CISO Tribune

Vendor comparison · 2 companies

HashiCorp vs Immuta

HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. Immuta sells software that connects to data platforms so customers can register their data and manage access controls on that data. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • HashiCorp
  • Immuta
HashiCorp vs Immuta: Products, Customers and Funding Compared
HashiCorpHashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code.hashicorp.comImmutaImmuta sells software that connects to data platforms so customers can register their data and manage access controls on that data.immuta.com
What it sells
  • Vault[1][4][7][8][9]Vault is used for secrets management operations.
  • Boundary[1][7][8]Boundary brokers credentials to targets through external credential sources such as HashiCorp Vault.
  • HCP Terraform[4][6][10][11]HCP Terraform provisions cloud resources through automation.
  • Terraform Enterprise[10]Terraform Enterprise is an infrastructure as code tool.
  • Infragraph[4]Infragraph gives a view of a hybrid estate through a knowledge graph.
  • Packer[8]Packer workflows are used for image compliance in Azure.
  • HashiCorp Cloud PlatformHCP is a unified suite of SaaS products for infrastructure and security lifecycle management.
  • Govern[1][4]Writes data access policies in plain language and enforces them across connected data systems.
  • Provision[1]Manages access requests and masking exceptions, routing routine access automatically and sending genuine exceptions for a decision.
  • Comply[1]Records every access decision as it happens so compliance and audit questions can be answered quickly.
  • Agentic Data Access[1]Issues AI agents scoped, temporary credentials tied to the human they act on behalf of.
  • Immuta Detect[2]Provides continuous user and data activity monitoring across cloud data platforms for risk remediation and posture management.
Categories
Headquarters
Not stated on its pagesBoston, United States[2]
Founded
2012[2]2015[2]
Ownership and funding
Owned by IBM since 2025[3][6][11][12][15][16]Privately held[5]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 27, 2026HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog.[15]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[5]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Organizations can implement The Infrastructure Cloud through the HashiCorp Cloud Platform, self-managed solutions, or a combination, across a hybrid environment. Customers named on its pages include a company that partners with medical organizations and an Italian telecommunications company. HCP Terraform is described with minimum privileges for developers, cloud engineers, and operations managers.Immuta addresses organisations where AI agents request data on behalf of named people. Immuta also speaks to teams that connect data platforms and want access controls managed on the data held in them. Immuta describes a division of work in which policy answers routine requests and people own the exceptions.
Last verified
October 21, 2026November 8, 2026

Where they overlap

  • HashiCorp and Immuta are both filed under Non-human identity security.

Where they differ, field by field

  • HashiCorp's primary category is Privileged access management; Immuta's is Data security posture management.
  • HashiCorp is also filed under Secrets detection. Immuta is also filed under Identity governance and administration and Privacy management.
  • HashiCorp lists Vault, Boundary, HCP Terraform, Terraform Enterprise, Infragraph and 2 more. Immuta lists Govern, Provision, Comply, Agentic Data Access and Immuta Detect.
  • Immuta is headquartered in Boston, United States.
  • HashiCorp was founded in 2012. Immuta was founded in 2015.
  • HashiCorp is owned by IBM, since 2025. Immuta is privately held.

What it sells: HashiCorp

What Boundary does[1][7][8]
Boundary integrates with external credential sources such as HashiCorp Vault to broker credentials to targets. HashiCorp describes using Boundary to automatically discover target hosts and services for access to on-demand infrastructure.
What HCP Terraform does[4][6][10][11]
HCP Terraform enables automated provisioning of cloud resources. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines.
What Terraform Enterprise does[10]
Terraform Enterprise helped AGL create configuration files to define infrastructure. AGL chose Terraform Enterprise over the community edition because of its enterprise-specific features.
What Infragraph does[4]
Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph. HCP Terraform Standard and Premium customers now have access to Infragraph.
What HashiCorp Cloud Platform does
The HashiCorp Cloud Platform (HCP) is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting critical applications. Organizations can implement The Infrastructure Cloud through HCP, self-managed solutions, or a combination of the two.

Questions about HashiCorp and Immuta

What do HashiCorp and Immuta sell?
HashiCorp sells Vault, Boundary, HCP Terraform, Terraform Enterprise, Infragraph and 2 more. Immuta sells Govern, Provision, Comply, Agentic Data Access and Immuta Detect.
Are HashiCorp and Immuta in the same category?
They share Non-human identity security. HashiCorp's primary category is Privileged access management and Immuta's is Data security posture management.
Where are HashiCorp and Immuta headquartered?
Immuta is headquartered in Boston, United States.
When were HashiCorp and Immuta founded?
HashiCorp was founded in 2012. Immuta was founded in 2015.
Who owns HashiCorp and Immuta?
HashiCorp is owned by IBM, since 2025. Immuta is privately held.
Who are HashiCorp and Immuta sold to?
Organizations can implement The Infrastructure Cloud through the HashiCorp Cloud Platform, self-managed solutions, or a combination, across a hybrid environment. Immuta addresses organisations where AI agents request data on behalf of named people.
What have HashiCorp and Immuta announced recently?
October 27, 2026: HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog.

