awesome-repositories.com
Blog
awesome-repositories.com

Descubre los mejores repositorios open-source con nuestra búsqueda potenciada por IA.

ExplorarBúsquedas curadasAlternativas open-sourceSoftware autohospedableBlogMapa del sitio
ProyectoAcerca deCómo clasificamosPrensaServidor MCP
Aviso legalPrivacidadTérminos
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
hashicorp avatar

hashicorp/vault

0
View on GitHub↗
developer.hashicorp.com/vault↗

Vault

Vault is a centralized secrets management platform designed to secure, store, and control access to sensitive credentials such as API keys, passwords, certificates, and encryption keys. At its core, the system employs a barrier-based cryptographic sealing mechanism that requires an unseal process to decrypt internal storage, ensuring that sensitive data remains protected. It provides identity-based access control to manage granular permissions across distributed infrastructure, effectively centralizing security policies and authentication for both human and machine workloads.

What distinguishes Vault is its ability to generate dynamic, short-lived credentials on-demand for databases and cloud providers, which are automatically revoked upon lease expiration to minimize security exposure. The platform also functions as an encryption-as-a-service provider, allowing applications to offload data protection, tokenization, and key management tasks to a centralized interface. Its modular architecture is supported by an extensible plugin system that uses remote procedure calls to integrate new functionality without requiring modifications to the primary codebase.

Beyond core secret handling, the platform offers comprehensive certificate lifecycle automation, including the generation, storage, and rotation of security certificates to maintain encrypted communication channels. It supports high-availability deployments through a distributed consensus protocol that synchronizes state across clusters and automatically forwards requests to the active leader node. The system also integrates with hardware security modules for enhanced key protection and maintains detailed audit logs to support regulatory compliance requirements.

Users interact with the platform through a command-line interface that supports API endpoint invocation, environment variable configuration, and shell autocompletion for operational tasks.

Features

  • Secrets Management Platforms - Acts as a centralized platform to secure, store, and control access to all infrastructure secrets.
  • Centralized Secrets Management - Centralizes the storage and management of sensitive credentials to eliminate hardcoded secrets.
  • Cryptographic Sealing Mechanisms - Provides a master key mechanism to encrypt internal storage, requiring an explicit unseal process to access data.
  • Dynamic Secret Engines - Integrates with external providers to create short-lived, just-in-time credentials that are automatically destroyed after use.
  • Identity-Based Access Control - Centralizes identity providers to manage granular permissions and enforce consistent security policies across distributed infrastructure.

Búsqueda con IA

Explora más repositorios increíbles

Describe lo que necesitas en lenguaje sencillo: la IA clasifica miles de proyectos open-source curados por relevancia.

Start searching with AI
35,796 estrellas·4,699 forks·Go·27 vistas
  • Secret Storage - Stores and retrieves sensitive data like API keys and passwords in a centralized, encrypted location.
  • Certificate Lifecycle Management - Automatically generates, stores, and rotates security certificates to maintain encrypted communication channels.
  • Cloud Credential Management - Generates dynamic cloud service principals with automatic rotation and lease-based revocation.
  • Dynamic Credential Provisioning - Generates short-lived, automatically rotated credentials to minimize the impact of potential security breaches.
  • Encryption-as-a-Service - Provides a cryptographic layer for data protection, tokenization, and key management without requiring complex local implementation.
  • Identity-Based Access Brokers - Verifies identities to issue short-lived, dynamic credentials across heterogeneous environments.
  • Plugin Architectures - External binaries communicate with the core system via remote procedure calls to extend functionality without modifying the primary codebase.
  • Distributed Consensus Protocols - Coordinates nodes through a distributed consensus protocol to maintain a consistent, replicated state across a high-availability cluster.
  • Database Credential Management - Rotates database passwords automatically and generates unique, short-lived credentials on-demand.
  • Dynamic Credential Providers - Provides on-demand generation and rotation of temporary access permissions for external databases and cloud services.
  • Hardware Security Module Integrations - Connects to hardware security modules to protect master keys and enable automated system unsealing.
  • Lease Management Systems - Associates all generated credentials and secrets with time-bound leases that trigger automatic revocation or renewal.
  • Secret Retrieval Interfaces - Enables applications to securely fetch required credentials from protected storage without exposing them.
  • Sensitive Data Access Controls - Enforces granular access controls on sensitive data through programmatic and command-line interfaces.
  • Secret Management - Centralized management for tokens, passwords, and encryption keys.
  • Secrets Management - Centralized secrets management and encryption platform.
  • Security and Compliance - Secrets management platform.
  • Seguridad y endurecimiento - Tool for managing and accessing secrets and API keys.
  • Seguridad y privacidad - Secrets management and encryption service.
  • Security & Privacy - Secrets management.
  • High-Availability Request Routing - Automatically redirects client requests to the active leader node to ensure consistent state management in distributed environments.
  • Encryption Key Management - Centralizes the distribution and lifecycle management of cloud-based encryption keys.
  • Secret Storage Engines - Provides secure, encrypted storage for sensitive key-value pairs to prevent hardcoding secrets.
  • Workload Identity Federation - Exchanges internal identity tokens for short-lived cloud credentials to enable secure cross-platform authentication.
  • Server Operational Management - Defines core operational behavior including storage backends, network listeners, and user lockout policies.
  • Storage Abstraction Layers - Provides a pluggable storage interface that decouples core logic from the underlying persistence layer.
  • Cluster Configuration Management - Defines cluster communication addresses and node behavior to ensure continuous service availability.
  • Centralized Identity Management - Consolidates multiple authentication providers to manage access policies from a single location.
  • Data Encryption Services - Encrypts and decrypts external data using a centralized service to simplify security management.
  • Distributed Security Clusters - Ensures consistent policy enforcement and high availability through a synchronized distributed security architecture.
  • Enterprise Configuration Management - Manages advanced operational settings including performance standby nodes, license paths, and administrative namespaces.
  • Plugin Architectures - Uses a modular architecture where external binaries extend core functionality without modifying the primary codebase.
  • Authentication Helpers - Verifies user identity and utilizes custom token helpers to manage cached access credentials securely.
  • Data Tokenization - Transforms sensitive input into secure, stateful tokens using cryptographic standards.
  • OIDC Identity Token Issuance - Issues OIDC identity tokens to applications, enabling authentication based on internal roles and custom claims.
  • Regulatory Compliance Tools - Provides centralized audit logging and policy enforcement to maintain regulatory compliance for sensitive data.

