TrustRadius: an HG Insights company

IBM Vault

Score8.6 out of 10

32 Reviews and Ratings

Learn More

What is IBM Vault?

IBM Vault (formerly Hashicorp Vault) is an encryption tool for managing secrets including credentials, passwords and other secrets, providing access control, audit trail, and support for multiple authentication methods. It is available open source, or under an enterprise license.

Read more details.

Categories & Use Cases

Media

Screenshot of an example of writing a secret to Vault. Secrets are always encrypted and written to backend storage.
Screenshot of the secrets menu to manage integrated secrets engines. Secrets Engines are components which store, generate, or encrypt data and are enabled at a path in Vault.
Screenshot of where vault identity has support for groups. A group can contain multiple entities as its members. A group can also have subgroups.
Screenshot of HCP Vault, which provides all of the power and security of Vault, without the complexity and overhead of managing it yourself.
Screenshot of where to view entity client and non-entity client counts.
Screenshot of MFA is built on top of the Identity system of Vault.

1 / 6

Screenshot of an example of writing a secret to Vault. Secrets are always encrypted and written to backend storage.

Who Buys & Uses IBM Vault

IBM Vault Reviews

What users are saying about IBM Vault.
View all IBM Vault reviews

Vault is our solution to prepare safe environment for development and production

Incentivized
Bervianto Leo PratamaView profile
Software Engineer in Information Technology at Mitrais (501-1000 employees)

Use Cases and Deployment Scope

We're hosting Vault and integrating it with other tools, including Coder and Visual Studio Code. So, the developer will only host their credentials there and will use them to call other services like Atlassian, Bitbucket, a self-hosted LLM, and other external services. Those credentials are not hosted on the personal/business computer. Vault is helping us to keep secrets like Key/Value and SSH keys easily.

Pros

  • Storing/Generating SSH Keys
  • Storing Key-Value secrets such as API keys, etc.
  • Helping to provide secrets to third party services

Cons

  • We don't have any difficulties right now.

Return on Investment

  • Self-hosted Vault is helping us to meet the security requirement.

Usability

Transforming Zero trust security with IBM Vault

Incentivized
Verified User
Manager in Information Technology (5001-10000 employees)

Use Cases and Deployment Scope

IBM Vault is enterprise level secret management protection tool which helped us ti protect critical level data such as enreyption key, password and helped to comply with governance body, In many cases this is the tool where cirtical data such certificates and identity based access controls and compatible with both on premise and multi cloud infra,

Pros

  • Secretly helps to store Database keys
  • enterprase level tool with great support
  • feasible and compatible woth third party tools
  • safe deposit valts for certificates

Cons

  • User level report complexity can be minimised
  • required skilled and devlopement tool for delyment
  • can be more cost effective

Return on Investment

  • made comply as per govering body.
  • well supported for our ob prem and clound infra also
  • well transit and role asignment are simple
  • one negative impact is complex policy setup which take time for setup

Usability

Alternatives Considered

Forcepoint Data Security Cloud, Symantec Advanced Threat Protection, Thales CipherTrust Data Discovery and Classification and Thales Network Encryptors

Other Software Used

Thales Network Encryptors, Forcepoint Email Security, Palo Alto Networks Cortex XDR, Microsoft Azure, Cisco Identity Services Engine (ISE)

IBM Vault review

Incentivized
Verified User
Consultant in Engineering (5001-10,000 employees)

Use Cases and Deployment Scope

We use IBM Vault for keeping secrets and credentials that are used by multiple microservices using the api calls. We also get great access control on the paths for the secrets so only application that require the specific path will be able to access the secrets.

Pros

  • Secrets management
  • Access control
  • Versioning of secrets

Cons

  • Complexity of setting up Vault should be simplified
  • Policy management can be made easier on terraform
  • Version upgrade of Vault to be made easier

Return on Investment

  • Good security
  • User experience is great
  • Solves the secrets handling perfectly

Usability

Alternatives Considered

AWS Secrets Manager

Excellent choice for you business Secrets Management Solution

Fabricio Zubelli
DevOps Engineer in Engineering at Kea (51-200 employees)

Use Cases and Deployment Scope

We leverage HashiCorp Vault capabilities for storing and managing our secrets and company passwords. HashiCorp Vault integrates with applications and tools to enable transparent secure sensitive information retrieval programmatically. By leveraging HashiCorp Vault we can go with IAC/CAC on almost everything we build. HashiCorp Vault also makes it easy to share secrets between team members and the organization.

Pros

  • Store secrets
  • Store configurations
  • Integrate with kubernetes
  • Audit log of changes
  • Team secret sharing
  • Real time in transit encryption

Cons

  • Session Management is terrible to manage
  • Monitoring is hard and not enough information
  • User management
  • Configuration is too complex
  • More user friendly UI

Return on Investment

  • Vault enabled IAC for kubernetes applications
  • Central configuration for applications
  • Version Control on secrets
  • Improved the company security and secret sharing experience
  • Enabled the PCI compliance for the company

Alternatives Considered

Bitwarden and AWS Secrets Manager

Other Software Used

Cloudflare, Cloudflare Zero Trust Services, Amazon RDS Performance Insights, Amazon Kinesis, Amazon Simple Queue Service (SQS)

HashiCorp Vault - Credentials, passwords, and any kind of secrets in your environment reliably managed.

Incentivized
Erlon Sousa PinheiroView profile
DevOps Engineer in Information Technology at Two Hat Security (11-50 employees)

Pros

  • A great repository for credentials and secrets.
  • Good scalability with its own clustering solution and high availability.
  • Easy to install like other Hashicorp products, it is based on just one executable.

Cons

  • Documentation could be better.
  • The multiple key unseal process can be a problem if the need arises.
  • It would make more sense if HashiCorp Vault combined with HashiCorp Consul to create a unique product.

Return on Investment

  • Allowed better access control for credentials, passwords, and important keys.
  • After we started using HashiCorp Vault, we were able to base our environment 100% as code.
  • SSH access control that is possible using HashiCorp Vault adds an extra level of security in environments where external remote access is required.

Usability

Other Software Used

Microsoft Teams, Terraform, Amazon Relational Database Service

IBM Vault Alternatives

Products similar to IBM Vault that may also meet your needs.
View all IBM Vault alternatives
CyberArk Privileged Access Management
CompareLearn more
Delinea Secret Server
CompareLearn more
ARCON PAM
CompareLearn more