
Azure Key Vault
Azure Key Vault is a cloud service for managing keys, secrets, and certificates through the web.
What Azure Key Vault is
Azure Key Vault is a cloud service for managing keys, secrets, and certificates through the web. Its Standard plan uses software-protected keys, while Premium uses HSM-protected keys; both list secrets operations and certificate operations. The service supports key audit logs and audit logs, helping record activity around managed credentials. Secret rotation is listed for maintaining changing credentials. Azure Key Vault can inject secrets into CI/CD workflows and integrates with Kubernetes, connecting stored values with deployment processes and container environments. It is sold on a paid basis and has no free plan. The deployment model is cloud, so the listed access model is a hosted service rather than a desktop or mobile application. The main stated plan distinction is the protection method for keys: software protection in Standard or HSM protection in Premium. Both plans retain the same listed operations for secrets and certificates.
Good
- Software- or HSM-protected key options
- Secret and certificate operations
- Key audit logs
- Secret rotation
- Kubernetes integration
Watch out
- No free plan
- Web platform with cloud deployment
- Standard uses software-protected keys
Who it suits
Azure Key Vault suits teams managing application keys, secrets, and certificates in cloud-based workflows. It is particularly relevant when secret rotation, CI/CD injection, or Kubernetes integration is needed.
Verdict
Azure Key Vault provides web-based cloud management for keys, secrets, and certificates. Standard and Premium differ by key protection method, while both support auditing and operational controls.
Plans and prices
From Azure Key Vault's own pricing page, checked 22 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Standard | Priced on request | Software-protected keys · Secrets operations · Certificate operations |
| Premium | Priced on request | HSM-protected keys · Secrets operations · Certificate operations |
Alternatives to Azure Key Vault
- 1
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 2

Utimaco Enterprise Secure Key Manager
WebAPILinuxSelf-hosted6.5 - 3
OpenStack Barbican
Free planAPILinuxSelf-hosted6.1Free plan - 4

Cryptsoft KMIP Server
WebAPILinuxSelf-hosted6.0 - 5
Kleopatra
Free planLinuxWindows6.0Free plan - 6
5.9From $1 a month
