specification: FinOps Framework
specificationVersion: '1.0'
schema: https://www.finops.org/framework/
provider: HashiCorp Vault
providerId: hvault
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: false
tags:
  - FinOps
  - FOCUS
  - Secrets Management
  - Security
description: 'FOCUS-aligned FinOps for HashiCorp Vault: open-source self-managed (no vendor cost),
  Enterprise self-managed (annual contract priced by client count), HCP Vault Dedicated (cluster-hour),
  and HCP Vault Secrets (per-secret-per-month). IBM acquired HashiCorp in 2025 - billing for HCP
  flows through the IBM HashiCorp Cloud Platform.'
notes: HCP Vault Dedicated cluster-hour rates and HCP Vault Secrets per-secret rates are not published
  on the public pricing page; sign-in to the HashiCorp Cloud Platform console is required to view.
sources:
  - https://www.hashicorp.com/products/vault
  - https://www.hashicorp.com/en/pricing?tab=vault
  - https://developer.hashicorp.com/hcp/docs/vault
alignedWith:
  framework: FinOps Foundation Framework
  frameworkUrl: https://www.finops.org/framework/
  dataSpec: FOCUS
  dataSpecVersion: '1.3'
  dataSpecUrl: https://focus.finops.org/focus-specification/v1-3/
publisherName: HashiCorp, Inc. (an IBM company)
serviceCategory: Security & Identity
billingModel:
  pricingCategory: Subscription + Pay-As-You-Go
  billingFrequency: Annual (Enterprise) / Hourly (HCP)
  billingCurrency: USD
  chargeCategories:
    - Purchase
    - Usage
    - Credit
    - Tax
    - Adjustment
focusColumns:
  ServiceName: HashiCorp Vault
  ServiceCategory: Security & Identity
  ProviderName: HashiCorp
  PublisherName: HashiCorp, Inc.
  InvoiceIssuerName: IBM HashiCorp Cloud Platform
  BillingCurrency: USD
  ChargeCategory: Usage
meters:
  - name: enterprise_clients
    description: Distinct clients (services or humans) authenticating against Vault Enterprise; the
      primary pricing dimension for self-managed Enterprise contracts.
    unit: client
    aggregation: max
    dimensions:
      - cluster
      - namespace
  - name: hcp_cluster_hours
    description: Cluster-hours for HCP Vault Dedicated, billed by cluster size and tier (Development,
      Standard, Plus).
    unit: cluster-hour
    aggregation: sum
    dimensions:
      - cluster_size
      - tier
      - cloud
      - region
  - name: hcp_secrets
    description: Active secrets stored in HCP Vault Secrets, billed per-secret-per-month.
    unit: secret-month
    aggregation: max
    dimensions:
      - project
      - app
  - name: hcp_secrets_syncs
    description: Native syncs from HCP Vault Secrets to integration targets (AWS, Azure, GCP, Vercel,
      GitHub Actions).
    unit: sync
    aggregation: sum
    dimensions:
      - target
      - project
  - name: api_requests
    description: Internal Vault API request volume, useful for capacity planning even when not directly
      billed.
    unit: request
    aggregation: sum
    dimensions:
      - mount
      - namespace
      - path
principles:
  - name: Visibility
    description: Use the HashiCorp Cloud Platform billing dashboard for HCP usage. For self-managed
      Enterprise, monitor Vault telemetry (vault.core.handle_login_request, vault.core.handle_request,
      vault.expire.num_leases) via Prometheus or Datadog; correlate against the contracted client
      count.
  - name: Allocation
    description: Use Vault Enterprise namespaces to allocate cost to business units. Tag HCP Vault
      Dedicated clusters and HCP Vault Secrets projects with team/product metadata for chargeback.
  - name: Optimization
    description: Right-size HCP Vault Dedicated clusters (Development vs Standard vs Plus); consolidate
      low-traffic workloads onto shared self-managed clusters; use lease quotas to prevent runaway
      lease growth that drives oversized clusters; consider HCP Vault Secrets free tier (25 secrets)
      for small applications.
  - name: Accountability
    description: For Enterprise, monitor active client count against the contractual ceiling and
      forecast renewal sizing. For HCP, set spending alerts in the HashiCorp Cloud Platform console.
      The $500 IBM HashiCorp Cloud Platform credit can offset initial proof-of-value cost.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com