed
For enterprises with special security, compliance, and additional operational requirements.
Vault Enterprise features
| Feature | Standard | Plus | Premium |
|---|---|---|---|
| Versioned key value storage | |||
| User & group management | |||
| Vault agent | |||
| UI with cluster management | |||
| Encryption as a Service | |||
| Dynamic secrets | |||
| Leasing & revoking secrets | |||
| Workload Identity Federation plugin | |||
| Secrets sync |
| Feature | Standard | Plus | Premium |
|---|---|---|---|
| Detailed audit logs | |||
| Event notifications |
| Feature | Standard | Plus | Premium |
|---|---|---|---|
| Access control | |||
| Encryption key rotation | |||
| AWS KMS auto-unseal | |||
| Azure Key Vault auto-unseal | |||
| Google Cloud KMS auto-unseal | |||
| HSM auto-unseal | |||
| Transform/tokenization (ADP) | add-on | add-on | |
| KMIP (ADP) | add-on | add-on | |
| KMSE (ADP) | add-on | add-on |
| Feature | Standard | Plus | Premium |
|---|---|---|---|
| Tenant isolation/Namespaces | |||
| Automated snapshots | |||
| User configurable resource quotas | |||
| Performance standby nodes | |||
| High availability | |||
| Performance replication | |||
| Disaster recovery replication |
| Feature | Standard | Plus | Premium |
|---|---|---|---|
| SSO integration (Okta, Ping, Duo) | |||
| Monitoring telemetry with Splunk |
| Feature | Standard | Plus | Premium |
|---|---|---|---|
| Multi-factor authentication | |||
| Sentinel policies | |||
| Control groups | |||
| FIPS-140-2 & seal wrap | |||
| Entropy augmentation | |||
| Long term support releases |
Vault Enterprise support
| Support level | Standard | Plus | Premium |
|---|---|---|---|
| Community | |||
| Bronze | |||
| Silver | |||
| Gold |
Vault Enterprise FAQs
What’s the difference between Vault Enterprise, HCP Vault Dedicated, and HCP Vault Secrets?