HashiCorp Boundary
Session broker from HashiCorp, pairs with Vault for JIT credential injection
ToolPrivileged Access ManagementCloud, Self-hosted, Open source
Pricing: Free and open source; paid tiers on the vendor site.
Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed September 2026 · How we review listings
What is HashiCorp Boundary?
HashiCorp Boundary is an identity-aware session broker for remote access to infrastructure. It pairs naturally with HashiCorp Vault to provide just-in-time credential brokering: users authenticate with Boundary using their identity provider, Boundary requests short-lived credentials from Vault, and injects them into the session without exposing them. Boundary is open source (MPL 2.0) with a commercial HCP Boundary cloud offering.
Best for: Teams already invested in HashiCorp tooling who want unified secrets + session access
Pros
- Natural fit for teams already running HashiCorp Vault
- Open source core with no license cost
- Terraform-native workflow for declarative access policies
- HCP option removes operational overhead
Things to check
- Younger product; smaller community than Teleport
- Session recording requires Enterprise tier
- Best value comes bundled with Vault. Less compelling standalone
- Fewer enterprise integrations than legacy PAM
Reported in public reviews and vendor documentation. See sources below.
Key Features
Do you work at HashiCorp Boundary? to confirm the details or send us a correction.
Add the Cyber Vendor Guide badge to your site
HashiCorp Boundary Comparisons
Sources & references
Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.
Spot an error, or do you represent HashiCorp Boundary? Request a correction.
Key facts
- Pricing
- Free and open source; paid tiers on the vendor site.
- Model
- Open Source + HCP cloud tiers
- Founded
- 2020
- Cloud
- Yes
- Self-hosted
- Yes
- Open source
- Yes
HashiCorp Boundary Alternatives
- TeleportModern identity-aware access for SSH, Kubernetes, databases,...
- StrongDMInfrastructure access proxy with credential injection and se...
- HashiCorp VaultIndustry-standard open-source secrets management platform...
- CyberArk Privilege CloudEnterprise PAM delivered as a SaaS...
Where HashiCorp Boundary appears
Guides
Shortlists
In depth
Certifications
SOC 2 Type 2