CISO Tribune

Vendor comparison · 2 companies

HashiCorp vs Valence

HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. Valence sells a platform that discovers and protects human, non-human, and AI agent identities across endpoint, cloud, and SaaS. CISO Tribune files both under Non-human identity security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • HashiCorp
  • Valence
HashiCorp vs Valence: Products, Customers and Funding Compared
HashiCorpHashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code.hashicorp.comValenceValence sells a platform that discovers and protects human, non-human, and AI agent identities across endpoint, cloud, and SaaS.valencesecurity.com
What it sells
  • Vault[1][4][7][8][9]Vault is used for secrets management operations.
  • Boundary[1][7][8]Boundary brokers credentials to targets through external credential sources such as HashiCorp Vault.
  • HCP Terraform[4][6][10][11]HCP Terraform provisions cloud resources through automation.
  • Terraform Enterprise[10]Terraform Enterprise is an infrastructure as code tool.
  • Infragraph[4]Infragraph gives a view of a hybrid estate through a knowledge graph.
  • Packer[8]Packer workflows are used for image compliance in Azure.
  • HashiCorp Cloud PlatformHCP is a unified suite of SaaS products for infrastructure and security lifecycle management.
  • SaaS Identity Threat Detection and Response (ITDR)Monitors identity activity across SaaS to detect threats.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
2012[2]Not stated on its pages
Ownership and funding
Owned by IBM since 2025[3][6][11][12][15][16]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 27, 2026HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog.[15]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 4, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Organizations can implement The Infrastructure Cloud through the HashiCorp Cloud Platform, self-managed solutions, or a combination, across a hybrid environment. Customers named on its pages include a company that partners with medical organizations and an Italian telecommunications company. HCP Terraform is described with minimum privileges for developers, cloud engineers, and operations managers.From its own pages, Valence sells mainly to security teams that need to discover, protect, and detect and respond to threats across their SaaS and AI ecosystem. Valence also addresses SaaS admins, who work with security teams on a unified view of SaaS and AI risks. Valence works with business users to understand and address risks they configured. Valence offers a route for organizations that want to develop integrations for proprietary or highly specialized SaaS apps. Valence says its platform helps find and fix risks across mission-critical SaaS applications.
Last verified
October 21, 2026November 2, 2026

Where they overlap

  • HashiCorp and Valence are both filed under Non-human identity security.

Where they differ, field by field

  • HashiCorp's primary category is Privileged access management; Valence's is SaaS security posture.
  • HashiCorp is also filed under Secrets detection. Valence is also filed under Identity threat detection and response.
  • HashiCorp lists Vault, Boundary, HCP Terraform, Terraform Enterprise, Infragraph and 2 more. Valence lists SaaS Identity Threat Detection and Response (ITDR).
  • HashiCorp was founded in 2012.
  • HashiCorp is owned by IBM, since 2025.

What it sells: HashiCorp

What Boundary does[1][7][8]
Boundary integrates with external credential sources such as HashiCorp Vault to broker credentials to targets. HashiCorp describes using Boundary to automatically discover target hosts and services for access to on-demand infrastructure.
What HCP Terraform does[4][6][10][11]
HCP Terraform enables automated provisioning of cloud resources. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines.
What Terraform Enterprise does[10]
Terraform Enterprise helped AGL create configuration files to define infrastructure. AGL chose Terraform Enterprise over the community edition because of its enterprise-specific features.
What Infragraph does[4]
Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph. HCP Terraform Standard and Premium customers now have access to Infragraph.
What HashiCorp Cloud Platform does
The HashiCorp Cloud Platform (HCP) is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting critical applications. Organizations can implement The Infrastructure Cloud through HCP, self-managed solutions, or a combination of the two.

What it sells: Valence

What SaaS Identity Threat Detection and Response (ITDR) does
Valence delivers identity threat detection and response across a SaaS ecosystem. Valence monitors activity across users, service accounts, tokens, and integrations to identify suspicious access patterns, privilege abuse, and signs of compromise. Valence correlates events across applications to uncover threats that are difficult to detect in isolation.

Questions about HashiCorp and Valence

What do HashiCorp and Valence sell?
HashiCorp sells Vault, Boundary, HCP Terraform, Terraform Enterprise, Infragraph and 2 more. Valence sells SaaS Identity Threat Detection and Response (ITDR).
Are HashiCorp and Valence in the same category?
They share Non-human identity security. HashiCorp's primary category is Privileged access management and Valence's is SaaS security posture.
When were HashiCorp and Valence founded?
HashiCorp was founded in 2012.
Who owns HashiCorp and Valence?
HashiCorp is owned by IBM, since 2025.
Who are HashiCorp and Valence sold to?
Organizations can implement The Infrastructure Cloud through the HashiCorp Cloud Platform, self-managed solutions, or a combination, across a hybrid environment. From its own pages, Valence sells mainly to security teams that need to discover, protect, and detect and respond to threats across their SaaS and AI ecosystem.
What have HashiCorp and Valence announced recently?
October 27, 2026: HashiCorp introduced the Terraform Developer Portal in public preview, according to a post listed on its Terraform blog.

