Skip to content
Z Zendikt
Vendor trust scorecard

HashiCorp Vault vendor trust score

Trust scoring is the “is this vendor a fair counterparty” question, deliberately separated from product quality. Six dimensions, dated, sourced where events warrant it.

6.3
/10
cautious
Verdict

HashiCorp Vault's vendor trust profile warrants caution. Below-average dimensions need explicit mitigation language in the contract.

Vendor Trust Score

Is HashiCorp Vault a trustworthy vendor?

6.3/10
Mixed
Pricing transparency
Published rates; no hidden fees
5.5
Contract fairness
Reasonable terms; no auto-renew traps
6.0
Incident response
How they handle outages and breaches
8.0
Post-acquisition behavior
Customer treatment after M&A or PE
5.5
Executive stability
Leadership churn over 24 months
6.0
Roadmap honesty
Public commitments held
6.5
Trust signal log
  • 2023-08-10
    BSL license switch announced
    HashiCorp relicensed Terraform, Vault, Consul, Nomad, Packer, Boundary, and Waypoint from MPL to Business Source License. Community backlash sparked OpenTofu (Terraform) fork and later OpenBao (Vault) fork under Linux Foundation governance.
  • 2024-04-24
    IBM announced acquisition of HashiCorp at $6.4B
  • 2025-02-27
    IBM closed HashiCorp acquisition
    Acquisition closed for about $6.4B. Post-IBM product strategy still being clarified through 2026; integration with IBM Cloud and Red Hat is stated direction.
  • 2024-06-20
    OpenBao reached LF Sandbox status
    OpenBao (Vault fork) accepted as a Linux Foundation Sandbox project, formalizing a community alternative to BSL Vault.
  • 2025-09-15
    Post-IBM roadmap wait-and-see posture reported
    Enterprise customers report cautious posture on new commitments pending clearer post-IBM roadmap velocity signals.
Vendor Trust is scored independently of product quality. A great product from an unfair vendor still earns a low trust score.

How to read this score

  • Trust is separate from product quality. A vendor can ship great software and treat customers badly — or vice versa. We score the two independently.
  • 8.0+/10: strong. Few concerns at renewal or procurement.
  • 6.5–7.9: mixed. Negotiate hard on the lowest dimensions; monitor across the contract term.
  • 5.0–6.4: cautious. Add explicit mitigation language to the master agreement.
  • Below 5.0: concerning. Treat this as a contracted-risk evaluation, not a product-fit evaluation.
  • Updates: we re-verify scoring quarterly. Material trust events (acquisitions, breaches, leadership change, hostile contract terms) get logged on the timeline above.

Related editorial

Last updated 2026-05-10. Scoring methodology: editorial standards. Disagree? Tell us.