Looking into HashiCorp Vault? Check out Infisical for a simpler alternative with better developer experience, less maintenance, and faster onboarding.

Talk to an expert →
Vault pricing calculator · Vault TCO

What HashiCorp Vault actually costs

HashiCorp Vault is a powerful tool for secrets management, but its complexity makes it much more expensive than the invoices suggest. The real cost is engineers who run it and long onboarding. This Vault pricing calculator estimates all of it, based on official pricing and informed estimates.

Calculate your cost

Choose the closest profile match, then fine-tune every assumption to match your reality.

1Pick a profile
Profile

Your estimate
$— / yr

Pick the profile closest to your scenario on the left, then customize.

Infisical
A confession

We make a secrets manager too.

Full disclosure: we make a secrets manager too, so we're not a neutral source. We've kept the numbers grounded in HashiCorp's published pricing where it exists and estimated only where it doesn't.

Vault is a strong product. But if you're evaluating it, we'd encourage you to look at Infisical alongside it. We take a different approach: give teams the advanced capabilities they need without the operational weight that usually comes with them.

A few things that set us apart:

  • Simpler to operate. We build on PostgreSQL rather than Raft, so running and scaling Infisical looks like running a database you already know, not learning a new consensus system.
  • Powerful by default. A polished UI, automated rotations, dynamic secrets, and access policies and approval workflows all ship out of the box. No custom code to wire them together.
  • Open and portable. Infisical is open source and runs anywhere, whether that's multi-cloud, hybrid, or fully self-hosted.

Plenty of teams have evaluated both, and many have moved from Vault to Infisical for faster setup and lower day-to-day overhead. You may have solid reasons to choose Vault. We just think Infisical deserves a spot on your shortlist.

See what Infisical does →
How this Vault pricing calculator works

Every figure leans on HashiCorp's published pricing where it exists and flagged, conservative assumptions where it doesn't. Adjust the inputs to match your reality.

    How much does HashiCorp Vault cost?

    HashiCorp Vault pricing depends on which product you choose. There are three paths to production, and the price you are quoted on each is only one slice of the real total cost of ownership.

    The Vault pricing estimator above models all three paths and allows you to customize for your specific scenario. This section breaks down the published list prices behind it, what each pricing model includes, and the operational costs that never show up on an order form.

    HCP Vault Dedicated pricing

    HCP Vault Dedicated is HashiCorp's single-tenant managed cloud offering. It bills in two main ways: a fixed monthly fee for the cluster, and a per-client fee for everything that authenticates to it. There are two tiers, Essentials and Standard, across three cluster sizes, with published monthly cluster fees that range from about $1,152 to $6,870 depending on tier and size. The calculator at the top of this page works from those published figures.

    On top of the cluster fee, HCP Vault Dedicated charges $72.92 per client, per month on both tiers. A client is anything that authenticates to Vault: an application, a service, or a user. HashiCorp counts a billable client once per active billing period rather than once for its lifetime, so machine and short-lived identities can add up quickly. Cluster and per-client figures come from IBM's published HashiCorp Vault pricing, and the client counting documentation explains the billing-period rule.

    Vault Enterprise pricing (self-hosted)

    Vault Enterprise is the self-managed binary you run on your own infrastructure. HashiCorp does not publish a list price for it, so the cost comes through a custom sales quote, usually as an annual license that scales with usage. Several capabilities are Enterprise-only: namespaces, HSM and FIPS support, performance and disaster-recovery replication, Sentinel policy, and KMIP. Needing any one of them moves you onto Enterprise licensing. On top of the license you pay for your own highly available infrastructure and the team that operates it.

    Vault Community (open source) pricing

    Vault Community is free to download and run, and it is open source. The license costs nothing, but the infrastructure and the engineers who keep it running do not. For most teams that operational load is the largest line in the total, which is why a free tier rarely means a free year.

    A note on HCP Vault Secrets

    HCP Vault Secrets is a separate, multi-tenant product focused on secrets management alone, with its own usage-based pricing that is distinct from HCP Vault Dedicated. The calculator above models Dedicated, Enterprise, and Community, the three options teams compare when sizing a full Vault deployment.

    What HashiCorp Vault pricing leaves out

    The license or subscription is the visible cost. The total cost of ownership is usually dominated by everything around it:

    Use the calculator at the top of this page to put your own numbers against each of these.

