Who leads security at HashiCorp

What the company sells

HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. The Infrastructure Cloud automates workflows and serves as a central system of record. Infrastructure and Security Lifecycle Management, shortened to ILM and SLM, are the foundation of The Infrastructure Cloud. HashiCorp organizes its commercial products by Infrastructure and Security portfolios.

The HashiCorp Cloud Platform, or HCP, is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting an organization's most critical applications. HashiCorp lets organizations implement The Infrastructure Cloud through the HashiCorp Cloud Platform, through self-managed solutions, or through a combination of the two. The Infrastructure Cloud automates provisioning, enforces policies, and standardizes how teams work across a hybrid environment. HashiCorp offers identity-based access controls and secrets management for hybrid cloud security. Terraform, Vault, and Consul are among HashiCorp products.

IBM Terraform provides automated infrastructure as code provisioning and management through a platform approach across cloud, private data centers, and SaaS infrastructure. A self-managed IBM Terraform option is for enterprises with security, compliance, and operational needs. HCP Terraform Standard and Premium customers now have access to Infragraph. Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph.

Boundary brokers credentials to targets by integrating with external credential sources such as HashiCorp Vault. HashiCorp describes using Boundary to automatically discover target hosts and services to address access to on-demand infrastructure. HashiCorp describes using Azure Active Directory to verify the identity of a Vault user when applying access control and enforcing governance requirements in cloud resources. HashiCorp describes a Packer workflow for maintaining image compliance in Azure.

AGL used Terraform Enterprise to create configuration files that define infrastructure, and AGL later moved from Terraform Enterprise to HCP Terraform. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines on Jenkins and Microsoft Azure DevOps Services. Vodafone Italia S.p.A. is an Italian telecommunications company.

HCP Terraform includes role-based access control and Sentinel policy capabilities, with minimum privileges for developers, cloud engineers, and operations managers. Vodafone Italy developers can use Terraform modules served through the private registry to stand up the infrastructure a service or microservice demands.

HashiCorp, Inc. has been acquired by International Business Machines Corporation, as of February 27th, 2025, and will be integrated into the IBM organization. HashiCorp holds a SOC 2 Type 2 report and ISO 27001, ISO 27017 and ISO 27018 certifications. HashiCorp hires external third parties to perform regular security assessment and penetration testing of its products. HashiCorp provides Long-Term Support releases for certain commercial products. LTS versions let customers stay on a supported major version for up to two years at a time, and HashiCorp promises to backport critical fixes and security patches. HashiCorp Authenticode signs Microsoft Windows executables and code signs Apple macOS executables.^{[1][4][5][7][8][9][10][13][14]}

Categories

• Privileged access management (primary category)
• Non-human identity security
• Secrets detection
• Compare HashiCorp with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

2012^[2]

Ownership

Owned by IBM since 2025^{[3][6][11][12][15][16]}

CISO on record

Not yet on our record. Send a verified source

Website

hashicorp.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Vault^{[1][4][7][8][9]}

  Vault is used for secrets management operations.

• Boundary^[1][7][8]

  Boundary brokers credentials to targets through external credential sources such as HashiCorp Vault.

  Boundary integrates with external credential sources such as HashiCorp Vault to broker credentials to targets. HashiCorp describes using Boundary to automatically discover target hosts and services for access to on-demand infrastructure.

• HCP Terraform^{[4][6][10][11]}

  HCP Terraform provisions cloud resources through automation.

  HCP Terraform enables automated provisioning of cloud resources. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines.

• Terraform Enterprise^[10]

  Terraform Enterprise is an infrastructure as code tool.

  Terraform Enterprise helped AGL create configuration files to define infrastructure. AGL chose Terraform Enterprise over the community edition because of its enterprise-specific features.

• Infragraph^[4]

  Infragraph gives a view of a hybrid estate through a knowledge graph.

  Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph. HCP Terraform Standard and Premium customers now have access to Infragraph.

• Packer^[8]

  Packer workflows are used for image compliance in Azure.

• HashiCorp Cloud Platform

  HCP is a unified suite of SaaS products for infrastructure and security lifecycle management.

  The HashiCorp Cloud Platform (HCP) is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting critical applications. Organizations can implement The Infrastructure Cloud through HCP, self-managed solutions, or a combination of the two.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of HashiCorp's categories, then alphabetical. A list from the record, never a ranking.

• On privileged access management, HashiCorp competes with Apono, BeyondTrust, Britive, CyberArk, Delinea, Keeper Security, P0 Security, SSH Communications Security, 1Password, Akeyless and 9 more.

• On non-human identity security, HashiCorp competes with Akeyless, Clutch Security, Infisical, Oasis Security, Aembit, Astrix Security, AuthMind, Cygrid, NewCore, Token Security and 30 more.

• On secrets detection, HashiCorp competes with GitGuardian, Truffle Security, Clutch Security, Endor Labs, GitHub Advanced Security, GitLab, JFrog, Legit Security, Semgrep and Snyk.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 4.6 out of 5 · 152 reviews^[16]seen November 10, 2026

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• October 27, 2026

  HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog. HashiCorp^[15]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]hashicorp.comHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A: the company, a regulator or a filing
2. [2]AboutHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A: the company, a regulator or a filing
3. [3]PressHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A: the company, a regulator or a filing
4. [4]HashiCorp | An IBM CompanyHashiCorp · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
5. [5]HCP Brand Guidelines - Product LogosHashiCorp · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]HashiCorp Product PricingHashiCorp · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]Topics in the Security categoryHashiCorp · published October 29, 2026 · Tier A: the company, a regulator or a filing
8. [8]Security with HashiCorp and Microsoft AzureHashiCorp · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]HashiCorp - athenahealthHashiCorp · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
10. [10]HashiCorp - AGL EnergyHashiCorp · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
11. [11]HashiCorp - Vodafone ItalyHashiCorp · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
12. [12]Privacy at HashiCorpHashiCorp · published April 20, 2026 · Tier A: the company, a regulator or a filing
13. [13]Security at HashiCorpHashiCorp · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
14. [14]Technical Support Services and PoliciesHashiCorp · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
15. [15]The Stack by HashiCorpHashiCorp · published October 27, 2026 · Tier A: the company, a regulator or a filing
16. [16]IBM Terraform (formerly HashiCorp Terraform) Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Last verified October 21, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded October 21, 2026, expanded November 10, 2026 from the references above.

Work for HashiCorp? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.