CISO Tribune

Vendor comparison · 2 companies

HashiCorp vs Onyx Security

HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. Onyx Security sells a secure control plane for AI agents and models. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • HashiCorp
  • Onyx Security
HashiCorp vs Onyx Security: Products, Customers and Funding Compared
HashiCorpHashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code.hashicorp.comOnyx SecurityOnyx Security sells a secure control plane for AI agents and models.onyx.security
What it sells
  • Vault[1][4][7][8][9]Vault is used for secrets management operations.
  • Boundary[1][7][8]Boundary brokers credentials to targets through external credential sources such as HashiCorp Vault.
  • HCP Terraform[4][6][10][11]HCP Terraform provisions cloud resources through automation.
  • Terraform Enterprise[10]Terraform Enterprise is an infrastructure as code tool.
  • Infragraph[4]Infragraph gives a view of a hybrid estate through a knowledge graph.
  • Packer[8]Packer workflows are used for image compliance in Azure.
  • HashiCorp Cloud PlatformHCP is a unified suite of SaaS products for infrastructure and security lifecycle management.
  • AI Security[1][7]Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane.
  • MCP Gateway[8]The MCP Gateway governs the agent-to-tool surface.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
2012[2]Not stated on its pages
Ownership and funding
Owned by IBM since 2025[3][6][11][12][15][16]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 27, 2026HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog.[15]
  • July 29, 2026Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.[15]
  • March 12, 2026Onyx Security officially launched operations after securing $40 million in initial funding.[14]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Organizations can implement The Infrastructure Cloud through the HashiCorp Cloud Platform, self-managed solutions, or a combination, across a hybrid environment. Customers named on its pages include a company that partners with medical organizations and an Italian telecommunications company. HCP Terraform is described with minimum privileges for developers, cloud engineers, and operations managers.From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise. Onyx Security describes a single platform for security, governance, and infrastructure teams. Onyx Security offers cloud, hybrid, or self-hosted options for organisations with sensitive data residency requirements. Onyx Security presents one console for AI agents and models across SaaS, cloud, endpoint, and code environments. Onyx Security names security, finance, and platform teams as the teams that share its usage, cost, and policy ledger.
Last verified
October 21, 2026October 19, 2026

Where they overlap

  • HashiCorp and Onyx Security are both filed under Non-human identity security.

Where they differ, field by field

  • HashiCorp's primary category is Privileged access management; Onyx Security's is AI model and agent security.
  • HashiCorp is also filed under Secrets detection. Onyx Security is also filed under AI governance and Workforce AI usage security.
  • HashiCorp lists Vault, Boundary, HCP Terraform, Terraform Enterprise, Infragraph and 2 more. Onyx Security lists AI Security and MCP Gateway.
  • HashiCorp was founded in 2012.
  • HashiCorp is owned by IBM, since 2025.

What it sells: HashiCorp

What Boundary does[1][7][8]
Boundary integrates with external credential sources such as HashiCorp Vault to broker credentials to targets. HashiCorp describes using Boundary to automatically discover target hosts and services for access to on-demand infrastructure.
What HCP Terraform does[4][6][10][11]
HCP Terraform enables automated provisioning of cloud resources. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines.
What Terraform Enterprise does[10]
Terraform Enterprise helped AGL create configuration files to define infrastructure. AGL chose Terraform Enterprise over the community edition because of its enterprise-specific features.
What Infragraph does[4]
Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph. HCP Terraform Standard and Premium customers now have access to Infragraph.
What HashiCorp Cloud Platform does
The HashiCorp Cloud Platform (HCP) is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting critical applications. Organizations can implement The Infrastructure Cloud through HCP, self-managed solutions, or a combination of the two.

What it sells: Onyx Security

What AI Security does[1][7]
Onyx provides the runtime and posture layer of the Onyx Secure AI Control Plane. Onyx inspects every prompt, tool call, and model response inline across browser AI, coding assistants, desktop AI agents, cloud workloads, and MCP servers. Onyx offers five enforcement actions: alert, block, mask, steer, or ask.
What MCP Gateway does[8]
The MCP Gateway governs the agent-to-tool surface. Every tool call an agent makes to an MCP server gets inspected and policy-enforced. MCP Gateway coverage spans the MCP ecosystem, including servers using dynamic client registration and popular servers like GitHub.

Questions about HashiCorp and Onyx Security

What do HashiCorp and Onyx Security sell?
HashiCorp sells Vault, Boundary, HCP Terraform, Terraform Enterprise, Infragraph and 2 more. Onyx Security sells AI Security and MCP Gateway.
Are HashiCorp and Onyx Security in the same category?
They share Non-human identity security. HashiCorp's primary category is Privileged access management and Onyx Security's is AI model and agent security.
When were HashiCorp and Onyx Security founded?
HashiCorp was founded in 2012.
Who owns HashiCorp and Onyx Security?
HashiCorp is owned by IBM, since 2025.
Who are HashiCorp and Onyx Security sold to?
Organizations can implement The Infrastructure Cloud through the HashiCorp Cloud Platform, self-managed solutions, or a combination, across a hybrid environment. From its own pages, Onyx Security sells mainly to security, governance, and AI teams that need control over AI agent adoption across the enterprise.
What have HashiCorp and Onyx Security announced recently?
October 27, 2026: HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog. July 29, 2026: Onyx Security announced a $113 million Series B funding round led by Bessemer Venture Partners.

