What is HCP Vault Secrets?

HCP Vault Secrets is Vault’s fully managed, multi-tenant SaaS platform that provides teams with secure and simplified workflows for secrets management with zero friction, low skills requirements, and a strong integration ecosystem to onboard more users and applications. Teams can interact with HCP Vault Secrets using the HCP command-line interface (CLI), HCP Portal, or HCP API.

HCP Vault Secrets

Centralized secrets lifecycle management for developers.

Get Started for Free

(opens in new tab)

When should I use HCP Vault Secrets?

Consider using HCP Vault Secrets when teams are:

• Managing a multi-cloud environment.
• Getting started with secrets management.
• Storing secrets across multiple cloud service providers or CI/CD flows.
• Reducing operational overhead by switching to a managed service.

Use cases

HCP Vault Secrets supports the following use cases:

• Centralized static KV secrets management.
• Versioning secrets.
• Automating secret rotation.
• Sync secrets to major cloud providers, GitHub, Vercel, and Kubernetes.

HCP Vault Dedicated vs. HCP Vault Secrets

HCP Vault Dedicated provides single-tenant, dedicated Vault Enterprise clusters you can deploy to different public cloud providers and regions. HCP manages the provisioning, operations, and maintenance of the cluster allowing organizations the flexibility to establish consistent identity based access workflows for secret access and data protection needs.

HCP Vault Secrets is a multi-tenant, SaaS platform providing teams secure and simplified workflows for secret lifecycle management. Manage and integrate secrets where you need them across your applications and infrastructure.

Key terms and concepts

Here are brief definitions of terms used in the documentation for HCP Vault Secrets.

Applications (apps)

An HCP Vault Secrets application represents a set of sensitive data (secrets) to isolate in a secure environment until a clients (systems or users) needs them.

Secrets

Secrets are key/value pairs which contain confidential or cryptographic material (API key, password, or any type of credentials) and scoped to an application. Within an application, the secret name must be unique.

You can access secrets stored and managed by HCP Vault Secrets using the HCP command-line interface (CLI), HCP Portal, or HCP API.

Secret versions

Secret versions are specific versions of a secret allowing you to track the changes of a secret. When you update a secret, it creates a new version of the secret.

Audit logs

Audit logs provide visibility into the various activities taking place within your application, as well as the source (who, when, where) of the activity.