HashiCorp
The company that defined modern infrastructure automation — the HashiStack (Terraform, Vault, Consul, Nomad, Boundary) that provisions, secures, networks, orchestrates & grants access to infrastructure as code. Now an IBM company. This hub is your complete intel file.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Five intel pages. One integrated platform.
The complete HashiCorp stack — every linked card is a full intel page, from the Infrastructure-as-Code flagship to identity-based secure access.
Terraform
Infrastructure as Code, the standard.
The de facto IaC standard: declarative HCL for multi-cloud and hybrid. The August 2023 BSL relicense triggered the OpenTofu fork.
Vault
Secure every secret.
Secrets management with dynamic, short-lived secrets, encryption as a service and PKI. Powerful, but operationally heavy.
Consul
Services find, connect & secure.
Service discovery and mesh with automatic mTLS across datacenters, clouds, VMs and containers, not just Kubernetes.
Nomad
The simpler K8s alternative.
One lightweight binary that schedules containers, VMs, Java apps and raw binaries. Simpler than Kubernetes, which won the war.
Boundary
Identity-based infra access.
ZTNA for infrastructure: just-in-time access to servers and databases, with Vault-brokered credentials and session recording.
HashiStack
Platform & engineOne infrastructure-as-code model across Terraform, Vault, Consul, Nomad and Boundary; Packer, HCP and Waypoint are folded into this hub
Now an IBM company
Platform & engineIBM’s purchase closed February 27, 2025; the 2023 BSL relicense led to the OpenTofu fork, and IBM ownership raises neutrality questions
HashiCorp sells across 3 of the products TechBag carries in DevOps. The DevOps guide shows how the category splits and which part is yours. →
Why “infrastructure as code, one coherent stack” is the whole story
Clicking through consoles and brittle scripts don’t scale, and infrastructure sprawls across clouds. HashiCorp bet on declarative, multi-cloud infrastructure as code as one coherent stack — Terraform, Vault, Consul, Nomad and Boundary. It is now an IBM company, and its 2023 BSL relicence spawned the open OpenTofu fork.
Terraform (infra as code)
The de-facto IaC standard: provision multi-cloud infrastructure as declarative code, with the biggest provider registry. The 2023 BSL relicense spawned the open OpenTofu fork.
Vault (Secrets & Encryption)
Centralise and rotate every secret, with dynamic short-lived credentials, encryption-as-a-service and PKI. Operationally heavy; HCP Vault Dedicated eases it.
Consul (Service Networking)
Service discovery and a service mesh (mTLS, intentions) across data centres, VMs and containers, not just Kubernetes. Pure-K8s shops often pick the CNCF meshes.
Nomad (Orchestration)
One lightweight binary that schedules containers, VMs, Java and raw binaries — simpler than Kubernetes. But Kubernetes won the ecosystem war, and IBM owns OpenShift too.
Boundary + HCP — Access
Boundary gives identity-based access to infrastructure without VPNs. HCP runs most of the stack as managed SaaS (not Consul since Nov 2025). Boundary overlaps Zscaler and CyberArk.
Start with Terraform (Infrastructure as Code, the standard) — then add Vault (secrets), Consul (networking), Nomad (orchestration) and Boundary (access). One coherent, multi-cloud stack.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Defined modern IaC
Terraform — the standard
Infrastructure automation
provision, secure, network, run, access
Multi-cloud leader
Vault — dynamic secrets
IBM (closed Feb 2025)
now an IBM company
2012 · San Francisco
Hashimoto & Dadgar
BSL → OpenTofu (2023)
the open fork
Open-source roots
huge community & registry
Bengaluru
deep platform-eng community
The company in six figures
See the platform, hear the pitch
What is HashiCorp? — Infrastructure Automation
The HashiStack, explained.
Terraform — the Infrastructure-as-Code Flagship
Write, Plan, Apply — the standard.
Where HashiCorp sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
HashiCorp Across the Stack
Each dot is a HashiStack tool: competitive position vs category momentum.
The flagship — the IaC standard.
The MDR × Integration Map
Infrastructure-as-code & multi-cloud strength vs the field — where the HashiStack leads (and where rivals win).
The de-facto IaC standard; the HashiStack.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with HashiCorp?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What’s your priority?
2. Which sentence sounds most like you?
3. What does success look like?
What is Terraform (Infrastructure as Code)?
Terraform lets you define multi-cloud infrastructure as declarative code, then plan and apply changes safely.
Read →The BSL relicense & the OpenTofu fork
Why the 2023 licence change spawned the truly-open OpenTofu fork — and how to choose Terraform vs OpenTofu honestly.
Read →Vault & dynamic secrets
How short-lived, auto-revoked (dynamic) secrets shrink the blast radius — and where Vault fits vs CyberArk’s PAM.
Read →Consul — service mesh beyond Kubernetes
Service discovery, mesh and zero-trust across multi-DC, VMs and containers — and when the CNCF meshes win instead.
Read →Nomad — the simpler K8s alternative
A single lightweight binary for containers, VMs and raw binaries — and the honest truth that Kubernetes won.
Read →Boundary — zero-trust infra access
Identity-based access to servers/DBs without VPNs or bastions — and the honest overlap with Zscaler and CyberArk.
Read →The acronym decoder
Every term on these pages, in one place- HashiCorp
- The HashiStack’s maker (Terraform, Vault, Consul, Nomad, Boundary); founded 2012, IBM-owned since Feb 27, 2025.
- The HashiStack
- HashiCorp’s integrated toolset — Terraform, Vault, Consul, Nomad and Boundary — on one multi-cloud design.
