OpenBao

OpenBao is an open source, community-driven secrets manager and fork of Vault managed by the Linux Foundation's OpenSSF.
Arbitrary key/value secrets can be stored in OpenBao. OpenBao encrypts these secrets prior to writing them to persistent storage, so gaining access to the raw storage is not enough to access your secrets.
OpenBao can generate secrets on-demand for some systems, such as Kubernetes or SQL databases. After creating these dynamic secrets, OpenBao will also automatically revoke them after the lease is up.
OpenBao provides encryption as a service with centralized key management to simplify encrypting data in transit and stored across clouds and datacenters.
Organizations need a way to manage identity sprawl with the use of different clouds, services, and systems. OpenBao solves this challenge by using a unified ACL system to broker access to systems and secrets and merges identities across providers.
All secrets in OpenBao have a lease associated with them. At the end of the lease, OpenBao will automatically revoke that secret. Clients are able to renew leases via built-in renew APIs.
OpenBao has built-in support for secret revocation. OpenBao can revoke not only single secrets, but a tree of secrets, for example all secrets read by a specific user, or all secrets of a particular type.
OpenBao exists to maintain and improve a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. The OpenBao community will provide this software under an OSI-approved open-source license, led by a community run under open governance principles.
Companies, individuals or other entities who actively sponsor the development of OpenBao, either via direct code or non-code contributions or indirectly via financial support or gifting premium features on their platforms.See more on our Ecosystem page.
Several Developers from/on behalf of SAP SE work full time on OpenBao (project funded by European Union - NextGenerationEU).
Fermilab participates in OpenBao development, in particular for the JWT/OIDC authentication module and for packaging of OpenBao in EPEL.
Liquid Reply commits to OpenBao through core contributions, and by fostering community advocacy and growth.
GitLab contributes to development and open-source community efforts of OpenBao.
Blendbyte sponsors OpenBao's RPM & DEB package repository hosted on pkgs.openbao.org.
ControlPlane contributes to development and open-source community leadership efforts of OpenBao.
Adfinis commits to OpenBao through core contributions, open source leadership, and by fostering community advocacy and growth.
Proton sponsors its collaboration suite (email and calendar) for OpenBao maintainers.