    • Historial de estrellas

    Gráfico del historial de estrellas de hashicorp/vaultGráfico del historial de estrellas de hashicorp/vault

    Preguntas frecuentes

    ¿Qué hace hashicorp/vault?

    Vault is a centralized secrets management platform designed to secure, store, and control access to sensitive credentials such as API keys, passwords, certificates, and encryption keys. At its core, the system employs a barrier-based cryptographic sealing mechanism that requires an unseal process to decrypt internal storage, ensuring that sensitive data remains protected. It provides identity-based access control to manage granular permissions across distributed…

    ¿Cuáles son las características principales de hashicorp/vault?

    Las características principales de hashicorp/vault son: Secrets Management Platforms, Centralized Secrets Management, Cryptographic Sealing Mechanisms, Dynamic Secret Engines, Identity-Based Access Control, Secret Storage, Certificate Lifecycle Management, Cloud Credential Management.

    ¿Qué alternativas de código abierto existen para hashicorp/vault?

    Las alternativas de código abierto para hashicorp/vault incluyen: stackexchange/blackbox — Blackbox is a GPG secret management tool and asymmetric encryption wrapper used to securely store and share sensitive… openbao/openbao — OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and… octelium/octelium — Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and… keycloak/keycloak — Keycloak is an open-source identity and access management server that provides a centralized platform for user… gravitational/teleport — Teleport is a zero-trust access platform designed to provide secure, identity-based connectivity to servers,… bitwarden/server — This project provides a comprehensive, self-hosted platform for zero-knowledge credential management and enterprise…

    Alternativas open-source a Vault

    Proyectos open-source similares, clasificados según cuántas características comparten con Vault.
    • stackexchange/blackboxAvatar de StackExchange

      StackExchange/blackbox

      6,768Ver en GitHub↗

      Blackbox is a GPG secret management tool and asymmetric encryption wrapper used to securely store and share sensitive files within version control systems like Git, Mercurial, or Subversion. It functions as a version control secret store that encrypts files for safe storage at rest while allowing authorized users and machines to decrypt them. The system distinguishes itself by integrating directly with version control to provide plaintext diff and log visualization of encrypted files. It supports multi-recipient encryption and automated secret decryption via passphrase-less GPG subkeys, enabl

      Go
      Ver en GitHub↗6,768
    • openbao/openbaoAvatar de openbao

      openbao/openbao

      6,433Ver en GitHub↗

      OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

      Gogosecret-managementsecurity
      Ver en GitHub↗6,433
    • octelium/octeliumAvatar de octelium

      octelium/octelium

      3,371Ver en GitHub↗

      Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,

      Goabacai-gatewayapi-gateway
      Ver en GitHub↗3,371
    • keycloak/keycloakAvatar de keycloak

      keycloak/keycloak

      34,934Ver en GitHub↗

      Keycloak is an open-source identity and access management server that provides a centralized platform for user authentication, authorization, and identity federation. It functions as a standards-compliant identity provider, utilizing a centralized engine to validate credentials and issue cryptographically signed tokens based on industry-standard protocols like OpenID Connect and SAML. This enables organizations to secure diverse applications and services through a unified authentication layer. The platform distinguishes itself through its cloud-native orchestration and high-availability capab

      Javakeycloakoidcsaml
      Ver en GitHub↗34,934
    Ver las 30 alternativas a Vault→