Back to all tools
Free-Limited
Tool Comparison
HashiCorp Vault
Secure, store, and tightly control access to tokens, passwords, and certificates.
VS
At a Glance
| Attribute | HashiCorp Vault | CyberArk Conjur |
|---|---|---|
| License / Pricing | Free-Limited | Free-Limited |
| Type | DevOps | DevOps |
| GitHub Stars | — | — |
| Rating | 4.7/5 | 4.4/5 |
| Key Features | 6 listed | 6 listed |
| Integrations | 7 listed | 5 listed |
| Categories | SecuritySecrets Management | SecuritySecrets Management |
Key Features
HashiCorp Vault
- Dynamic secrets — generate short-lived credentials on demand for AWS, databases, and more
- All secrets have a TTL and are automatically revoked on expiry
- Multiple auth methods: Kubernetes, AWS IAM, LDAP, GitHub, and AppRole
- Transit secrets engine for encryption-as-a-service
- PKI secrets engine for automated internal TLS certificate management
- Detailed audit log for every secret access and policy change
CyberArk Conjur
- Policy-as-code: define access rules in human-readable YAML policies
- Kubernetes authentication via service account token review
- Secrets Provider sidecar and init container for Kubernetes secret injection
- Credential rotation for databases and cloud platforms
- Fine-grained permission model: hosts, layers, variables, and grants
- Open-source Conjur OSS with enterprise DAP (Dynamic Access Provider) option
Real-World Use Cases
HashiCorp Vault
Dynamic database credentials for microservices
Configure Vault's database secrets engine with a PostgreSQL connection
Injecting secrets into Kubernetes pods
Install the Vault Agent Injector via Helm into the cluster
CyberArk Conjur
Kubernetes workload secret injection
Define a Conjur policy granting a Kubernetes service account access to specific secrets
Integrations
HashiCorp Vault
kubernetesterraformansiblejenkinsgithub-actionsaws-secrets-managerdoppler
CyberArk Conjur
kubernetesansibleterraformjenkinsgithub-actions
🏆 Which should you choose?
Choose HashiCorp Vault if…
- → you're already in the Security ecosystem and prefer HashiCorp Vault's workflow
Choose CyberArk Conjur if…
- → you're already in the Security ecosystem and prefer CyberArk Conjur's workflow