Secrets Management · pricing · Updated September 2026

HashiCorp Vault (HCP) pricing (2026)

HashiCorp Vault (HCP) starts at $0/mo (Community Edition (Self-Hosted)) as checked on 2026-09-05, read from HashiCorp Vault (HCP)'s own pricing page; 5 plans. Best for Large enterprises requiring self-hosted secrets infrastructure with full control. Every figure below links to its source and the date we captured it.

Publishes real pricing SOC 2

At a glance

  • Entry price: $0/mo (Community Edition (Self-Hosted))
  • Free tier: Yes
  • Compliance: HIPAA — · SOC 2 Yes · GDPR —
  • Best for: Large enterprises requiring self-hosted secrets infrastructure with full control; Teams building zero-trust architectures with dynamic credentials; Organizations with strict data residency or HSM requirements; Kubernetes-heavy deployments using Vault Agent Injector or CSI Driver

As of · every figure below links to its source STALE · 2026-06-14

HashiCorp Vault (HCP) plans & pricing

All published HashiCorp Vault (HCP) plans. Sourced per row; quote-only tiers show no price.
PlanMonthlyAnnualBillingNotesSource
Community Edition (Self-Hosted) $0 flat Open source, self-hosted. No HA, no disaster recovery, no namespaces. Infrastructure costs borne by operator. developer.hashicorp.com
HCP Vault Dedicated — Development (XS) not priced monthly flat VERIFIER NOTE (2026-06-15): monthlyUsd set to null — figure unconfirmed. The Infisical blog source listed ~$0.62/hr (~$450/mo), but official HashiCorp docs (developer.hashicorp.com/hcp/docs/vault tiers-and-features) and independent sources (EnvManager) consistently price the single-node Development tier at ~$0.03/hr (~$22/mo) with no per-client fee (max 25 clients included). The $450 figure conflicts with the official-leaning sources and could not be independently confirmed, so it was nullified rather than asserted. Per-client fee of $72.92/month per client applies only on Essentials/Standard tiers, not Development. infisical.com
HCP Vault Dedicated — Essentials Small $1152 flat ~$1.58/hr (~$1,152/mo). Additional per-client fee of $72.92/month per client. Medium ~$3.16/hr (~$2,307/mo), Large ~$7.49/hr (~$5,468/mo). Source is Infisical's 2026 pricing guide citing official HCP portal rates. hashicorp.com
HCP Vault Dedicated — Standard Small $1345 flat ~$1.84/hr (~$1,345/mo). Medium ~$3.69/hr (~$2,694/mo), Large ~$9.41/hr (~$6,870/mo). Additional per-client fee of $72.92/month per client. Source is Infisical's 2026 pricing guide citing official HCP portal rates. hashicorp.com
Vault Enterprise (Self-Hosted) quote-only custom Quote-only. Annual subscription pricing. Includes DR replication, namespaces, HSM support, Sentinel policies. Street pricing reportedly ~$14,238/year for small deployments per third-party sources. hashicorp.com

Last verified 2026-09-05. STALE · 2026-06-14 Official HashiCorp pricing page (hashicorp.com/en/pricing?tab=vault) returned only Terraform pricing with no Vault USD figures. HCP Vault Dedicated cluster pricing sourced from Infisical's 2026 HashiCorp Vault Pricing guide (infisical.com/blog/hashicorp-vault-pricing) which cites official HCP portal rates. NOTE: HCP Vault Starter tier and HCP Vault Secrets SaaS were discontinued as of August 2025. Vault Community Edition remains free and self-hosted. Enterprise pricing is quote-only. Re-verified 2026-09-03 against the live pricing page; published figures unchanged.

Price changes

Price on record

$1152/mo

First on record 2026-06-27

A new dated entry is stamped here each time the price moves — the record builds itself.

Tracked since June 2026. No change record has cleared two sources yet, so nothing is published on the wire.

Capabilities

Integrations: AWS (IAM, KMS, RDS), Azure Active Directory, GCP, Kubernetes (CSI Driver, Agent Injector), Terraform, LDAP / Active Directory, PKI / Certificate Authority, GitHub Actions.

Key features: Dynamic secrets — generates short-lived credentials per request for databases, cloud IAM, PKI; Lease and renewal system for automatic secret expiry; Namespace isolation for multi-tenant deployments (Enterprise); HSM integration and FIPS 140-2/3 support (Enterprise); Comprehensive plugin ecosystem for auth methods and secret engines.

Plan limits: Community Edition: self-hosted only, no HA, no DR, no namespaces, no Enterprise features; HCP Vault Development cluster: max 25 clients; HCP Vault Secrets SaaS: discontinued August 2025; Enterprise: per-node or per-client pricing, quote-only.

Frequently asked questions

How much does HashiCorp Vault (HCP) cost?

HashiCorp Vault (HCP) starts at $0/mo (Community Edition (Self-Hosted)); it has 5 published plans. Verified 2026-09-05.

What are cheaper alternatives to HashiCorp Vault (HCP)?

Cheaper secrets management than HashiCorp Vault (HCP) (entry $0/mo) include Doppler at $8/mo, 1Password (Secrets Automation) at $10.99/mo, Infisical at $20/mo. Verified 2026-09-05.

Does HashiCorp Vault (HCP) support HIPAA?

HashiCorp Vault (HCP) HIPAA support: —. SOC 2: Yes. GDPR: —.

Does HashiCorp Vault (HCP) have a free plan?

HashiCorp Vault (HCP) free tier: Yes.

HashiCorp Vault (HCP) vs alternatives

Compare all secrets management · HashiCorp Vault (HCP) alternatives · True cost of secrets management · SOC 2-certified secrets management · HIPAA-compliant secrets management · GDPR-compliant secrets management · Open data · MCP

Cheaper secrets management alternatives

More secrets management tools

All secrets management ranked

Related categories

Display this standing

HashiCorp Vault (HCP) currently holds a bronze deskmark here — Rank 7 of 8 · Secrets Management. Anyone may show it. There is nothing to apply for, nothing to pay, and displaying it changes no score: the standing comes from the published algorithm and money never touches it.

Bronze Deskmark — HashiCorp Vault (HCP), Rank 7 of 8 · Secrets Management, The Front Desk Review

The image is drawn from our live data, so it follows the standing rather than freezing it: if HashiCorp Vault (HCP) moves up or down a tier, the plaque on your own site says so at our next publish. Nothing is tracked beyond the ordinary web-server log that records any image request.