Integrators

Nitrokey provides Open Source security hardware. Nitrokey's NetHSM offers a secure and highly available key storage, which protects your OpenBao secrets with hardware backed sealing.

DuoKey provides a Software Defined HSM and KMS integrating with OpenBao. Using Multi-Party Computation, keys are never reconstructed and cryptographic operations never expose key material or plaintext, enabling HSM-grade protection and cloud-native scalability.

Warden is an open-source identity-aware egress gateway that intercepts outbound cloud API calls and forwards them using short-lived credentials minted via OpenBao, so that credentials never reach client applications.

Sigstore is an OpenSSF project that secures the software supply chain. It integrates with OpenBao by leveraging it as a KMS for signing artifacts.

GatePlane provides full IAM integration for OpenBao, turning it into a Privileged Access Management (PAM) solution that supports approval-based conditional access through their OpenBao plugins (available under their always-free Community License).

StackHPC integrates OpenBao with OpenStack deployments, to provide TLS encryption for internal communication and to act as a secret store for users of the cloud.

OVHcloud provides cloud infrastructure and security services that integrate with OpenBao to manage secrets across distributed environments, supporting high availability, private networking, and HSM-backed encryption.

Securosys Primus HSM provides hardware-backed sealing for OpenBao Vaults.

Crypto4A's QxVault™ is a fully integrated Secrets Management Vault with a built-in HSM for robust management of secrets, credentials, and API keys.

Percona provides OpenBao integration for managing encryption keys in Percona Server for MongoDB and PostgreSQL Transparent Data Encryption (pg_tde).