Side-by-side comparison

Industry-standard secrets engine with dynamic credentials, PKI and encryption-as-a-service; BSL, owned by IBM.

Linux Foundation open-source (MPL) fork of Vault, API-compatible, created after HashiCorp's license change.

Open-source secrets platform with environment sync, dynamic secrets, PKI and Kubernetes integration.

Encrypts values in YAML, JSON and .env files with KMS, age or PGP so secrets can live in Git; CNCF project.