News
OpenBao in the news, whether mentions at conferences, press releases, or similar.
2026
October 2026
Agentic Identity with OpenBao
We recently published a deep dive into hardening SPIRE with OpenBao, showing how OpenBao's PKI and Transit engines can act as the cryptographic root of trust behind a SPIFFE identity plane. That post answers how to secure the infrastructure underneath workload identity. This post steps back a level, to a question that keeps coming up: why does an AI agent need an identity of its own at all? Isn't sandboxing it, or tightly scoping its permissions, sufficient?
Continue reading on control-plane.io.September 2026
A Realistic Code Execution Exploit Chain in OpenBao and Vault
In collaboration with the upstream OpenBao community, ControlPlane recently fixed a full exploit chain from unauthenticated access to full remote code execution. This is the second-ever remote code execution vulnerability in Vault and OpenBao. This chain combines disclosures from three independent reporters patched in the latest release.
Continue reading on control-plane.io.Securing requestState with OpenBao
A follow-up to our article at the AAIF Blog Designing RequestState for
Multi-Round Trip Requests. All code in this post is from the companion
repository openbao-mcp-requeststate and runs against a real OpenBao
and the official MCP Python SDK.
Sovereign Workload Identities with OpenBao
Pascal Reeb's and Toni Tauro's Securosys User & Developer Conference 2026 talk, describing how to implement sovereign workload identities with OpenBao, SPIFFE, and SPIRE.
Watch on YouTube.QxVault™: Simplifying Secure Secrets Management
QxVault™ is a secrets management appliance with a built-in, quantum-safe, FIPS 140-3 Level 3 HSM. It helps organizations and IT professionals deploy and manage secrets instances that are secure, highly resilient, and easy to use. In this whitepaper, we explain how QxVault™ simplifies the deployment and management of highly secure, resilient secrets management solutions.
Continue reading on crypto4a.com.Integrating OpenBao with KumoMTA
This is effectively a guest post from CM.com, which uses KumoMTA as its email infrastructure. Their Engineering team shared this with us as an example of how they integrated OpenBao as a KeySource backend for KumoMTA and we are excited to share it with the community.
Continue reading on kumomta.com.Per-User Access Delegation for AI Agents, on OpenBao
How Warden leverages OpenBao to enforce access delegation: an AI agent calls GitHub as a specific human, and the vault refuses any agent the user never authorized.
Continue reading on wardengateway.com.ControlPlane Enterprise for OpenBao Selects PostgreSQL As Recommended Storage Engine
Although development of HashiCorp Vault has stagnated in critical areas that operators need to productively manage deployments, ControlPlane and OpenBao have proactively addressed several of Vault's most requested features. Many are already implemented, including recursive listing and filtering of list responses.
Continue reading on control-plane.io.August 2026
Vault nach OpenBao: die Tür ist offen, nur schmaler als sie aussieht
[Article in German] The OpenBao docs say that migrating is no longer possible starting from Vault 1.15.0. Tested empirically, it works, even from Vault 2.0.3. The real limit is mounts without a plugin.
Continue reading on trutz.io.CNPG Recipe 27 - Running OpenBao on Kubernetes with a CloudNativePG PostgreSQL backend
A walkthrough of running OpenBao on Kubernetes with CloudNativePG as its PostgreSQL storage backend. Every layer of this stack is open source, with no vendor lock-in: Kubernetes and CloudNativePG are both CNCF projects, authenticated entirely over TLS client certificates via the 1.30 DatabaseRole CRD, with no passwords anywhere in the stack. Co-authored with Rob Kenefeck from ControlPlane.
Continue reading on www.gabrielebartolini.it.HashiCorp Vault - The Exit Guide Conversation
Many of the alternatives to IBM’s HashiCorp Vault require retooling: CyberArk, Akeyless, cloud providers' secrets managers, but one product doesn't: ControlPlane Enterprise for OpenBao. A continuation of Vault Community Edition, governed under the Linux Foundation's OpenSSF.
