TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    GoCD

    Score8 out of 10
    N/AGoCD, from ThoughtWorks in Chicago, is an application lifecycle management and development tool.N/A

    IBM Vault

    Score8.6 out of 10
    N/AIBM Vault (formerly Hashicorp Vault) is an encryption tool for managing secrets including credentials, passwords and other secrets, providing access control, audit trail, and support for multiple authentication methods. It is available open source, or under an enterprise license.

    $0.03

    Pricing
    GoCDIBM Vault
    Editions & Modules
    No answers on this topic
    Cloud - HCP Vault
    $0.03/hr
    Open Source
    Free
    Enterprise
    Contact sales team
    Offerings
    Pricing Offerings
    GoCDIBM Vault
    Free Trial
    NoNo
    Free/Freemium Version
    NoYes
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Best Alternatives
    GoCDIBM Vault
    Small Businesses
    Apache Maven
    Score9.1 out of 10
    Keeper
    Score8.3 out of 10
    Medium-sized Companies
    Apache Maven
    Score9.1 out of 10
    Keeper
    Score8.3 out of 10
    Enterprises
    Gradle Build Tool (Open Source)
    Score9 out of 10
    No answers on this topic
    All AlternativesView all alternativesView all alternatives
    User Ratings
    GoCDIBM Vault
    Likelihood to Recommend
    9.0
    (2 ratings)
    8.0
    (7 ratings)
    Likelihood to Renew
    -
    (0 ratings)
    10.0
    (1 ratings)
    Usability
    -
    (0 ratings)
    9.0
    (3 ratings)
    Support Rating
    -
    (0 ratings)
    6.3
    (3 ratings)
    User Testimonials
    GoCDIBM Vault
    Likelihood to Recommend
    ThoughtWorks
    Previously, our team used Jenkins. However, since it's a shared deployment resource we don't have admin access. We tried GoCD as it's open source and we really like. We set up our deployment pipeline to run whenever codes are merged to master, run the unit test and revert back if it doesn't pass. Once it's deployed to the staging environment, we can simply do 1-click to deploy the appropriate version to production. We use this to deploy to an on-prem server and also AWS. Some deployment pipelines use custom Powershell script for.Net application, some others use Bash script to execute the docker push and cloud formation template to build elastic beanstalk.
    Incentivized
    Read full review
    IBM
    HashiCorp Vault, in my opinion, is a defacto standard for any cloud or automation implementation. They're the best of the best as far as products for secrets management and the ability to use it against relatively any service you have is unheard of for other products. HashiCorp has really taken out all the stops when it comes to creating a nice, extensible tool that people can use to suit their needs.
    Incentivized
    Read full review
    Pros
    ThoughtWorks
    • Pipeline-as-Code works really well. All our pipelines are defined in yml files, which are checked into SCM.
    • The ability to link multiple pipelines together is really cool. Later pipelines can declare a dependency to pick up the build artifacts of earlier ones.
    • Agents definition is really great. We can define multiple different kinds of environments to best suit our diverse build systems.
    Incentivized
    Read full review
    IBM
    • The HTTP API you use to write and read secrets is open and can be used by any application.
    • It keeps our sensitive data/credentials out of our GitLab repositories.
    • Sealing and unsealing the Vault on demand adds an additional layer of security.
    Incentivized
    Read full review
    Cons
    ThoughtWorks
    • UI can be improved
    • Location for settings can be re-arranged
    • API for setting up pipeline
    Incentivized
    Read full review
    IBM
    • Session Management is terrible to manage
    • Monitoring is hard and not enough information
    • User management
    • Configuration is too complex
    • More user friendly UI
    Read full review
    Likelihood to Renew
    ThoughtWorks
    No answers on this topic
    IBM
    HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.
    Incentivized
    Read full review
    Usability
    ThoughtWorks
    No answers on this topic
    IBM
    We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.
    Incentivized
    Read full review
    Support Rating
    ThoughtWorks
    No answers on this topic
    IBM
    Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.
    Incentivized
    Read full review
    Alternatives Considered
    ThoughtWorks
    GoCD is easier to setup, but harder to customize at runtime. There's no way to trigger a pipeline with custom parameters.
    Jenkins is more flexible at runtime. You can define multiple user-provided parameters so when user needs to trigger a build, there's a form for him/her to input the parameters.
    Incentivized
    Read full review
    IBM
    HashiCorp Vault is way better than Azure Key Vault; it has more features and it goes beyond a key-value secret store.
    Incentivized
    Read full review
    Return on Investment
    ThoughtWorks
    • ROI has been good since it's open source
    • Settings.xml need to be backed up periodically. It contains all the settings for your pipelines! We accidentally deleted before and we have to restore and re-create several missing pipelines
    • More straight forward use of API and allows filtering e.g., pull all pipelines triggered after this date
    Incentivized
    Read full review
    IBM
    • Helped us reach our security compliance goals.
    • Helped us strengthen our security position in our infrastructure by improving on poor secret management practices.
    Incentivized
    Read full review
    ScreenShots

    IBM Vault Screenshots

    Screenshot of an example of writing a secret to Vault. Secrets are always encrypted and written to backend storage.Screenshot of the secrets menu to manage integrated secrets engines. Secrets Engines are components which store, generate, or encrypt data and are enabled at a path in Vault.Screenshot of where vault identity has support for groups. A group can contain multiple entities as its members. A group can also have subgroups.Screenshot of HCP Vault, which provides all of the power and security of Vault, without the complexity and overhead of managing it yourself.Screenshot of where to view entity client and non-entity client counts.Screenshot of MFA is built on top of the Identity system of Vault.