Integrators

Projects and technologies which integrate or make use of OpenBao.

DuoKey provides a Software Defined HSM and KMS integrating with OpenBao. Using Multi-Party Computation, keys are never reconstructed and cryptographic operations never expose key material or plaintext, enabling HSM-grade protection and cloud-native scalability.

Sigstore is an OpenSSF project that secures the software supply chain. It integrates with OpenBao by leveraging it as a KMS for signing artifacts.

Warden is an open-source identity-aware egress gateway that intercepts outbound cloud API calls and forwards them using short-lived credentials minted via OpenBao, so that credentials never reach client applications.

OVHcloud provides cloud infrastructure and security services that integrate with OpenBao to manage secrets across distributed environments, supporting high availability, private networking, and HSM-backed encryption.

GatePlane provides full IAM integration for OpenBao, turning it into a Privileged Access Management (PAM) solution that supports approval-based conditional access through their OpenBao plugins (available under their always-free Community License).

Utimaco is a global platform provider of trusted Cybersecurity and Data Protection solutions, and develops leading on-premises and cloud-based hardware security modules, solutions for key management and data protection which integrate with OpenBao.

StackHPC integrates OpenBao with OpenStack deployments, to provide TLS encryption for internal communication and to act as a secret store for users of the cloud.

Percona provides OpenBao integration for managing encryption keys in Percona Server for MongoDB and PostgreSQL Transparent Data Encryption (pg_tde).

Semaphore UI uses OpenBao to securely store passwords, SSH keys, and other credentials used by automation tasks.

KumoMTA is an open-source, enterprise-grade Mail Transfer Agent (MTA) designed specifically for high-volume email senders. It integrates natively with OpenBao for key and secrets management.

Crypto4A's QxVault™ is a fully integrated Secrets Management Vault with a built-in HSM for robust management of secrets, credentials, and API keys.

Securosys Primus HSM provides hardware-backed sealing for OpenBao Vaults.

Nitrokey provides Open Source security hardware. Nitrokey's NetHSM offers a secure and highly available key storage, which protects your OpenBao secrets with hardware backed sealing.