Certificate Authority Service by Google Cloud vs. HashiCorp Vault vs. ManageEngine Key Manager Plus

HashiCorp Vault, in my opinion, is a defacto standard for any cloud or automation implementation. They're the best of the best as far as products for secrets management and the ability to use it against relatively any service you have is unheard of for other products. HashiCorp has really taken out all the stops when it comes to creating a nice, extensible tool that people can use to suit their needs.

Incentivized

The tool is really good for the enterprise having major exposure to public-facing web applications and this can be used to maintain the SSL Certificate Inventory and automated alerts can be set so that SSL Certificates can be renewed before the expiry. Organizations who don't have the visibility of the SSL Certificate deployed across various and then tool can be used to identify the certificates and inventory can be prepared. This tool must be handled by Information Security Team since the private key information is confidential in nature. This tool has the capability to extract the information from various cloud instances including Azure, GCP, and AWS. I will not recommend this tool for organizations that don't have many public-facing apps and for 8 to 10 apps this can be managed manually rather than purchasing this tool.

Incentivized

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

Incentivized

• SSL Certificate Discover Feature.
• User Friendly Dashboard.
• Automated Alerts to tell about expiry of the Certificate.
• Different User Profiles can be configured.
• Various Reports available to download.
• Stable Product.

Incentivized

• Session Management is terrible to manage
• Monitoring is hard and not enough information
• User management
• Configuration is too complex
• More user friendly UI

• False Positives Issues (Sometimes getting alerts for certificates that are already renewed).
• Alerting Emails can be improved.
• Audit Trail need to be improved.

Incentivized

HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.

Incentivized

We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.

Incentivized

Overall good product. The solution was able to meet our business case. It is not an expensive product as compared to other key vault solutions. Implementation is an easy and user-friendly console. We got the training on how to use the solution after it was deployed. It is widely used by many organizations. With this solution, we managed to create a centralized SSL Certificates Inventory and other details which were very difficult to extract using the manual search.

Incentivized

Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.

Incentivized

Technical Support is good and available 24/7. Licensing Policy is also good and we have taken a yearly subscription model. Integration with Digi Cert is also possible. Secure Solution for management of SSL Certificates Life Cycle. We have not faced any issue with the deployment of the product and not many bugs in the products except some false positives and false negatives ratios.

Incentivized

HashiCorp Vault is way better than Azure Key Vault; it has more features and it goes beyond a key-value secret store.

Incentivized

• Helped us reach our security compliance goals.
• Helped us strengthen our security position in our infrastructure by improving on poor secret management practices.

Incentivized

• No Business Impact as SSL Certificates renewed on time.
• Centralized Control over the SSL Certificate Exposure in the environment.
• Security of Private Keys.
• Able to discover hidden SSL Certificates.

Incentivized