Best HashiCorp Vault Alternatives
Infrastructure secrets and dynamic credential engine. Following HashiCorp’s BSL license change and steep Vault Enterprise per-client pricing, teams adopt Linux Foundation forks and modern secret platforms.
Security · Markdown Spec
- Infisical — Open-source secrets, internal PKI, dynamic credentials, and Kubernetes sync platform (Score: 90.0, Open Core, MIT / Enterprise)
- OpenBao — Linux Foundation MPL-2.0 open-source community fork of HashiCorp Vault (Score: 76.5, Free & Open Source, MPL-2.0)
- SOPS (Mozilla / CNCF) — Git-committed encrypted YAML, JSON, ENV, and INI files backed by age or Cloud KMS (Score: 73.3, Free & Open Source, MPL-2.0)
- External Secrets Operator + age — CNCF Kubernetes operator synchronizing external KMS stores into native K8s Secrets (Score: 51.1, Free & Open Source, Apache-2.0)
- Doppler — Developer-first multi-cloud environment variable and secret sync orchestrator (Score: 50.8, Freemium, Proprietary)