About HashiCorp

HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. The Infrastructure Cloud automates workflows and serves as a central system of record. Infrastructure and Security Lifecycle Management, shortened to ILM and SLM, are the foundation of The Infrastructure Cloud. HashiCorp organizes its commercial products by Infrastructure and Security portfolios.[4][5]

The HashiCorp Cloud Platform, or HCP, is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting an organization's most critical applications. HashiCorp lets organizations implement The Infrastructure Cloud through the HashiCorp Cloud Platform, through self-managed solutions, or through a combination of the two. The Infrastructure Cloud automates provisioning, enforces policies, and standardizes how teams work across a hybrid environment. HashiCorp offers identity-based access controls and secrets management for hybrid cloud security. Terraform, Vault, and Consul are among HashiCorp products.[1][4][9]

IBM Terraform provides automated infrastructure as code provisioning and management through a platform approach across cloud, private data centers, and SaaS infrastructure. A self-managed IBM Terraform option is for enterprises with security, compliance, and operational needs. HCP Terraform Standard and Premium customers now have access to Infragraph. Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph.[4]

Boundary brokers credentials to targets by integrating with external credential sources such as HashiCorp Vault. HashiCorp describes using Boundary to automatically discover target hosts and services to address access to on-demand infrastructure. HashiCorp describes using Azure Active Directory to verify the identity of a Vault user when applying access control and enforcing governance requirements in cloud resources. HashiCorp describes a Packer workflow for maintaining image compliance in Azure.[7][8]

AGL used Terraform Enterprise to create configuration files that define infrastructure, and AGL later moved from Terraform Enterprise to HCP Terraform. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines on Jenkins and Microsoft Azure DevOps Services. Vodafone Italia S.p.A. is an Italian telecommunications company.[10]

HCP Terraform includes role-based access control and Sentinel policy capabilities, with minimum privileges for developers, cloud engineers, and operations managers. Vodafone Italy developers can use Terraform modules served through the private registry to stand up the infrastructure a service or microservice demands.

HashiCorp, Inc. has been acquired by International Business Machines Corporation, as of February 27th, 2025, and will be integrated into the IBM organization. HashiCorp holds a SOC 2 Type 2 report and ISO 27001, ISO 27017 and ISO 27018 certifications. HashiCorp hires external third parties to perform regular security assessment and penetration testing of its products. HashiCorp provides Long-Term Support releases for certain commercial products. LTS versions let customers stay on a supported major version for up to two years at a time, and HashiCorp promises to backport critical fixes and security patches. HashiCorp Authenticode signs Microsoft Windows executables and code signs Apple macOS executables.[1][9][10][13][14]

HashiCorp on the record

Sources

HashiCorp full record

  1. [1]hashicorp.comHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  2. [2]AboutHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  3. [3]PressHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  4. [4]HashiCorp | An IBM CompanyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  5. [5]HCP Brand Guidelines - Product LogosHashiCorp · undated page, accessed November 10, 2026 · Tier A
  6. [6]HashiCorp Product PricingHashiCorp · undated page, accessed November 10, 2026 · Tier A
  7. [7]Topics in the Security categoryHashiCorp · published October 29, 2026 · Tier A
  8. [8]Security with HashiCorp and Microsoft AzureHashiCorp · undated page, accessed November 10, 2026 · Tier A
  9. [9]HashiCorp - athenahealthHashiCorp · undated page, accessed November 10, 2026 · Tier A
  10. [10]HashiCorp - AGL EnergyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  11. [11]HashiCorp - Vodafone ItalyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  12. [12]Privacy at HashiCorpHashiCorp · published April 20, 2026 · Tier A
  13. [13]Security at HashiCorpHashiCorp · undated page, accessed November 10, 2026 · Tier A
  14. [14]Technical Support Services and PoliciesHashiCorp · undated page, accessed November 10, 2026 · Tier A
  15. [15]The Stack by HashiCorpHashiCorp · published October 27, 2026 · Tier A
  16. [16]IBM Terraform (formerly HashiCorp Terraform) Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Onyx Security full record

  1. [1]onyx.securityOnyx Security · onyx.security · undated page, accessed October 19, 2026 · Tier A
  2. [2]The Secure AI Control Plane for the Agentic Era | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  3. [3]About Onyx | The Team Behind the AI Control PlaneOnyx Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]One Platform to Discover and Control Every AI Agent | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]AI Observability – Discover Every Agent & Session | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Agent Security | Block Prompt Injection in Real TimeOnyx Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]AI Governance Platform Built for the EU AI Act | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]AI Orchestration – Governed Routing & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]AI ROI Platform – Prove Value & Control Costs | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Secure Claude Enterprise with Onyx | Anthropic IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure ChatGPT Enterprise with Onyx | OpenAI IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Secure Amazon Bedrock Agents | Onyx IntegrationOnyx Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]Copilot Studio Security – Discover, Govern & Control | OnyxOnyx Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Israeli cyber firm Onyx Security launches operations with $40 million funding round | ReutersReuters · published March 12, 2026 · Tier B
  15. [15]Onyx Security Raises $113M Series B to Control Advanced AI, Quadrupling Revenue since Stealth Launch Four Months AgoBusiness Wire · published July 29, 2026 · Tier A

Spot a factual error? Request a correction.