HCP Vault Secrets tiers and features
HCP Vault Secrets is a secrets lifecycle management solution to centralize your secrets and enable your applications to access them from their workflow. The clients (systems or users) can interact with HCP Vault Secrets using command-line interface (CLI), HCP Portal, or API.
HCP Vault Secrets offers two tiers - Free tier and standard tier today. Regarding payment options, HCP Vault Secrets is available in trial, pay-as-you-go, and flex options. HCP Billing Models describes the pricing options in detail.
Free tier and standard tier comparison
Free tier can be used by users for free forever with the below usage limits without requiring a credit card.
The standard tier has a few additional benefits:
- higher usage limits
- 99.9% SLA
- can be leveraged via Pay-as-you-go or Flex
- provides Silver support
Below is an overview of the limits & features between the two tiers.
| Features | Description | Free tier | Standard tier |
|---|---|---|---|
| Applications | The total # of applications | 25 | 1000 |
| Static Secrets | The total # of secrets created | 25 | 2500 at $0.50/secret/month |
| Auto-rotating Secrets | The total # of auto-rotating secrets created | 0 | 50 (Free while in beta) |
| Secret Versions | The total # of versions per secret | 5 | 50 |
| Secret Sync Active Integrations | The total # of active sync destinations | 5 | 200 |
| API Limits | The total # of Secret Access API Operations | 10k API Operations (10 Ops/min after 10k Ops) | $0.10 per 10k Secret Access API Operations |
| Support | The level of support provided by Hashicorp | Community | Silver |
Standard tier pricing
There are two billing metrics - Secrets as well as Secret Access API Operations.
You will be charged based on the total secret hours used, billed at a pro-rata monthly rate of $0.50/secret/month.
For example, if you have 25 secrets created for the entire month and 25,000 API Operations.
You will be charged a total of $12.50 (25 secrets x $0.50) + $0.25 (25k ops x $0.10) = $12.75 for the month
Standard tier limits
In case you would like to raise any of the standard tier limits, please reach out to HashiCorp Support.
API operations rate limits
Secret access API operations:
- Any operation that fetches sensitive secret values is included in the secret access API operations: OpenAppSecrets, OpenAppSecret, OpenAppSecretVersion, and ListOpenAppSecretVersions
Other API operations:
- All the other API operations including creating/deleting secrets, and creating/deleting applications are categorized as "Other API operations"
| Operation | Limit |
|---|---|
| Secret access API operations | 200 requests/minute |
| Other API operations | 1000 requests/minute |