specification: API Commons Plans
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/Plans
provider: HashiCorp Vault
providerId: hvault
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: false
tags:
  - Secrets Management
  - Identity
  - Security
  - Infrastructure
  - Encryption
description: HashiCorp Vault is offered in three modes - free open-source Community Edition (Apache
  2.0 / BSL), self-managed Enterprise (annual contract priced by client count and modules), and HCP
  Vault Dedicated/HCP Vault Secrets (managed cloud, pay-as-you-go via cluster-hour or per-secret).
  HashiCorp does not publish per-tier list pricing on its public site; enterprise pricing is sales-led
  and HCP cluster-hour rates are exposed only after sign-in to the HashiCorp Cloud Platform console.
  IBM acquired HashiCorp in 2025 and Vault is now offered through the IBM HashiCorp Cloud Platform
  with $500 free credit for new accounts.
notes: 'Public list pricing for Vault Enterprise and HCP Vault tiers is not published. Specific
  per-cluster, per-secret, and per-client costs require sign-in to https://portal.cloud.hashicorp.com
  or contact with HashiCorp/IBM sales. The plan entries below describe the offering structure rather
  than dollar-denominated rate cards.'
sources:
  - https://www.hashicorp.com/products/vault
  - https://www.hashicorp.com/en/pricing?tab=vault
  - https://developer.hashicorp.com/vault
plans:
  - id: hvault-community
    name: Vault Community Edition
    type: freemium
    description: Free, open-source self-managed Vault distribution. Includes secret engines, auth
      methods, and core APIs.
    entries:
      - label: Self-managed binary
        name: community_binary
        type: flat
        metric: cluster
        limit: -1
        timeFrame: usage
        geo: global
        unit: 1
        price: '0.00'
        userMultiplied: false
    elements:
      - name: All open-source secret engines (KV, AWS, PKI, SSH, databases)
      - name: All open-source auth methods (Token, AppRole, Kubernetes, OIDC)
      - name: Single-cluster HA via Raft or Consul backend
      - name: Community support (forums, GitHub issues)
      - name: BSL / MPL 2.0 licensing
  - id: hvault-enterprise
    name: Vault Enterprise (Self-Managed)
    type: enterprise
    description: Self-managed Vault with enterprise modules (DR/PR replication, namespaces, HSM auto-unseal,
      FIPS 140-2, performance standby, control groups, sentinel policies). Sold via annual contract.
    entries:
      - label: Enterprise license
        name: enterprise_license
        type: subscription
        metric: client
        limit: -1
        timeFrame: year
        geo: global
        unit: 1
        price: contact sales
        userMultiplied: false
    elements:
      - name: Disaster Recovery and Performance Replication
      - name: Namespaces
      - name: HSM auto-unseal and seal wrap
      - name: FIPS 140-2 compliance
      - name: Performance Standby nodes
      - name: Control Groups and Sentinel policy engine
      - name: 24x7 enterprise support
  - id: hvault-hcp-dedicated
    name: HCP Vault Dedicated
    type: usage-based
    description: Fully-managed single-tenant Vault clusters on AWS / Azure with cluster-hour pricing.
      Sizes - Development, Standard Small, Standard Medium, Standard Large, Plus Small, Plus Medium,
      Plus Large.
    entries:
      - label: Cluster-hour
        name: cluster_hour
        type: metered
        metric: cluster-hour
        limit: -1
        timeFrame: usage
        geo: global
        unit: 1
        price: see https://portal.cloud.hashicorp.com (sign-in required)
        userMultiplied: false
    elements:
      - name: Single-tenant managed cluster
      - name: Multi-region replication (Plus tier)
      - name: AWS and Azure regions
      - name: HashiCorp-operated SLA
      - name: $500 free IBM HashiCorp Cloud Platform credit (new accounts)
  - id: hvault-hcp-secrets
    name: HCP Vault Secrets
    type: usage-based
    description: Multi-tenant managed secrets-as-a-service offering with per-secret-per-month pricing.
      Free starter tier with limited secret count; standard and plus tiers raise the cap.
    entries:
      - label: Free secrets
        name: hcp_secrets_free
        type: quota
        metric: secret
        limit: 25
        timeFrame: month
        geo: global
        unit: 1
        price: '0.00'
        userMultiplied: false
      - label: Per-secret monthly fee (Standard / Plus)
        name: hcp_secrets_per_secret
        type: metered
        metric: secret
        limit: -1
        timeFrame: month
        geo: global
        unit: 1
        price: see https://portal.cloud.hashicorp.com (sign-in required)
        userMultiplied: false
    elements:
      - name: Multi-tenant managed service
      - name: Native sync to AWS, Azure, GCP, Vercel, GitHub Actions
      - name: Application-scoped projects and secrets
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com
x-canonical:
  generated: '2026-10-08'
  vocabulary: all/0-working/economics/plans-canonical.yml
  models:
  - metered
  - subscription
  units:
  - compute
  plans:
  - name: Vault Community Edition
    access: freemium
    model: subscription
    model_how: derived
    units:
    - compute
    periods:
    - per-use
  - name: Vault Enterprise (Self-Managed)
    access: enterprise
    model: subscription
    model_how: derived
    units:
    - other
    periods:
    - year
  - name: HCP Vault Dedicated
    access: other
    model: metered
    model_how: stated
    units:
    - compute
    periods:
    - per-use
  - name: HCP Vault Secrets
    access: other
    model: metered
    model_how: stated
    units:
    - other
    periods:
    - month