CISO Tribune

Vendor comparison · 2 companies

HashiCorp vs Token Security

HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. Token Security sells a platform that secures the identities supporting agentic AI deployments. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • HashiCorp
  • Token Security
HashiCorp vs Token Security: Products, Customers and Funding Compared
HashiCorpHashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code.hashicorp.comToken SecurityToken Security sells a platform that secures the identities supporting agentic AI deployments.token.security
What it sells
  • Vault[1][4][7][8][9]Vault is used for secrets management operations.
  • Boundary[1][7][8]Boundary brokers credentials to targets through external credential sources such as HashiCorp Vault.
  • HCP Terraform[4][6][10][11]HCP Terraform provisions cloud resources through automation.
  • Terraform Enterprise[10]Terraform Enterprise is an infrastructure as code tool.
  • Infragraph[4]Infragraph gives a view of a hybrid estate through a knowledge graph.
  • Packer[8]Packer workflows are used for image compliance in Azure.
  • HashiCorp Cloud PlatformHCP is a unified suite of SaaS products for infrastructure and security lifecycle management.
  • MCP Server and AI Agent[1][2][8]A real-time natural language interface that lets security teams interact directly with their environment.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
2012[2]Not stated on its pages
Ownership and funding
Owned by IBM since 2025[3][6][11][12][15][16]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 27, 2026HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog.[15]
  • May 12, 2026Token Security announced its inclusion in the Rising in Cyber 2026 list of promising private cybersecurity startups.[11]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Organizations can implement The Infrastructure Cloud through the HashiCorp Cloud Platform, self-managed solutions, or a combination, across a hybrid environment. Customers named on its pages include a company that partners with medical organizations and an Italian telecommunications company. HCP Terraform is described with minimum privileges for developers, cloud engineers, and operations managers.Not written yet
Last verified
October 21, 2026November 9, 2026

Where they overlap

  • HashiCorp and Token Security are both filed under Non-human identity security.

Where they differ, field by field

  • HashiCorp's primary category is Privileged access management; Token Security's is Non-human identity security.
  • HashiCorp is also filed under Secrets detection. Token Security is also filed under AI model and agent security and AI governance.
  • HashiCorp lists Vault, Boundary, HCP Terraform, Terraform Enterprise, Infragraph and 2 more. Token Security lists MCP Server and AI Agent.
  • HashiCorp was founded in 2012.
  • HashiCorp is owned by IBM, since 2025.

What it sells: HashiCorp

What Boundary does[1][7][8]
Boundary integrates with external credential sources such as HashiCorp Vault to broker credentials to targets. HashiCorp describes using Boundary to automatically discover target hosts and services for access to on-demand infrastructure.
What HCP Terraform does[4][6][10][11]
HCP Terraform enables automated provisioning of cloud resources. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines.
What Terraform Enterprise does[10]
Terraform Enterprise helped AGL create configuration files to define infrastructure. AGL chose Terraform Enterprise over the community edition because of its enterprise-specific features.
What Infragraph does[4]
Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph. HCP Terraform Standard and Premium customers now have access to Infragraph.
What HashiCorp Cloud Platform does
The HashiCorp Cloud Platform (HCP) is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting critical applications. Organizations can implement The Infrastructure Cloud through HCP, self-managed solutions, or a combination of the two.

What it sells: Token Security

What MCP Server and AI Agent does[1][2][8]
The Token MCP Server lets users ask questions from chat applications such as Claude, ChatGPT, and Gemini, or from AI agent-based applications such as Cursor. The Token AI agent is built into the Token Security NHI Security Platform and provides conversational AI capabilities from the Token UI. Token AI delivers organization-specific remediation guidance, including scripts, CLI commands, and fix recommendations.

Questions about HashiCorp and Token Security

What do HashiCorp and Token Security sell?
HashiCorp sells Vault, Boundary, HCP Terraform, Terraform Enterprise, Infragraph and 2 more. Token Security sells MCP Server and AI Agent.
Are HashiCorp and Token Security in the same category?
They share Non-human identity security. HashiCorp's primary category is Privileged access management and Token Security's is Non-human identity security.
When were HashiCorp and Token Security founded?
HashiCorp was founded in 2012.
Who owns HashiCorp and Token Security?
HashiCorp is owned by IBM, since 2025.
Who are HashiCorp and Token Security sold to?
Organizations can implement The Infrastructure Cloud through the HashiCorp Cloud Platform, self-managed solutions, or a combination, across a hybrid environment.
What have HashiCorp and Token Security announced recently?
October 27, 2026: HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog. May 12, 2026: Token Security announced its inclusion in the Rising in Cyber 2026 list of promising private cybersecurity startups.

