Secrets Management · pricing · Updated September 2026
HashiCorp Vault (HCP) pricing (2026)
HashiCorp Vault (HCP)'s paid plans start at $1,152/mo (HCP Vault Dedicated — Essentials Small) as checked on 2026-09-05, read from HashiCorp Vault (HCP)'s own pricing page; 5 plans. Best for Large enterprises requiring self-hosted secrets infrastructure with full control. Every figure below links to its source and the date we captured it.
At a glance
- Entry price: $1,152/mo (HCP Vault Dedicated — Essentials Small)
- Free tier: Yes
- Compliance: HIPAA — · SOC 2 Yes · GDPR —
- Best for: Large enterprises requiring self-hosted secrets infrastructure with full control; Teams building zero-trust architectures with dynamic credentials; Organizations with strict data residency or HSM requirements; Kubernetes-heavy deployments using Vault Agent Injector or CSI Driver
As of · every figure below links to its source STALE · 2026-09-05
HashiCorp Vault (HCP) plans & pricing
| Plan | Monthly | Annual | Billing | Notes | Source |
|---|---|---|---|---|---|
| Community Edition (Self-Hosted) STALE · 2026-09-03 | $0 | — | Flat monthly | Open source, self-hosted. No HA, no disaster recovery, no namespaces. Infrastructure costs borne by operator. | developer.hashicorp.com |
| HCP Vault Dedicated — Development (XS) STALE · 2026-06-14 | not priced monthly | — | Flat monthly | As of 2026-06-15, no monthly price is recorded — the figure is unconfirmed. The Infisical blog source listed ~$0.62/hr (~$450/mo), but official HashiCorp docs (developer.hashicorp.com/hcp/docs/vault tiers-and-features) and independent sources (EnvManager) consistently price the single-node Development tier at ~$0.03/hr (~$22/mo) with no per-client fee (max 25 clients included). The $450 figure conflicts with the official-leaning sources and could not be independently confirmed, so it was left unrecorded rather than asserted. Per-client fee of $72.92/month per client applies only on Essentials/Standard tiers, not Development. | infisical.com |
| HCP Vault Dedicated — Essentials Small STALE · 2026-09-05 | $1152 | — | Flat monthly | ~$1.58/hr (~$1,152/mo). Additional per-client fee of $72.92/month per client. Medium ~$3.16/hr (~$2,307/mo), Large ~$7.49/hr (~$5,468/mo). Source is Infisical's 2026 pricing guide citing official HCP portal rates. | hashicorp.com |
| HCP Vault Dedicated — Standard Small STALE · 2026-09-05 | $1345 | — | Flat monthly | ~$1.84/hr (~$1,345/mo). Medium ~$3.69/hr (~$2,694/mo), Large ~$9.41/hr (~$6,870/mo). Additional per-client fee of $72.92/month per client. Source is Infisical's 2026 pricing guide citing official HCP portal rates. | hashicorp.com |
| Vault Enterprise (Self-Hosted) STALE · 2026-09-03 | quote-only | — | Custom / quote | Quote-only. Annual subscription pricing. Includes DR replication, namespaces, HSM support, Sentinel policies. Street pricing reportedly ~$14,238/year for small deployments per third-party sources. | hashicorp.com |
Last verified 2026-09-05. STALE marks a plan we have not re-checked at its source in over 30 days. Every plan above is marked — we flag rather than silently retain. Official HashiCorp pricing page (hashicorp.com/en/pricing?tab=vault) returned only Terraform pricing with no Vault USD figures. HCP Vault Dedicated cluster pricing sourced from Infisical's 2026 HashiCorp Vault Pricing guide (infisical.com/blog/hashicorp-vault-pricing) which cites official HCP portal rates. NOTE: HCP Vault Starter tier and HCP Vault Secrets SaaS were discontinued as of August 2025. Vault Community Edition remains free and self-hosted. Enterprise pricing is quote-only.
Price changes
Price on record
$1,152/moFirst on record 2026-06-27
A new dated entry is stamped here each time the price moves — the record builds itself.
Tracked since June 2026. No change record has cleared two sources yet, so nothing is published on the wire.
Capabilities
Integrations: AWS (IAM, KMS, RDS), Azure Active Directory, GCP, Kubernetes (CSI Driver, Agent Injector), Terraform, LDAP / Active Directory, PKI / Certificate Authority, GitHub Actions.
Key features: Dynamic secrets — generates short-lived credentials per request for databases, cloud IAM, PKI; Lease and renewal system for automatic secret expiry; Namespace isolation for multi-tenant deployments (Enterprise); HSM integration and FIPS 140-2/3 support (Enterprise); Comprehensive plugin ecosystem for auth methods and secret engines.
Plan limits: Community Edition: self-hosted only, no HA, no DR, no namespaces, no Enterprise features; HCP Vault Development cluster: max 25 clients; HCP Vault Secrets SaaS: discontinued August 2025; Enterprise: per-node or per-client pricing, quote-only.
Frequently asked questions
How much does HashiCorp Vault (HCP) cost?
HashiCorp Vault (HCP)'s paid plans start at $1,152/mo (HCP Vault Dedicated — Essentials Small), and it lists a $0 plan (Community Edition (Self-Hosted)); it has 5 published plans. Verified 2026-09-05.
Does HashiCorp Vault (HCP) support HIPAA?
HashiCorp Vault (HCP)'s public pages do not say whether it supports HIPAA. Its public pages also state SOC 2 compliance.
Does HashiCorp Vault (HCP) have a free plan?
Yes — HashiCorp Vault (HCP) publishes a free tier.
HashiCorp Vault (HCP) vs alternatives
Compare all secrets management · HashiCorp Vault (HCP) alternatives · True cost of secrets management · SOC 2 claims in secrets management · HIPAA claims in secrets management · GDPR claims in secrets management · Open data · MCP
More secrets management tools
Related categories
This standing as a plaque
HashiCorp Vault (HCP) currently holds a bronze deskmark here — Rank 7 of 8 · Secrets Management. Anyone may show it. There is nothing to apply for, nothing to pay, and displaying it changes no score: the standing comes from the published algorithm, which never reads commission data. We never ask anyone to show it, and its link carries rel="nofollow".
The image is drawn from our live data, so it follows the standing rather than freezing it: if HashiCorp Vault (HCP) moves up or down a tier, the plaque on your own site says so at our next publish. Nothing is tracked beyond the ordinary web-server log that records any image request.