HashiCorp Vault vs. Trustwave DbProtect

HashiCorp Vault, in my opinion, is a defacto standard for any cloud or automation implementation. They're the best of the best as far as products for secrets management and the ability to use it against relatively any service you have is unheard of for other products. HashiCorp has really taken out all the stops when it comes to creating a nice, extensible tool that people can use to suit their needs.

Incentivized

Monitoring database activity internally was a huge concern for my company, which is why we implemented DbProtect. I would recommend this to anyone that has lower end traffic on their SQL servers. My company appeared to be too big for DbProtect and was not a good fit, but it would be useful for a smaller company.

Incentivized

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

Incentivized

• Easy to create filters.
• Interface was easy to use.
• Process to create filters as straight forward.

Incentivized

• Documentation could be better.
• The multiple key unseal process can be a problem if the need arises.
• It would make more sense if HashiCorp Vault combined with HashiCorp Consul to create a unique product.

Incentivized

• Speed of interface.
• The trace function utilized high resources at times and would sometimes crash servers.
• Support could have been better, but this is when the company was under Trustwave and even the owners before then.

Incentivized

HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.

Incentivized

We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.

Incentivized

Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.

Incentivized

HashiCorp Vault is way better than Azure Key Vault; it has more features and it goes beyond a key-value secret store.

Incentivized

The price is the complete opposite and Imperva provided things that DbProtect did not. I would suggest a cleaner interface and more reporting in DbProtect. These things may exist now, but did not when I was a customer of DbProtect. DbProtect when configured correctly will do what you want it to and help secure databases.

Incentivized

• Helped us reach our security compliance goals.
• Helped us strengthen our security position in our infrastructure by improving on poor secret management practices.

Incentivized

• Increase employee efficiency by putting all the information in front of us via alerts.
• Helped secure our database tables.
• I believe better customer service is needed for this product.

Incentivized