{
"canonical_url": "infisical.com/compare/infisical-vs-hashicorp-vault.md",
"capabilities": [],
"category": null,
"classification": {
"matched": {
"cybersecurity": [
"secrets"
]
},
"taxonomy_version": "sar-taxonomy-1.0"
},
"commercial": null,
"compliance": [
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "HIPAA: BAA available (vendor-claimed, 2026-10-26)",
"evidence_url": "https://infisical.com/",
"framework": "hipaa",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "af0c11162930ee9d0252e96f72cd61a17ec588242bfc298dc7a5645e5ef9baff",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:52Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://infisical.com/",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "af0c11162930ee9d0252e96f72cd61a17ec588242bfc298dc7a5645e5ef9baff",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:52Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
}
],
"deployment": null,
"description": "How Infisical and HashiCorp Vault differ on secrets, rotation, syncs, access requests, certificates with Vault PKI, encryption, and running the cluster, and how to migrate from Vault.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"cybersecurity": {
"components": {
"adoption": null,
"docs": 9.0,
"domain_fit": 34.0,
"ecosystem": 4.6,
"governance": 3.0,
"health": null,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.34,
"evidence_coverage": 0.65,
"governance_credited": {
"soc2": 0.15
},
"profile": "security",
"rank": null,
"score": 33.0,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": [
"adoption",
"health"
]
}
},
"external_ids": {
"ard": "urn:air:infisical.com:doc:compare/infisical-vs-hashicorp-vault"
},
"first_seen": "2026-10-26T12:23:06Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_9808b7d1a45ab227",
"identity": {
"evidence": [
"standards_metadata_at_publisher_domain"
],
"rules_version": "identity-1.1",
"tier": 2
},
"issues": {
"advisories": 0,
"cves": 0,
"incidents": 0,
"links": [],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:23:06Z",
"license": null,
"name": "Infisical vs. HashiCorp Vault",
"news": [],
"news_checked": true,
"protocols": {
"a2a": {
"status": "unknown"
},
"ard": {
"identifier": "urn:air:infisical.com:doc:compare/infisical-vs-hashicorp-vault",
"manifest_url": "https://infisical.com/.well-known/ard.json",
"media_type": "text/markdown",
"parser_version": "ard-0.91",
"status": "verified",
"trust_manifest": "absent"
},
"mcp": {
"status": "unknown"
}
},
"publisher_domain": "infisical.com",
"representative_queries": [
"is Infisical a good alternative to HashiCorp Vault",
"what is the best open-source alternative to HashiCorp Vault",
"how do I migrate from HashiCorp Vault to Infisical"
],
"resource_type": "agent",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:44:56Z",
"cves": 0,
"source": "nvd",
"tier": 1
},
"signals": {},
"slug": "infisical-com-infisical-vs-hashicorp-vault",
"sources": [
{
"payload_hash": "099956cbf6690d5921fcb9e1856d913ccba8e6a8171487dc37dd45e5a1db5794",
"retrieved_at": "2026-10-26T12:23:06Z",
"system": "ard",
"url": "https://infisical.com/.well-known/ard.json"
}
],
"tags": [
"documentation",
"comparisons"
],
"tenant": null,
"traces": [
{
"agent_version": null,
"bundle": "bundles/tr_st_9808b7d1a45ab227_7c2493e1",
"checked_on": null,
"date": "2026-10-25",
"format": "bundle",
"harness_version": "probe-1.0",
"id": "tr_st_9808b7d1a45ab227_7c2493e1",
"kind": "self_test",
"notes": "Produced automatically on every refresh; a new bundle is written only when the observation changes",
"observed": {
"actions": [
"served Agentic Resource Discovery (ARD) document"
],
"approval": null,
"egress": false,
"entry": "GET on the publisher's well-known discovery paths",
"outcome": "ARD verified",
"refused": null,
"secrets_touched": false
},
"reviewer": null,
"scenario": "Fetch and validate the ARD manifest, A2A agent card and MCP server card at the publisher's well-known paths",
"scope": "product",
"sha256": "sha256:ddcc2f475b75db7cc2d169a1ebabe62e6eacf7914b88399abcd6a9362eed95ee",
"source": "AgentDossier refresh",
"tier": 1,
"title": "Registry probe of Infisical vs. HashiCorp Vault's discovery endpoints",
"url": "https://sushegaad.github.io/AgentDossier/traces/tr_st_9808b7d1a45ab227_7c2493e1/",
"vendor_response": null
}
],
"trust": {
"compliance": 5,
"identity": 2,
"issues": 1,
"protocols": 1,
"security": 1,
"traces": 1,
"vendor_compliance": 4
},
"url": "https://infisical.com/compare/infisical-vs-hashicorp-vault.md",
"vendor": "infisical.com"
}