About HashiCorp

HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. The Infrastructure Cloud automates workflows and serves as a central system of record. Infrastructure and Security Lifecycle Management, shortened to ILM and SLM, are the foundation of The Infrastructure Cloud. HashiCorp organizes its commercial products by Infrastructure and Security portfolios.[4][5]

The HashiCorp Cloud Platform, or HCP, is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting an organization's most critical applications. HashiCorp lets organizations implement The Infrastructure Cloud through the HashiCorp Cloud Platform, through self-managed solutions, or through a combination of the two. The Infrastructure Cloud automates provisioning, enforces policies, and standardizes how teams work across a hybrid environment. HashiCorp offers identity-based access controls and secrets management for hybrid cloud security. Terraform, Vault, and Consul are among HashiCorp products.[1][4][9]

IBM Terraform provides automated infrastructure as code provisioning and management through a platform approach across cloud, private data centers, and SaaS infrastructure. A self-managed IBM Terraform option is for enterprises with security, compliance, and operational needs. HCP Terraform Standard and Premium customers now have access to Infragraph. Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph.[4]

Boundary brokers credentials to targets by integrating with external credential sources such as HashiCorp Vault. HashiCorp describes using Boundary to automatically discover target hosts and services to address access to on-demand infrastructure. HashiCorp describes using Azure Active Directory to verify the identity of a Vault user when applying access control and enforcing governance requirements in cloud resources. HashiCorp describes a Packer workflow for maintaining image compliance in Azure.[7][8]

AGL used Terraform Enterprise to create configuration files that define infrastructure, and AGL later moved from Terraform Enterprise to HCP Terraform. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines on Jenkins and Microsoft Azure DevOps Services. Vodafone Italia S.p.A. is an Italian telecommunications company.[10]

HCP Terraform includes role-based access control and Sentinel policy capabilities, with minimum privileges for developers, cloud engineers, and operations managers. Vodafone Italy developers can use Terraform modules served through the private registry to stand up the infrastructure a service or microservice demands.

HashiCorp, Inc. has been acquired by International Business Machines Corporation, as of February 27th, 2025, and will be integrated into the IBM organization. HashiCorp holds a SOC 2 Type 2 report and ISO 27001, ISO 27017 and ISO 27018 certifications. HashiCorp hires external third parties to perform regular security assessment and penetration testing of its products. HashiCorp provides Long-Term Support releases for certain commercial products. LTS versions let customers stay on a supported major version for up to two years at a time, and HashiCorp promises to backport critical fixes and security patches. HashiCorp Authenticode signs Microsoft Windows executables and code signs Apple macOS executables.[1][9][10][13][14]

HashiCorp on the record

Sources

HashiCorp full record

  1. [1]hashicorp.comHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  2. [2]AboutHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  3. [3]PressHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  4. [4]HashiCorp | An IBM CompanyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  5. [5]HCP Brand Guidelines - Product LogosHashiCorp · undated page, accessed November 10, 2026 · Tier A
  6. [6]HashiCorp Product PricingHashiCorp · undated page, accessed November 10, 2026 · Tier A
  7. [7]Topics in the Security categoryHashiCorp · published October 29, 2026 · Tier A
  8. [8]Security with HashiCorp and Microsoft AzureHashiCorp · undated page, accessed November 10, 2026 · Tier A
  9. [9]HashiCorp - athenahealthHashiCorp · undated page, accessed November 10, 2026 · Tier A
  10. [10]HashiCorp - AGL EnergyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  11. [11]HashiCorp - Vodafone ItalyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  12. [12]Privacy at HashiCorpHashiCorp · published April 20, 2026 · Tier A
  13. [13]Security at HashiCorpHashiCorp · undated page, accessed November 10, 2026 · Tier A
  14. [14]Technical Support Services and PoliciesHashiCorp · undated page, accessed November 10, 2026 · Tier A
  15. [15]The Stack by HashiCorpHashiCorp · published October 27, 2026 · Tier A
  16. [16]IBM Terraform (formerly HashiCorp Terraform) Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Token Security full record

  1. [1]token.securityToken Security · token.security · undated page, accessed October 7, 2026 · Tier A
  2. [2]AI Agent & Non-Human Identity Security Platform | Token SecurityToken Security · undated page, accessed October 31, 2026 · Tier A
  3. [3]NHI Discovery & Visibility | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]Identity Security Platform for Cloud and AI EnvironmentsToken Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]NHI Lifecycle Management | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]NHI Threat Detection & Response | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]NHI Automation & Remediation | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]MCP Server and AI Agent | Token SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]About Token Security | Identity Security for AI Agents & Non-Human Identities (NHIs)Token Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]Careers at Token Security | Join the Future of Identity & AI SecurityToken Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Token Security Named to Rising in Cyber 2026 List of Top Cybersecurity StartupsToken Security · published May 12, 2026 · Tier A

Spot a factual error? Request a correction.