Continue reading on control-plane.io.GitLab Secrets Manager adds ESO, Terraform, API support
Simplify credential management across your stack. GitLab Secrets Manager provides secure retrieval in Kubernetes, Terraform, and external workflows.
Continue reading on about.gitlab.com.Sovereign Signing: A Self-Hosted Supply Chain with OpenBao, Cosign, and Flux CD
If you run a regulated platform, the last three years have shifted the assumptions under your secrets management strategy. In August 2023, HashiCorp relicensed Vault from the open source MPL 2.0 to the Business Source License (BSL 1.1).
Continue reading on control-plane.io.Open Source Secrets Management for Telco
Facing a strict ten-month deadline and rising proprietary license costs, Wavelo partnered with Adfinis to migrate its proprietary secrets management platform to OpenBao™. Adfinis co-developed the missing enterprise features, including multi-tenancy and horizontal scalability, by contributing them directly to the OpenBao open source project. The migration eliminated vendor lock-in, halved maintenance overhead, and cut licensing costs by 60%.
Continue reading on www.adfinis.com.Unlocking Secrets Management: Introducing OpenBao Managed Services on Azure and AWS
That is why Adfinis is thrilled to introduce the OpenBao Tailored Managed Service, a fully managed and integrated, enterprise-grade secrets management solution that delivers data sovereignty, cost predictability, and operational excellence without the additional costs associated with proprietary alternatives. Typically referred to as the "Success Tax", where charging per "identity" or "client" forces teams into "Architecture by License" workarounds, resulting in infrastructure designed to fit a contract rather than their actual security requirements.
Continue reading on www.adfinis.com.Securing Agent Identity: Hardening SPIRE with OpenBao
Organizations are rapidly deploying autonomous AI agents that execute complex toolchains, call external APIs, and read corporate data stores on behalf of real users. As the surface area of non-human identity (NHI) explodes, securing the identities powering these agents has become a primary security hurdle.
Continue reading on control-plane.io.July 2026
Flux and OpenBao: Secrets and Signatures
GitOps helps us declare our desired workloads, but how do we deal with and manage secrets? Additionally, as our fleet grows, we also blend artifacts and configuration from many different sources. How do we trust what we are running?
Continue reading on fluxcd.io.Adfinis's Secretz Enterprise Achieves Red Hat OpenShift Certification and Joins the Red Hat Ecosystem Catalog
The OpenBao-based secrets management solution Secretz Enterprise has been officially certified for Red Hat OpenShift and is now part of the Red Hat Ecosystem Catalog – an achievement that gives organizations direct access to a turn-key solution that protects and secures their most sensitive data.
Continue reading on www.adfinis.com.OpenBao - Leadership from the Ground Up
Securing the widespread adoption of AI, supporting the imminent post-quantum cryptographic migrations, and increasingly sophisticated supply chain attacks are keeping industry leaders up at night. Secrets management, cryptographic inventory, and identity platforms are critical areas of investment in 2026: these are the foundational components platform teams utilize to meet the accelerating business demands.
Continue reading on control-plane.io.Your AI Agents Will Be Prompt-Injected, and Your Secrets Shouldn't Care
Autonomous AI agents are moving into production faster than the security tooling around them. They behave nothing like the deterministic services your secrets management was built for: they process natural language and call each other across trust boundaries. That combination creates a new failure mode.
Continue reading on www.adfinis.com.Adfinis wins Red Hat OpenShift certification for Secretz Enterprise
Adfinis has secured Red Hat OpenShift certification for Secretz Enterprise, placing the secrets management product in the Red Hat Ecosystem Catalog.
Continue reading on itbrief.co.uk.June 2026
Adfinis & Crypto4A launch quantum-safe secrets tool
Adfinis and Crypto4A have partnered to combine Secretz Enterprise with the QxVault platform, targeting organisations in regulated and security-sensitive sectors.
Continue reading on securitybrief.co.uk.Shifting Secrets Left with ControlPlane Enterprise for OpenBao - PlatformCon 2026
Alex Scheel's PlatformCon 2026 talk, describing the governance capabilities of the server-side workflow feature of OpenBao.