About HashiCorp

HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. The Infrastructure Cloud automates workflows and serves as a central system of record. Infrastructure and Security Lifecycle Management, shortened to ILM and SLM, are the foundation of The Infrastructure Cloud. HashiCorp organizes its commercial products by Infrastructure and Security portfolios.[4][5]

The HashiCorp Cloud Platform, or HCP, is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting an organization's most critical applications. HashiCorp lets organizations implement The Infrastructure Cloud through the HashiCorp Cloud Platform, through self-managed solutions, or through a combination of the two. The Infrastructure Cloud automates provisioning, enforces policies, and standardizes how teams work across a hybrid environment. HashiCorp offers identity-based access controls and secrets management for hybrid cloud security. Terraform, Vault, and Consul are among HashiCorp products.[1][4][9]

IBM Terraform provides automated infrastructure as code provisioning and management through a platform approach across cloud, private data centers, and SaaS infrastructure. A self-managed IBM Terraform option is for enterprises with security, compliance, and operational needs. HCP Terraform Standard and Premium customers now have access to Infragraph. Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph.[4]

Boundary brokers credentials to targets by integrating with external credential sources such as HashiCorp Vault. HashiCorp describes using Boundary to automatically discover target hosts and services to address access to on-demand infrastructure. HashiCorp describes using Azure Active Directory to verify the identity of a Vault user when applying access control and enforcing governance requirements in cloud resources. HashiCorp describes a Packer workflow for maintaining image compliance in Azure.[7][8]

AGL used Terraform Enterprise to create configuration files that define infrastructure, and AGL later moved from Terraform Enterprise to HCP Terraform. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines on Jenkins and Microsoft Azure DevOps Services. Vodafone Italia S.p.A. is an Italian telecommunications company.[10]

HCP Terraform includes role-based access control and Sentinel policy capabilities, with minimum privileges for developers, cloud engineers, and operations managers. Vodafone Italy developers can use Terraform modules served through the private registry to stand up the infrastructure a service or microservice demands.

HashiCorp, Inc. has been acquired by International Business Machines Corporation, as of February 27th, 2025, and will be integrated into the IBM organization. HashiCorp holds a SOC 2 Type 2 report and ISO 27001, ISO 27017 and ISO 27018 certifications. HashiCorp hires external third parties to perform regular security assessment and penetration testing of its products. HashiCorp provides Long-Term Support releases for certain commercial products. LTS versions let customers stay on a supported major version for up to two years at a time, and HashiCorp promises to backport critical fixes and security patches. HashiCorp Authenticode signs Microsoft Windows executables and code signs Apple macOS executables.[1][9][10][13][14]

HashiCorp on the record

Sources

HashiCorp full record

  1. [1]hashicorp.comHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  2. [2]AboutHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  3. [3]PressHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  4. [4]HashiCorp | An IBM CompanyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  5. [5]HCP Brand Guidelines - Product LogosHashiCorp · undated page, accessed November 10, 2026 · Tier A
  6. [6]HashiCorp Product PricingHashiCorp · undated page, accessed November 10, 2026 · Tier A
  7. [7]Topics in the Security categoryHashiCorp · published October 29, 2026 · Tier A
  8. [8]Security with HashiCorp and Microsoft AzureHashiCorp · undated page, accessed November 10, 2026 · Tier A
  9. [9]HashiCorp - athenahealthHashiCorp · undated page, accessed November 10, 2026 · Tier A
  10. [10]HashiCorp - AGL EnergyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  11. [11]HashiCorp - Vodafone ItalyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  12. [12]Privacy at HashiCorpHashiCorp · published April 20, 2026 · Tier A
  13. [13]Security at HashiCorpHashiCorp · undated page, accessed November 10, 2026 · Tier A
  14. [14]Technical Support Services and PoliciesHashiCorp · undated page, accessed November 10, 2026 · Tier A
  15. [15]The Stack by HashiCorpHashiCorp · published October 27, 2026 · Tier A
  16. [16]IBM Terraform (formerly HashiCorp Terraform) Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Immuta full record

  1. [1]immuta.comImmuta · immuta.com · undated page, accessed November 8, 2026 · Tier A
  2. [2]Immuta recognized as a top company on forbes annual list of americas best startup employers 2Immuta · immuta.com · published March 22, 2023 · Tier A
  3. [3]Integrations | Documentation - SaaSImmuta · undated page, accessed November 10, 2026 · Tier A
  4. [4]The Authorization Layer for Data Access | ImmutaImmuta · undated page, accessed November 10, 2026 · Tier A
  5. [5]Immuta Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.