HashiCorp Vault vs. Octopus Deploy

HashiCorp Vault, in my opinion, is a defacto standard for any cloud or automation implementation. They're the best of the best as far as products for secrets management and the ability to use it against relatively any service you have is unheard of for other products. HashiCorp has really taken out all the stops when it comes to creating a nice, extensible tool that people can use to suit their needs.

Incentivized

Octopus Deploy is a well though [the] solution to the deployment orchestration problem. It is a reliable and robust solution that is relatively simple to understand. [Its] UI is friendly and easy to use, The support and documentation [are] excellent and the product seems to fit into any organization’s process very well and with less effort than other products in this space. I actually find it a pleasure to work with [every day] and I am glad to have it as an integral part of our process.

Incentivized

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

Incentivized

• Octopus integrates nicely with TeamCity, our build server.
• Octopus uses the same deployment packages across environments and makes it easy to track their progress across those environments.
• Octopus makes it easy to handle configuration across environments which is usually a particularly difficult task.

Incentivized

• Session Management is terrible to manage
• Monitoring is hard and not enough information
• User management
• Configuration is too complex
• More user friendly UI

• UI is very fluffy and padded. It looks pretty but it could benefit from a more compact, information-focused design
• Deployment process options are not always laid out in an intuitive manner. Choosing which steps to exclude, which environments or targets to deploy to, etc., is not immediately clear
• Lack of useful reports and metrics for tracking active deployments and historical data

Incentivized

HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.

Incentivized

Would be a 10 except for the retirement of the free Community Edition.

Incentivized

We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.

Incentivized

Octopus Deploy has greatly helped us to improve our reliability and frequency of our deployments and given us the confidence to deploy much more often, with a direct benefit to customers. Cross-platform support and release to Cloud require more focus on the product side.

Incentivized

Octopus Deploy is a software that runs very effectively, is easy to use, does not require such a high learning curve, provides the necessary tools to carry out the functions it offers, making it a very flexible software, it also allows that can be configured according to the needs of the user and provides integrations with other very advantageous tools since they are carried out in a very favorable way.

Incentivized

Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.

Incentivized

Octopus Deploy support has always been there for us, even when using the free tier, we get responsive hands-on help. We haven't needed to use that level of support since the documentation is clearly written, and help is readily available within the interface itself. Using Octopus Deploy is a truly joyful experience.

Incentivized

HashiCorp Vault is way better than Azure Key Vault; it has more features and it goes beyond a key-value secret store.

Incentivized

There aren't really any competitors in the land of ASP.NET. Deployment is too ad-hoc. Other tools exist that have massive downsides, like Web Deploy. Most aren't even supported anymore. You could argue that containers (Docker) are a competitor, but containers cannot be used for everything and solve a somewhat different problem. Octopus Deploy is even able to help with containers. To us, Octopus Deploy was really the only really polished solution.

Incentivized

Great support from professional services.

Incentivized

• Helped us reach our security compliance goals.
• Helped us strengthen our security position in our infrastructure by improving on poor secret management practices.

Incentivized

• While not an inexpensive product, it has proven to be a good value. I don't have firm ROI numbers but our PROD deployment quality has improved, and we now measure deployment times in "person-minutes" rather than "person-hours".
• Our defect rate due to missed configuration items has been significantly reduced.
• Octopus has enhanced our ability to enforce SDLC separation-of-duties.

Incentivized