HashiCorp Vault vs. Self Service Reset Password Management

HashiCorp Vault, in my opinion, is a defacto standard for any cloud or automation implementation. They're the best of the best as far as products for secrets management and the ability to use it against relatively any service you have is unheard of for other products. HashiCorp has really taken out all the stops when it comes to creating a nice, extensible tool that people can use to suit their needs.

Incentivized

It's a great tool for limiting (eliminating) calls to your IT department or Help Desk to assist with Windows Login issues. For organizations that don't mind having a dedicated onsite or hosted server to provide this type of service its a great tool to have implemented in the environment.

Incentivized

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

Incentivized

• It provides ease of use in assisting end users with login issues.
• Provides self-service when passwords or account assistance is needed.

Incentivized

• Documentation could be better.
• The multiple key unseal process can be a problem if the need arises.
• It would make more sense if HashiCorp Vault combined with HashiCorp Consul to create a unique product.

Incentivized

• The product serves its purpose fairly well. Perhaps an additional feature that can assist remote users would be beneficial.
• Sending alerts or notifications when a user has been locked out would be great. We are able to access this information from the Admin Portal but a system generated email would be helpful.

Incentivized

HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.

Incentivized

We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.

Incentivized

Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.

Incentivized

HashiCorp Vault is way better than Azure Key Vault; it has more features and it goes beyond a key-value secret store.

Incentivized

There were no other services that we had the opportunity to compare this to. It seemed to be one of a kind product aside from using some type of biometrics solution.

Incentivized

• Helped us reach our security compliance goals.
• Helped us strengthen our security position in our infrastructure by improving on poor secret management practices.

Incentivized

• It has helped us reduce cost on the amount of time spent on assisting users with Windows Login issues.
• A decreased number of calls to our Help Desk allowing for IT to work on bigger tasks.

Incentivized