OpenBao

AWS Azure Application Infrastructure 2 variations

OpenBao, the open source secrets manager and Vault fork, initialised, unsealed and serving requests within minutes of launch.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Variations

Choose the operating system, cloud and version you need. Every variation is the same hardened OpenBao image, built and supported by cloudimg.

ProductCloudOperating systemVersion
OpenBao Secrets Management Appliance AWS Standard View · Guide
OpenBao on Ubuntu 24.04 LTS Azure Ubuntu 24.04 Standard View · Guide

Overview

OpenBao is a Linux Foundation, MPL 2.0 open source fork of Vault providing secrets management and encryption as a service. It offers a web UI and HTTP API over integrated raft storage for storing secrets, issuing dynamic credentials and encrypting data. It suits teams replacing hardcoded secrets with a managed store.

Why the cloudimg image

The cloudimg image is hardened and fully installed, initialising the store and generating a unique root token and unseal key per instance into a root only file, so no preset keys ship. A dedicated service re unseals the server after every reboot so it returns to a ready state unattended, with raft storage on a dedicated resizable disk. Backed by 24/7 cloudimg support with a documented path to AWS KMS auto unseal and TLS termination.

Common uses

  • Secrets management
  • Dynamic credentials
  • Encryption as a service