cybersecuritycompanies.

Product of Product vendor · United States

Vault

Secrets and encryption as a service

Verified plan

Check the product’s documented scope, then validate the edition, integrations and deployment that fit your team.

THE PRODUCT / THE PROOF

What is documented?

Each answer applies to the product scope shown. Conditions and unknowns stay visible; a listing plan never turns an unknown into “supported.”

Supported

Customer-hosted deployment

Enterprise · Self-hosted

Vault Enterprise can be operated on customer-managed infrastructure. HCP Vault Dedicated is a different, managed deployment. The operator remains responsible for storage location, backups, availability and connected systems.

What is Vault? Deployment and storage ↗

Checked 2026-09-17
Supported

Entra ID sign-in

Enterprise · Self-hosted

Human users can sign into Vault through Entra ID (called Azure AD in this guide) using OIDC. Configure the identity-provider application, callback URLs, roles and policy/group mappings. This is inbound Vault authentication, not an SSO service for other applications.

Vault authentication for people ↗

Enterprise self-managed deployment ↗

Checked 2026-09-17
Supported

Machine identity

Enterprise · Self-hosted

Configured secrets engines issue short-lived machine credentials with leases and revocation; supported database engines can rotate static credentials. Target support, permissions and engine configuration determine coverage. Operate Vault Enterprise on customer-managed infrastructure. This does not establish estate-wide machine identity discovery or Boundary privileged-session features.

Vault dynamic credentials, leases and rotation ↗

Vault Enterprise self-managed secrets management ↗

Checked 2026-09-19
Supported

Vaulted machine secrets

Enterprise · Self-hosted

Configured secrets engines issue short-lived machine credentials with leases and revocation; supported database engines can rotate static credentials. Target support, permissions and engine configuration determine coverage. Operate Vault Enterprise on customer-managed infrastructure. This does not establish estate-wide machine identity discovery or Boundary privileged-session features.

Vault dynamic credentials, leases and rotation ↗

Vault Enterprise self-managed secrets management ↗

Checked 2026-09-19
Supported

Short-lived credentials

Enterprise · Self-hosted

Configured secrets engines issue short-lived machine credentials with leases and revocation; supported database engines can rotate static credentials. Target support, permissions and engine configuration determine coverage. Operate Vault Enterprise on customer-managed infrastructure. This does not establish estate-wide machine identity discovery or Boundary privileged-session features.

Vault dynamic credentials, leases and rotation ↗

Vault Enterprise self-managed secrets management ↗

Checked 2026-09-19

Evidence reflects reviewed sources, not an independent product test. Sources older than 180 days need a fresh check. Unlisted support is unknown.

Compare this product →

About HashiCorp

HashiCorp (IBM) is known for Vault, Terraform, and Boundary — infrastructure identity and secrets.

Focus
Identity · Cloud security
Location
San Francisco, United States