Watch on YouTube.Adfinis and Crypto4A Announce Partnership to Advance Sustainable, Sovereign Secrets Management
Crypto4A and Adfinis combine QxVault™ and Secretz Enterprise to empower organizations to achieve quantum-safe and sovereign secrets management in a sustainable manner.
Continue reading on crypto4a.com.OpenBao Achieves SUSE Ready for Rancher Certification
Adfinis announces that OpenBao, the community-driven secrets management solution, has officially achieved the SUSE Ready for Rancher certification.
Continue reading on www.adfinis.com.OpenBao: Sovereign Secrets Management
Coen Hamers', Robert de Bock's, and Roel de Cort's webinar, outlining how to achieve sovereign secrets management in light of proprietary solutions and regulations such as NIS2.
Watch on YouTube.OpenBao strides forward in the enterprise
When HashiCorp shifted its licensing model to the Business Source License (BUSL) a couple of years ago, it sent undeniable ripples through the open source pond.
Continue reading on www.computerweekly.com.NVIDIA adopts OpenBao, open source fork of HashiCorp's Vault
NVIDIA is now among the official adopters of OpenBao, an open source fork of HashiCorp's Vault secrets management software, according to recently released documentation.
Continue reading on www.techtarget.com.OpenBao - Protecting Enterprise Secrets with Hardware-Based Trust
OpenBao and Utimaco have worked together to deliver enterprise-grade secrets management with a hardware-anchored root of trust. OpenBao centralizes and controls access to passwords, API keys, and certificates across your environment — while Utimaco General Purpose Hardware Security Modules (GP HSMs) ensure that the root key protecting these secrets is stored and processed in tamper-resistant hardware, never exposed to software-based attacks.
Continue reading on utimaco.com.May 2026
Sustainable Secrets Management with OpenBao - OSS @ Siemens 2026
Michael Hofer's Open Source @ Siemens 2026 talk, diving into OpenBao's origins and why it is the sustainable choice.
Watch on YouTube.OpenBao: Horizontally Scaling Secrets Management - OSSNA 2026
Alex Scheel's Open Source Summit NA 2026 talk, describing the horizontal scalability features of OpenBao.
Watch on YouTube.QxVault™ - Simplifying Secrets Management
What is QxVault™? Quantum-Safe Secrets Management with Built-in HSM Protection.
Continue reading on crypto4a.com.April 2026
OpenBao Basics: What Is Secrets Management?
Everyone – from early-stage startups to large enterprises, open source projects, and heavily regulated industries – relies on secrets. API tokens, private keys, database credentials, cloud access keys, and signing keys are all examples of secrets. Modern systems simply can't function without them.
Continue reading on www.adfinis.com.Secrets Management With OpenBao
A vault or bank safe is protected by solid walls or thick doors with high-security locks. Often, it takes several keys and several people to open such a lock. The open source software OpenBao brings a comparable level of security for digital secrets – such as credentials, tokens, or SSH access to enterprise IT.
Continue reading on www.adfinis.com.The Vercel Breach: When Roblox Cheats, AI Tools, and Poor Secrets Management Collide
The recent breach at Vercel is a textbook example of how many modern supply-chain compromises unfold. It didn’t start with a sophisticated zero-day attack against Vercel’s core infrastructure. Instead, the breach began months earlier, when an employee at Context.ai, a third-party AI tool vendor, downloaded a Roblox auto-farm cheat script onto a corporate laptop. Bundled inside was the Lumma infostealer.
Continue reading on control-plane.io.March 2026
ControlPlane Enterprise for OpenBao - Meet the Team
As we launch ControlPlane Enterprise for OpenBao, we’re bringing our trademark capabilities and Cloud Native expertise to the forefront of secrets management. Today, we’re pulling back the curtain to introduce the experts driving this offering forward.
Continue reading on control-plane.io.ControlPlane Launches Enterprise Support For OpenBao To Strengthen Secrets Security
ControlPlane, a specialist AI Security and DevSecOps consultancy, today announced the launch of ControlPlane Enterprise for OpenBao, a new offering designed to help organizations securely adopt and operate the OpenBao secrets management platform.
