Open Source Alternatives to HashiCorp Vault

A secrets management platform that secures, stores, and controls access to tokens, passwords, certificates, and encryption keys. The system provides tools for database credential management and encryption as a service to protect data during transit and at rest. A key-value secrets engine allows for the persistence of arbitrary secrets, while a database secrets engine dynamically generates credentials based on pre-configured roles. The transit secrets engine enables encryption as a service, and an enterprise transform secrets engine generates cryptographically secure tokens for highly sensitive data. This software is designed for developers and operations teams to manage sensitive data across applications, systems, and infrastructure. Users interact with the platform through a user interface, command line interface, or HTTP API. Deployment options include a dedicated cloud version and a sandbox for experimentation. The tool supports the implementation of zero trust architecture and the management of identity and access.

Whether you want to cut software costs or escape vendor lock-in, these open source alternatives to HashiCorp Vault give you an option you fully own. You can self-host them, so your data stays on infrastructure you control. This page lists 1 open source alternative to HashiCorp Vault. The most popular is Infisical. It uses the MIT license and ships an official Docker image.