    HashiCorp Vault pricing FAQ

    How much does HashiCorp Vault cost per month?

    HCP Vault Dedicated starts at about $1,152 per month for an Essentials cluster and $1,345 per month for Standard, plus $72.92 per client, per month. Vault Enterprise is quoted privately with no public list price, and Vault Community is free to license. The subscription is usually the smaller part of the real cost once you add the engineers and infrastructure needed to run it.

    What is Vault TCO (total cost of ownership)?

    Vault TCO, short for the total cost of ownership of HashiCorp Vault, combines the subscription or license, cloud infrastructure, the engineers who operate and upgrade Vault, the time it takes to reach production, and renewal increases. For most teams, staffing and operations are a large, indirect cost, which can even exceed the subscription itself. The Vault pricing calculator at the top of this page estimates the full figure from your own inputs.

    Is HashiCorp Vault free?

    Vault Community edition is free to license and can be self-hosted at no software cost, while HCP Vault Dedicated and Vault Enterprise are paid. The free edition is not free to operate, though: you still pay for highly available infrastructure and the engineering time to run, secure, and upgrade it.

    Is HashiCorp Vault open source?

    Vault is source-available rather than open source. In August 2023 HashiCorp relicensed it from the MPL 2.0 to the Business Source License (BSL 1.1), so the source is public and free to self-host for most uses, but you cannot use it to build a competing commercial offering. Teams that want a genuinely open-source secrets manager often evaluate alternatives such as Infisical.

    How much is Vault Enterprise?

    HashiCorp does not publish a list price for Vault Enterprise. It is sold through a custom quote, typically an annual license that scales with usage and with Enterprise-only modules such as namespaces, HSM and FIPS support, replication, and Sentinel. Larger deployments often carry professional-services or onboarding fees on top.

    What is the $72.92 fee in HashiCorp Vault pricing?

    $72.92 is the published HCP Vault Dedicated per-client, per-month fee, charged on both the Essentials and Standard tiers on top of the fixed cluster fee. A client is anything that authenticates to Vault, so the fee scales with the number of identities, and large contracts often negotiate the rate.

    What counts as a client in HCP Vault billing?

    A client is any application, service, or human user that authenticates to Vault. HCP counts a billable client once per active billing period rather than once for its lifetime, so short-lived and machine identities can be counted repeatedly and the bill grows with that activity.

    Is it cheaper to self-host Vault or use HCP Vault Dedicated?

    It depends on your scale and how you value engineering time. HCP Vault Dedicated removes the infrastructure and upgrade burden but adds per-client fees that rise with usage, while self-hosting Vault Community or Enterprise avoids per-client billing but shifts the cost to your own infrastructure and a team to handle upgrades, patching, and disaster recovery. The calculator above lets you compare both paths side by side.

    What are the hidden costs of HashiCorp Vault?

    The costs that rarely appear on a quote are engineering headcount, upgrades and patching, disaster-recovery drills, the weeks or months to reach production, and renewal increases. Because Vault is a toolkit rather than a finished product, these operational costs usually dominate the total cost of ownership.

    How many engineers does it take to run HashiCorp Vault?

    It scales with your deployment, but teams commonly dedicate around half an engineer for a small single-cluster setup, one to two for a mid-market platform, and three to five or more for a multi-region enterprise. Vault's auth methods, policies, secret engines, and upgrades are configured and maintained by hand, which usually needs a dedicated platform or security owner.

    How long does it take to deploy HashiCorp Vault to production?

    A single cluster can be running in days, but a production-grade deployment with high availability, storage, unseal, auth methods, policies, and integrations commonly takes several weeks, and multi-region or compliance-heavy setups can run three to six months. This one-time ramp is a real cost that teams often underestimate.

    Does HashiCorp Vault pricing increase at renewal?

    Because pricing is based on clients and features, the bill grows as your identities and requirements grow, and users have reported price increases at contract renewal. Separately, procurement data from Vendr shows support-tier upgrades and professional-services fees commonly add 25 to 60 percent on top of the initial quote.

    Are there alternatives to HashiCorp Vault that don't compromise on features?

    Yes. Infisical is a secrets management platform that also offers privileged access and certificate management. It has most of what Vault offers, but is much simpler to operate. Most features ship out of the box (no custom logic) and you can host it on any infrastructure.