Continue reading on control-plane.io.ControlPlane unveils enterprise support for OpenBao
ControlPlane has launched an enterprise support service for OpenBao, an open source secrets management platform, as organisations reassess their options following IBM's acquisition of HashiCorp.
Continue reading on channellife.com.au.Introducing Kubermatic SecureGuard: Open, Kubernetes-Native Secrets Management
Today, we are excited to introduce a new open-source secrets management platform for Kubernetes and cloud-native environments: Kubermatic SecureGuard (KubeSG).
Continue reading on www.kubermatic.com.Adfinis Launches Open Source Secretz Enterprise
Adfinis has launched Secretz Enterprise as a modern solution for securing organizational secrets, such as passwords, digital keys, and certificates.
Continue reading on www.admin-it.io.February 2026
Adfinis Unveils Secretz Enterprise: Secure Application Secrets and Machine Identities Without the Success Tax
The new OpenBao-based subscription offers predictable, flat-fee secrets management and 24/7 enterprise support with a commitment to upstream-first innovation.
Continue reading on www.adfinis.com.Adfinis unveils flat-fee OpenBao-based secrets service
Adfinis has launched Secretz Enterprise, a subscription product based on the OpenBao open source project. It targets organisations that want predictable pricing for secrets management and 24/7 support.
Continue reading on itbrief.co.uk.OpenBao: When to Choose the Open Source Vault Alternative
In 2023, HashiCorp changed Vault's license from Mozilla Public License (MPL) to Business Source License (BSL) 1.1. Shortly after, the community forked Vault's last MPL version, creating OpenBao — Open Source project under MPL 2.0 licensing. Let's explore the actual differences and features.
Continue reading on bespinian.io.The Guide to OpenBao
A series of engineering articles by Thomas Jungbauer about OpenBao, a HashiCorp Vault fork, and how to get started.
Continue reading on blog.stderr.at.2025
December 2025
Adfinis unveils OpenBao services for secure secrets
Adfinis has launched a suite of open source services built around OpenBao, as the systems integrator moves to formalise its role in the emerging secrets management project.
Continue reading on securitybrief.co.uk.Percona Server for MongoDB 8.0.16-5 (2025-12-02)
Percona Server for MongoDB 8.0.16-5 is an enhanced, source-available, and highly-scalable database that is a fully-compatible, drop-in replacement for MongoDB Community Edition.
To give you more flexibility for enterprise-grade data encryption, Percona Server for MongoDB now supports OpenBao in addition to HashiCorp Vault. OpenBao is the open-source fork of Vault, providing the same powerful security while helping you avoid vendor lock-in.
Continue reading on docs.percona.com.Interview: Adfinis CTO discusses Secrets Management and OpenBao with IT-Administrator
In an interview with IT-Administrator, Adfinis CTO Michael Hofer discusses the growing problem of "secrets sprawl", and how unencrypted credentials, fragmented access, and a lack of visibility remain critical challenges for many organizations.
Continue reading on www.adfinis.com.Adfinis Offers Sustainable Secrets Management With OpenBao
Adfinis, a renowned international service provider of open source IT solutions, is proud to announce its comprehensive new offerings for OpenBao™, a modern open source secrets and encryption management system. Available immediately, these offerings enable organizations across all industries and highly regulated environments to adopt a sustainable approach to secrets management – with an open, simple, and reliable platform free from the constraints of vendor lock-in.
Continue reading on www.adfinis.com.November 2025
OpenBao on RISC-V DeepComputing
Luca Berton, Pascal Reeb, and Toni Tauro showcase how to run OpenBao on RISC-V DeepComputing, open secrets management on open hardware.
Watch on YouTube.Crypto4A Unveils QxVault™: Secrets. Simplified.
Crypto4A Technologies Inc., a leader in quantum-safe cybersecurity solutions, today announced the launch of QxVault™, a groundbreaking secrets management platform that integrates a FIPS 140-3 Level 3 compliant Hardware Security Module (HSM) for robust management of secrets.
