Tools/HashiCorp_Vault
HashiCorp Vault
The dominant open-source secrets manager — dynamic secrets, encryption-as-a-service, and pluggable automated rotation, generally considered more feature-rich than the AWS-native services it replaces. Most-used open-source alternative to AWS_Secrets_Manager and AWS_KMS; for hardware-backed key storage matching AWS_CloudHSM's guarantees, Vault is typically paired with SoftHSM (dev/test) or dedicated HSM hardware, since software alone can't meet FIPS 140-2 Level 3 certification.