Integrators

StackHPC integrates OpenBao with OpenStack deployments, to provide TLS encryption for internal communication and to act as a secret store for users of the cloud.

Warden is an open-source identity-aware egress gateway that intercepts outbound cloud API calls and forwards them using short-lived credentials minted via OpenBao, so that credentials never reach client applications.

Securosys Primus HSM provides hardware-backed sealing for OpenBao Vaults.

GatePlane provides full IAM integration for OpenBao, turning it into a Privileged Access Management (PAM) solution that supports approval-based conditional access through their OpenBao plugins (available under their always-free Community License).

DuoKey provides a Software Defined HSM and KMS integrating with OpenBao. Using Multi-Party Computation, keys are never reconstructed and cryptographic operations never expose key material or plaintext, enabling HSM-grade protection and cloud-native scalability.

OVHcloud provides cloud infrastructure and security services that integrate with OpenBao to manage secrets across distributed environments, supporting high availability, private networking, and HSM-backed encryption.

Crypto4A's QxVault™ is a fully integrated Secrets Management Vault with a built-in HSM for robust management of secrets, credentials, and API keys.

Sigstore is an OpenSSF project that secures the software supply chain. It integrates with OpenBao by leveraging it as a KMS for signing artifacts.

Percona provides OpenBao integration for managing encryption keys in Percona Server for MongoDB and PostgreSQL Transparent Data Encryption (pg_tde).