HashiCorp Vault vs. Zoho Vault

Vault is a reliable and resilient as the Key Management System. It is not for the novice user that does not have a background in information security. It requires a significant time investment into the different key engines that the solution offers to get started. It works very well once implemented and is very flexible in general.

Incentivized

The reason I selected 7/10 is because I don't have any experience using other systems similar to Zoho Vault. It works fine for us, but I also have experience with Zoho Recruit, and based on that experience, I know that there are better choices out there. I would encourage anyone I was recommending this product to, to also research similar products.

Incentivized

• The HTTP API you use to write and read secrets is open and can be used by any application.
• It keeps our sensitive data/credentials out of our GitLab repositories.
• Sealing and unsealing the Vault on demand adds an additional layer of security.

Incentivized

• Organizes credentials.
• Keeps them securely stored.
• Chambers/options to restrict views.

Incentivized

• Documentation for the API moves slower than changes in the API itself
• The database secret engine's API design isn't as elegant as it could be
• No support for revocation of all secrets under one path

Incentivized

• They recently changed the look/feel as an upgraded experience, but my team prefers the old look.
• The ability to share "chambers" (organized buckets of logins) should be a feature. Right now, we can create chambers, but not share them with other users. So everyone has to create their own chambers.
• I would appreciate the ability to have automated reminders from the system to update passwords or to change after a designated amount of time.

Incentivized

HashiCorp Vault is the best there is out there, and it has become critical to our secret management use cases. It would be difficult to find anything that would suit our needs better and that would be beneficial for us to switch over to.

Incentivized

We spent a little more time than we imagined to conceptually understand how HashiCorp Vault operates, as well as how it is configured. This is not trivial, and keep in mind that you will need to take some time to get a thorough understanding of the tool. The documentation could be more helpful in this regard.

Incentivized

I selected 8/10 because while I don't have any experience using other products similar to Zoho Vault, I do believe it is easy to use and maintain. We do not have any problems using this product and have never needed to contact customer support.

Incentivized

Hashicorp has been very responsive to our questions and inquiries up to this point. We are currently working on them to develop a more granular permissions model within Vault. We are very close to achieving our objectives with the help of their support team. We do not seem to be in the same time zone which makes it hard for escalated issues.

Incentivized

Never really needed to use the customer support of Zoho Vault, but all other Zoho services have excellent support and excellent forums to participate in, and I don't assume Zoho Vault would have anything less

Incentivized

HashiCorp Vault integrates with a lot of tools and systems, and the documentation was pretty robust with a lot of community help. Because HashiCorp Vault is also older than other solutions, it is already well developed with a lot of features you need for storing secrets and configuration. HashiCorp Vault is also friendlier towards application build and is focused in providing security and a lot of customization for almost any use case scenario. Bitwarden is more limited to password management of enterprise accounts, but for application usage is not that great or easy to integrate. It does not scale well also. AWS Secrets Manager on the other hand is really good but more limited to AWS applications and vendor lock is problematic as well for such a critical piece of infrastructure.

Zoho Vault is very competitive when compared to LastPass for Business. It has all the features that LastPass provides and then some. When compared to KeePass, being an online application, Zoho Vault is cross-platform so overcomes the advantages of KeePass being a cross-platform opensource tool, that is especially used by Linux users across the world.

Incentivized

• Allowed better access control for credentials, passwords, and important keys.
• After we started using HashiCorp Vault, we were able to base our environment 100% as code.
• SSH access control that is possible using HashiCorp Vault adds an extra level of security in environments where external remote access is required.

Incentivized

• Inexpensive when packaged with other Zoho products.
• Saved time on projects by being easy to access
• We ended up importing all of our Vault passwords into another program very easily.

Incentivized