HCP Vault Secrets tiers and features
HCP Vault Secrets is a secrets lifecycle management solution to centralize your secrets and enable your applications to access them from their workflow. The clients (systems or users) can interact with HCP Vault Secrets using command-line interface (CLI), HCP Portal, or API.
HCP Vault Secrets offers two tiers - Free tier and standard tier today. In terms of payment options, HCP Vault Secrets is available in trial, pay-as-you-go and flex options. HCP Billing Models describes the pricing options in detail.
Free tier and standard tier comparison
Free tier can be used by users for free forever with the below usage limits without requiring a credit card.
Standard tier has a few additional benefits:
- higher usage limits
- 99.9% SLA
- can be leveraged via Pay-as-you-go or Flex
- provides Silver support
Below is an overview of the limits & features between the two tiers.
| Features | Description | Free tier | Standard tier |
|---|---|---|---|
| Applications | The total # of applications | 25 | 1000 |
| Secrets | The total # of secrets created | 25 | 2500 at $0.58/secret/month |
| Secret Versions | The total # of versions per secret | 5 | 50 |
| Secret Sync Active Integrations | The total # of active sync destinations | 5 | 200 |
| API Limits | The total # of Secret Access API Operations | 10k API Operations | $0.10 per 10k Secret Access API Operations |
| Support | The level of support provided by Hashicorp | Community | Silver |
Standard tier pricing
There are two billing metrics - Secrets as well as Secret Access API Operations.
Limitation
Currently, the HCP Vault Secrets does not charge for your Secret Access API Operations.
You will be charged based on the total secret hours used, billed at a pro-rata monthly rate of $0.58/secret/month.
For example, if you have 25 secrets created for the entire month, but 10 secrets created only for 10 days in the month.
You will be charged a total of $14.50 + $1.91 = $16.41 for the month
Standard tier limits
In case you would like to raise any of the standard tier limits, please reach out to HashiCorp Support.
API operations rate limits
Secret access API operations:
- Any operation that fetches sensitive secret values are included in the secret access API operations: OpenAppSecrets, OpenSecret, and OpenAppSecretVersion
Other API operations:
- All the other API operations including creating/deleting secrets, create/delete applications are categorized as "Other API operations"
| Operation | Limit |
|---|---|
| Secret access API operations | 200 requests/minute |
| Other API operations | 1000 requests/minute |