Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Entrust nShield HSM by Entrust View product | HashiCorp Vault by HashiCorp View product |
|---|---|---|
| Overview | ||
| What it is | Entrust nShield HSM: physical tamper-evident enclosure and hardware cryptographic offload. Built for database TDE root. Compare Encryption alternatives. | HashiCorp Vault covers dynamic secrets, data encryption as a service and PKI certificate engine for centralized secrets storage. Compare top Encryption tools. |
| Product type | Network Hardware Security Module | Secrets & Encryption Management Platform |
| Best for | Banking, Enterprise, Defense, Financial Services, Enterprise IT, Government, Telecom | Financial Services, Healthcare, Technology, Retail, Government, Cross-industry |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: no | Free trial: yes |
| Deployment | ||
| Deployment options | On-Premise | SaaSCloudHybridOn-Premise |
| Deployment details | On-premises hardware; Dedicated hardware security appliance | Cloud (SaaS); Self-Hosted; Hybrid; HCP Vault SaaS; Self-hosted cluster; Kubernetes Helm |
| Data residency | On-premises deployment | Multi-region cloud; customer-hosted |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Enterprise NetworksFinancial Clouds | CloudHybridKubernetesContainersVMs |
| Compliance | FIPS 140-2 Level 3Common Criteria EAL4+ | SOC 2 Type IIISO 27001FIPS 140-2GDPRHIPAA |
| Integrations & coverage | ||
| Integrations | PKCS#11Microsoft CNGJava JCAWeb serversDatabase engines | AWSMicrosoft AzureGoogle CloudKubernetesTerraformOktaGitHub |
| Industries | BankingEnterpriseDefenseFinancial ServicesEnterprise ITGovernment+1 more | Financial ServicesHealthcareTechnologyRetailGovernmentCross-industry |
| Regions | Global | GlobalNorth AmericaEuropeAsia-Pacific |
| Vendor | ||
| Company | Entrust | HashiCorp |
| Headquarters | Shakopee, Minnesota, USA | San Francisco, California, USA |
| Company size | 2,500+ | 250,000+ (parent: IBM) |
| Founded | 1969 | 2012 |
Overview
What it is
Entrust nShield HSM
Entrust nShield HSM: physical tamper-evident enclosure and hardware cryptographic offload. Built for database TDE root. Compare Encryption alternatives.HashiCorp Vault
HashiCorp Vault covers dynamic secrets, data encryption as a service and PKI certificate engine for centralized secrets storage. Compare top Encryption tools.Product type
Entrust nShield HSM
Network Hardware Security ModuleHashiCorp Vault
Secrets & Encryption Management PlatformBest for
Entrust nShield HSM
Banking, Enterprise, Defense, Financial Services, Enterprise IT, Government, TelecomHashiCorp Vault
Financial Services, Healthcare, Technology, Retail, Government, Cross-industryPricing
Pricing model
Entrust nShield HSM
Contact VendorHashiCorp Vault
Contact VendorFree trial
Entrust nShield HSM
Free trial: noHashiCorp Vault
Free trial: yesDeployment
Deployment options
Entrust nShield HSM
HashiCorp Vault
Deployment details
Entrust nShield HSM
On-premises hardware; Dedicated hardware security applianceHashiCorp Vault
Cloud (SaaS); Self-Hosted; Hybrid; HCP Vault SaaS; Self-hosted cluster; Kubernetes HelmData residency
Entrust nShield HSM
On-premises deploymentHashiCorp Vault
Multi-region cloud; customer-hostedKey features
What it offers
Entrust nShield HSM
- Physical tamper-evident enclosure
- Hardware cryptographic offload
- Root-of-trust protection
- Multi-tenant
- Cryptographic transaction processing
- Master key custody
- Database TDE root
HashiCorp Vault
- Dynamic secrets
- Data encryption as a service
- PKI certificate engine
- Key management
- Auditing
- Identity-based access
- Centralized secrets storage
- Dynamic database credential generation
Platform & access
API access
Entrust nShield HSM
API access: yesHashiCorp Vault
API access: yesSingle sign-on (SSO)
Entrust nShield HSM
SSO: yesHashiCorp Vault
SSO: yesRole-based access (RBAC)
Entrust nShield HSM
RBAC: yesHashiCorp Vault
RBAC: yesMulti-tenant
Entrust nShield HSM
Multi-tenant: yesHashiCorp Vault
Multi-tenant: yesMobile app
Entrust nShield HSM
Mobile app: noHashiCorp Vault
Mobile app: noSupported platforms
Entrust nShield HSM
HashiCorp Vault
Compliance
Entrust nShield HSM
HashiCorp Vault
Integrations & coverage
Integrations
Entrust nShield HSM
HashiCorp Vault
Industries
Entrust nShield HSM
HashiCorp Vault
Regions
Entrust nShield HSM
HashiCorp Vault
Vendor
Company
Entrust nShield HSM
EntrustHashiCorp Vault
HashiCorpHeadquarters
Entrust nShield HSM
Shakopee, Minnesota, USAHashiCorp Vault
San Francisco, California, USACompany size
Entrust nShield HSM
2,500+HashiCorp Vault
250,000+ (parent: IBM)Founded
Entrust nShield HSM
1969HashiCorp Vault
2012