OpenBao for system secrets vault

A centralized vault for your infrastructure secrets: API integration keys, database credentials, and SSL/TLS certificates. Applications fetch credentials dynamically from the vault on demand rather than hardcoding them in plain configuration files or source code, and every access request is audited. The vault runs on a private server we host for you in Egypt.

If you are looking for an alternative to HashiCorp Vault or AWS Secrets Manager, this replaces:

• HashiCorp Vault.
• AWS Secrets Manager.
• Plaintext configuration files and environment variables where secrets are exposed today.

• Versioned key-value secrets engine: Store secrets securely with full version history and rollback capabilities.
• Dynamic database credentials: The vault generates ephemeral, time-limited database user credentials on the fly and revokes them automatically.
• Internal Certificate Authority (PKI): Issues short-lived X.509 certificates to protect internal microservice traffic.
• Transit encryption as a service: Applications encrypt and decrypt data via the vault API without holding encryption keys directly.
• Authentication engines for apps and humans: AppRole, Kubernetes, JWT/OIDC, LDAP, and username/password.
• Fine-grained ACL policies: Granular rules dictating exactly who can read, update, or manage specific secret paths.
• Audit logging detailing every API request: who accessed which secret, and when.
• Leases and revocation: Automatic expiry of temporary credentials with instantaneous one-click revocation.
• Shamir secret sharing unsealing: The vault unseals using split key shares distributed among multiple trusted team members.
• Web UI, CLI, and REST API for integration with CI/CD deployment pipelines.
• High availability (HA) architectures using multi-node clusters with integrated storage.

Built on OpenBao, an open-source secrets management platform fork of HashiCorp Vault.

• Arabic: The admin interface is in English, as it is an infrastructure tool for your technical engineering team. We provide complete operating manuals in Arabic.
• Hosting: We host it for you in Egypt, sizing server capacity and clustering topology to your connected systems (infrastructure design).

• Integrates with: Code hosting and review and container and code scanning to detect and eliminate hardcoded credentials in source trees.
• For team passwords: Password manager for teams.

• Software development companies managing multi-tenant customer production systems.
• IT departments operating diverse infrastructure with scattered administrative credentials.