Security
HashiCorp Vault Hosting
Manage secrets, encryption keys and access policies with a persistent, single-node Vault server. Initialize and unseal it using your own recovery keys. Deploy it in one click on Caliber Node — no compose file, no server to prepare, HTTPS working the moment it boots.
From $2.00/mo on the Nano subscription
$5.00 free credit when you sign up — your first 2 months of HashiCorp Vault, free
- One click
- Deploys in
- 512 MB
- Memory needed
- Not required
- Database
- $2.00/mo
- From
What you get
HashiCorp Vault runs on a subscription — a pool of CPU, memory and disk that you own. Deploying it takes one click, and the same pool will run your other apps at no extra charge.
A hostname with HTTPS, immediately
Your app is reachable the moment it finishes deploying, on a certificate we issue and renew. Point your own domain at it whenever you like.
Nothing exposed but the app
Only HashiCorp Vault itself gets a public port. Anything it depends on stays on a private network unreachable from the internet.
A shell and SFTP
A real shell in the container and SFTP for its files. This is not a black box — if you want to get in and look, you can.
Updates you control
We check nightly for a new image and tell you when one lands. Applying it is your decision, per app, and a failed update rolls back to the exact image it replaced.
A free snapshot
One full archive of HashiCorp Vault included, restorable in a click. Keep more with the snapshots add-on.
Your data, exportable
SFTP access to everything the app stores. Nothing here is locked in.
What actually runs
No mystery images. HashiCorp Vault deploys one container, and these are exactly the ones:
hashicorp/vault@sha256:e0acd3c681bdf57f002d7214e5d050b876e1704678005c6b0406dd96a65be919web
Running HashiCorp Vault yourself vs. running it here
HashiCorp Vault is free software and you can absolutely run it yourself — we would rather tell you that than pretend otherwise. What you are paying for here is the part around it.
On your own server
- You write the compose file and keep it working
- You configure a reverse proxy and renew certificates
- You watch for new releases and apply them
- You own the backups, and finding out they were broken
On Caliber Node
- One click, and it is running on HTTPS
- Certificates issued and renewed for you
- Update checks nightly, applied when you say so
- A free snapshot, restorable in a click
Questions about HashiCorp Vault hosting
- Can I try HashiCorp Vault for free?
- Yes. Every new account gets $5.00 of Cloud Apps credit, applied automatically to your first invoice -- there is no code to enter and no card trial to cancel. On the plan HashiCorp Vault needs, that covers your first 2 months.
- How do I install HashiCorp Vault?
- Pick HashiCorp Vault from the catalog and deploy it. There is no compose file to write, no server to prepare and no reverse proxy to configure. It comes up on a hostname with HTTPS already working.
- What does hosting HashiCorp Vault cost?
- HashiCorp Vault needs at least 512 MB memory, so the Nano subscription at $2.00/mo is the smallest that fits it. That size is a close fit for HashiCorp Vault on its own -- if you want to run other apps alongside it, take the next plan up and share the pool.
- Do I get access to the HashiCorp Vault files and database?
- Yes. Every app has a browser shell into its container, SFTP for its files. Your data is yours and you can take it out whenever you want.
- Are updates to HashiCorp Vault automatic?
- Only if you turn them on. We check nightly for a new image and tell you when one exists, but applying it is your call, per app.
- Can I use my own domain for HashiCorp Vault?
- Yes. Every app gets a hostname on our domain immediately, and you can point your own domain at it instead. Certificates are issued and renewed automatically either way.
- Can I back HashiCorp Vault up?
- Every app includes one free snapshot -- a full archive of its data you can restore from. Keeping more than one is a paid add-on on the subscription.
More security apps
WireGuard Easy hosting
Create and manage a private WireGuard VPN through a simple protected web interface.
Authentik hosting
Single sign-on for your applications with OpenID Connect, SAML, MFA and a user directory.
AliasVault hosting
Encrypted password and identity manager. Shared-IP edition; receiving mail for your own alias domain is not supported.
Psono hosting
Community Edition encrypted password manager for individuals and teams, with a private PostgreSQL database.
Warpgate hosting
Control access to your own SSH, database and HTTP services through an authenticated gateway. Requires a dedicated IP.
OpenBao hosting
Manage secrets, encryption keys and access policies with OpenBao and its web interface.
Deploy HashiCorp Vault in a click
HashiCorp Vault, running on resources you own, with HTTPS and a free snapshot included.