Integrators

Securosys Primus HSM provides hardware-backed sealing for OpenBao Vaults.

Warden is an open-source identity-aware egress gateway that intercepts outbound cloud API calls and forwards them using short-lived credentials minted via OpenBao, so that credentials never reach client applications.

Crypto4A's QxVault™ is a fully integrated Secrets Management Vault with a built-in HSM for robust management of secrets, credentials, and API keys.

Percona provides OpenBao integration for managing encryption keys in Percona Server for MongoDB and PostgreSQL Transparent Data Encryption (pg_tde).

GatePlane provides full IAM integration for OpenBao, turning it into a Privileged Access Management (PAM) solution that supports approval-based conditional access through their OpenBao plugins (available under their always-free Community License).

StackHPC integrates OpenBao with OpenStack deployments, to provide TLS encryption for internal communication and to act as a secret store for users of the cloud.

Sigstore is an OpenSSF project that secures the software supply chain. It integrates with OpenBao by leveraging it as a KMS for signing artifacts.