Open source alternatives to HashiCorp Vault

One project on starwire does the same job. Ranked by how much of what HashiCorp Vault does each one covers, read from its README and website. Ties go to the most active.

What HashiCorp Vault does

Store and access secrets securelycore
Fine-grained access policiescore
Dynamic short-lived credentials
Encryption as a service
Certificate issuing
Audit logs

Each dot in the table is one job, in this order. Square dots are core jobs and count double. Full means yes, half means partly. "See the evidence" under a project shows the line behind each one. Coverage is what a project documents, not how well it works or how hard it is to move to. How we score this

Project	Covers	Stars	Commits, 12 weeks	Last release	Closed vs opened	Setup	License
openbaoSecrets manager for storing and distributing keys, certificates, and tokens	Replaces it88%	9.0k+83	327	19 days ago	79%	Needs a server	MPL-2.0
Covers all 2 core jobs. Partly: Certificate issuing; Audit logs.See the evidence Store and access secrets securelycoreYesArbitrary key/value secrets can be stored in OpenBao. Fine-grained access policiescoreYesa unified ACL system to broker access Dynamic short-lived credentialsYesOpenBao can generate secrets on-demand for some systems Encryption as a serviceYesOpenBao provides encryption as a service with centralized key management Certificate issuingPartlymanage, store, and distribute sensitive data including secrets, certificates, and keys Audit logsPartlyAdding on key rolling, secure storage, and detailed audit logs

Vital signs from GitHub, checked weekly. How we read these · How setup is read

All repos

Sort

Form Platform Works with Theme License Setup Language

New repos every two days, stars refreshed daily. Visits are counted without cookies, and the numbers are public. How it works Data RSS Newsletter