Continue reading on crypto4a.com.October 2025
Sustainable Secrets Management with OpenBao - Securosys User & Developer Conference 2025
Pascal Reeb's and Toni Tauro's Securosys User & Developer Conference 2025 talk, describing how to achieve sustainable, sovereign secrets management with OpenBao and Securosys HSMs.
Watch on YouTube.OpenBao Basics: How Namespaces Became a Reality
As an organization scales, so does the need for greater granularity over data access controls and compartmentalization across different domains.
Continue reading on www.adfinis.com.July 2025
OpenBao: Securing the Future of Open Source Secrets Management
In today's complex technology landscape, managing secrets such as API keys, passwords, certificates, and other sensitive data has become one of the biggest challenges for businesses. That's why Liquid Reply supports OpenBao, an open-source system for managing secrets and encryption based on identity, to secure data management in the cloud era.
Continue reading on liquidreply.net.June 2025
Namespace Support in OpenBao: A Key Building Block for Apeiro Security Architecture
The OpenBao project has just published the 2.3 Beta release with support for namespaces, a feature that introduces logical isolation within a single deployment. This enhancement allows the Apeiro Reference Architecture to securely separate sensitive information from different operator groups and trust domains across layers of the Apeiro stack.
Continue reading on documentation.apeirora.eu.February 2025
Namespace Required Mounts - OpenBao Live Coding with Alex (cipherboy) and Jonas (satoqz)
Live Coding Session - February 25th, 2025
Watch as Alex (cipherboy) and Jonas (satoqz) live code support for request routing in the context of the upcoming Namespaces feature.
Watch on YouTube.Namespace Request Routing - OpenBao Live Coding with Alex (cipherboy) and Andrii (driif)
Live Coding Session - February 21st, 2025
Watch as Alex (cipherboy) and Andrii (driif) live code support for request routing in the context of the upcoming Namespaces feature.
Watch on YouTube.OpenBao @ GitLab - FOSDEM 2025
January 2025
Tune non-HMAC parameters on sys/ - OpenBao Live Coding with Alex (cipherboy) and Jakub (jficz)
Live Coding Session - January 20th, 2025
Watch as Alex (cipherboy) and Jakub (jficz) live code support for tuning non-HMAC parameters on sys/ and other protected endpoints.
Watch on YouTube.2024
September 2024
FreshPorts - openbao - New port: open source, community-driven fork of Vault
OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. The OpenBao community intends to provide this software under an OSI-approved open-source license, led by a community run under open governance principles.
Continue reading on www.freshports.org.June 2024
2024-06-13 OpenBao TSC Meeting - Charter Ratified
TSC Voting to Approve: OpenBao Technical Charter
Motion: Nathan Phelps
Second: Michael Maxey
| Voting Member | Member Company | Y/N/A |
|---|---|---|
| Nathan Phelps | IBM | Y |
| James Butcher | IOTech Systems | Y |
| Dan Ghita | Viaccess-Orca | Y |
| Julien Cassignol | Wallix | Y |
| Michael Maxey | Zededa | Y |
2023
December 2023
Open source forkers stick an OpenBao in the oven
The rebellion against HashiCorp for adopting a competition-limiting license for its Terraform software expanded this week, with word that The Linux Foundation aims to help hatch an open source alternative to Vault, the company's secrets management project.
Continue reading on www.theregister.com.Meet OpenBao, an Open Source Fork of HashiCorp Vault
First Terraform, and now Vault: More open source code abandoned by HashiCorp is a finding a home with potential competitors.
In September, HashiCorp rivals forked Infrastructure as Code (IaC) software Terraform to create OpenTofu, after HashiCorp moved much of its core enterprise software from an open source to a Business Source License. Now the OpenBAO project has set out to maintain the open source version of HashiCorp’s widely used Vault security software.
Continue reading on thenewstack.io.October 2023
Hashicorp Vault Replacement Feature Design Candidate
The start of OpenBao under LF Edge's OpenHorizon project!
Continue reading on lf-edge.atlassian.net.