About HashiCorp

HashiCorp sells The Infrastructure Cloud, an integrated platform that turns Infrastructure Lifecycle Management and Security Lifecycle Management into code. The Infrastructure Cloud automates workflows and serves as a central system of record. Infrastructure and Security Lifecycle Management, shortened to ILM and SLM, are the foundation of The Infrastructure Cloud. HashiCorp organizes its commercial products by Infrastructure and Security portfolios.[4][5]

The HashiCorp Cloud Platform, or HCP, is a unified suite of SaaS products that automate the lifecycle management of the infrastructure and security supporting an organization's most critical applications. HashiCorp lets organizations implement The Infrastructure Cloud through the HashiCorp Cloud Platform, through self-managed solutions, or through a combination of the two. The Infrastructure Cloud automates provisioning, enforces policies, and standardizes how teams work across a hybrid environment. HashiCorp offers identity-based access controls and secrets management for hybrid cloud security. Terraform, Vault, and Consul are among HashiCorp products.[1][4][9]

IBM Terraform provides automated infrastructure as code provisioning and management through a platform approach across cloud, private data centers, and SaaS infrastructure. A self-managed IBM Terraform option is for enterprises with security, compliance, and operational needs. HCP Terraform Standard and Premium customers now have access to Infragraph. Infragraph delivers a single pane of glass view of a hybrid estate through a centralized, event-driven knowledge graph.[4]

Boundary brokers credentials to targets by integrating with external credential sources such as HashiCorp Vault. HashiCorp describes using Boundary to automatically discover target hosts and services to address access to on-demand infrastructure. HashiCorp describes using Azure Active Directory to verify the identity of a Vault user when applying access control and enforcing governance requirements in cloud resources. HashiCorp describes a Packer workflow for maintaining image compliance in Azure.[7][8]

AGL used Terraform Enterprise to create configuration files that define infrastructure, and AGL later moved from Terraform Enterprise to HCP Terraform. Vodafone Italy uses HCP Terraform to create databases, set up its repository and team structure on GitHub, and create CI/CD pipelines on Jenkins and Microsoft Azure DevOps Services. Vodafone Italia S.p.A. is an Italian telecommunications company.[10]

HCP Terraform includes role-based access control and Sentinel policy capabilities, with minimum privileges for developers, cloud engineers, and operations managers. Vodafone Italy developers can use Terraform modules served through the private registry to stand up the infrastructure a service or microservice demands.

HashiCorp, Inc. has been acquired by International Business Machines Corporation, as of February 27th, 2025, and will be integrated into the IBM organization. HashiCorp holds a SOC 2 Type 2 report and ISO 27001, ISO 27017 and ISO 27018 certifications. HashiCorp hires external third parties to perform regular security assessment and penetration testing of its products. HashiCorp provides Long-Term Support releases for certain commercial products. LTS versions let customers stay on a supported major version for up to two years at a time, and HashiCorp promises to backport critical fixes and security patches. HashiCorp Authenticode signs Microsoft Windows executables and code signs Apple macOS executables.[1][9][10][13][14]

HashiCorp on the record

Sources

HashiCorp full record

  1. [1]hashicorp.comHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  2. [2]AboutHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  3. [3]PressHashiCorp · hashicorp.com · undated page, accessed October 21, 2026 · Tier A
  4. [4]HashiCorp | An IBM CompanyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  5. [5]HCP Brand Guidelines - Product LogosHashiCorp · undated page, accessed November 10, 2026 · Tier A
  6. [6]HashiCorp Product PricingHashiCorp · undated page, accessed November 10, 2026 · Tier A
  7. [7]Topics in the Security categoryHashiCorp · published October 29, 2026 · Tier A
  8. [8]Security with HashiCorp and Microsoft AzureHashiCorp · undated page, accessed November 10, 2026 · Tier A
  9. [9]HashiCorp - athenahealthHashiCorp · undated page, accessed November 10, 2026 · Tier A
  10. [10]HashiCorp - AGL EnergyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  11. [11]HashiCorp - Vodafone ItalyHashiCorp · undated page, accessed November 10, 2026 · Tier A
  12. [12]Privacy at HashiCorpHashiCorp · published April 20, 2026 · Tier A
  13. [13]Security at HashiCorpHashiCorp · undated page, accessed November 10, 2026 · Tier A
  14. [14]Technical Support Services and PoliciesHashiCorp · undated page, accessed November 10, 2026 · Tier A
  15. [15]The Stack by HashiCorpHashiCorp · published October 27, 2026 · Tier A
  16. [16]IBM Terraform (formerly HashiCorp Terraform) Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Valence full record

  1. [1]valencesecurity.comValence · valencesecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Israeli cybersecurity startup valence launches out of stealth with 7m in fundingValence · valencesecurity.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]SaaS Application Security Platform | ValenceValence · undated page, accessed October 29, 2026 · Tier A
  4. [4]Valence Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed October 29, 2026 · Tier C
  5. [5]The Leader in SaaS and AI Security, Built for the Agentic Era | ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  6. [6]Comprehensive Microsoft 365 Security and Risk RemediationValence Security · undated page, accessed November 4, 2026 · Tier A
  7. [7]SaaS Security Posture Management | ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  8. [8]AI Security Posture Management (AI-SPM)Valence Security · undated page, accessed November 4, 2026 · Tier A
  9. [9]Identity Threat Detection and Response (ITDR) | ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  10. [10]Valence Connector Studio | Extend SaaS Security to Any ApplicationValence Security · undated page, accessed November 4, 2026 · Tier A
  11. [11]Remediate Your Slack Security Risks | ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  12. [12]GitHub Security: Manage Risks with ValenceValence Security · undated page, accessed November 4, 2026 · Tier A
  13. [13]Google Workspace Security | Protect Your SaaS EnvironmentValence Security · undated page, accessed November 4, 2026 · Tier A
  14. [14]Salesforce Security | Protect Your SaaS EnvironmentValence Security · undated page, accessed November 4, 2026 · Tier A

Spot a factual error? Request a correction.