- Terraform
- The de-facto IaC standard: multi-cloud infrastructure as declarative HCL code, with the biggest provider registry.
- The BSL relicense (2023)
- HashiCorp’s August 2023 move from open MPL to the source-available Business Source License; it spawned OpenTofu.
- OpenTofu
- An MPL-licensed, Linux Foundation drop-in fork of Terraform, created after the 2023 BSL relicense.
- Vault
- HashiCorp’s secrets and encryption platform, known for dynamic short-lived secrets and PKI.
- Dynamic secrets
- Credentials minted per request and auto-revoked, so a leak does far less damage than a static shared one.
- Consul
- HashiCorp’s service-networking and mesh platform: discovery, mTLS and zero-trust across VMs and containers.
- Nomad
- HashiCorp’s single-binary orchestrator for containers, VMs, Java and raw binaries; simpler, but Kubernetes won.
- Boundary
- HashiCorp’s identity-based, just-in-time access to servers and databases without VPNs or bastions.
- HCP
- HashiCorp’s managed SaaS for Terraform, Vault, Boundary and more; Consul is self-managed only since 12 Nov 2025.
- The India layer
- Bengaluru R&D and a deep India talent pool; TechBag adds honest scoping, INR/GST (18%) and local support.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Scope the stack (& the honest questions)
Decide which layers you need (provision, secrets, network, orchestrate, access), then settle OpenTofu, self-hosted vs HCP, and CyberArk or Zscaler fit.
Start with Terraform (provisioning)
Codify infrastructure in Terraform (or the open OpenTofu fork) across your clouds, with modules and policy-as-code — the core the rest builds on.
Add Vault (secrets) & Consul (networking)
Add Vault for dynamic secrets and Consul for service mesh. Both are heavy to run: HCP Vault Dedicated helps; Consul is self-managed only since 12 Nov 2025.
Orchestrate & grant access
Add Nomad where non-container workloads matter and Boundary for just-in-time access — after weighing Kubernetes and Teleport/StrongDM/Zscaler/CyberArk.
Compare honestly
Test each layer against its rival: OpenTofu, cloud-native secrets managers, CNCF meshes, Kubernetes/OpenShift, Zscaler, CyberArk — and IBM ownership.
Buy through the channel
Community editions are free (BUSL); HCP and Enterprise are mostly by quote. TechBag adds INR/GST invoicing (18%), DPDPA-residency help and local support.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Terraform | Free CLI (BUSL) / HCP per managed resource / Enterprise by quote | IaC: Write/Plan/Apply, providers, modules, policy | Multi-cloud IaC (or OpenTofu) |
| Vault | Community (BUSL) / HCP Vault Dedicated / Enterprise — by quote | Secrets, dynamic secrets, encryption, PKI, Radar | Multi-cloud secrets & encryption |
| Consul | Community (BUSL) / Enterprise by quote — HCP Consul ended Nov 2025 | Discovery, service mesh (mTLS/intentions), zero-trust | Multi-DC/hybrid networking (beyond K8s) |
| Nomad | Community (BUSL) / Enterprise — by quote | Scheduling, self-healing, safe deploys, autoscaling | Simple / non-container orchestration |
| Boundary | Community (BUSL) / HCP Boundary / Enterprise — by quote | Identity-based access, JIT creds, session recording | Zero-trust infrastructure access |
Every product has a free Community edition (source-available, BUSL), with paid HCP (where offered — not Consul since Nov 2025) and Enterprise editions; HCP Terraform publishes per-resource prices, the rest are by quote — TechBag models the mix for your size and quotes in INR with GST.
Five pitfalls that cost buyers quarters
Ignoring the BSL relicense & OpenTofu (the #1 honest story)
Terraform moved to the source-available BSL in August 2023, spawning the open OpenTofu fork. Most teams are fine on Terraform; if open licensing is a must, weigh OpenTofu first.
Underestimating Vault/Consul operational weight
Running Vault and Consul well is real operational work. Weigh HCP Vault Dedicated for Vault (Consul has no managed option since 12 Nov 2025) and simpler cloud-native or CNCF alternatives.
Missing the IBM-ownership context (neutrality & overlap)
IBM’s acquisition closed February 27, 2025. Before committing, ask about multi-cloud neutrality, roadmap and overlap with Red Hat Ansible and OpenShift — diligence points, not deal-breakers.
Assuming Nomad is the safe orchestration bet (Kubernetes won)
Kubernetes won the orchestration war, with a far bigger ecosystem and hiring pool. Choose Nomad only where its simplicity or non-container support truly matters.
Overlooking overlaps with CyberArk & Zscaler (which TechBag also sells)
Vault overlaps CyberArk PAM (mostly complementary; many run both), and Boundary overlaps Zscaler ZPA and CyberArk. Scope by your primary need rather than assuming one replaces another.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Six trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**Directionally consistent with public analyst forecasts; verify exact figures before quoting. The takeaway: Infrastructure as Code and zero-trust security compound fastest — exactly where the HashiStack (Terraform, Vault, Consul, Boundary) is placed.
Infrastructure as Code (the standard)
Provisioning infrastructure as version-controlled code, not console clicks, is now the default for multi-cloud teams.
What it means for you
Terraform is the standard; know the open OpenTofu fork born of the 2023 relicense too.
Secrets management & dynamic secrets
Moving secrets out of code, and from static shared credentials to short-lived dynamic ones, is a top security priority.
What it means for you
Vault leads multi-cloud secrets; dynamic secrets limit leaks. It complements CyberArk PAM.
Zero-trust networking & access
Security is moving from trusting IPs and VPNs to identity-based, least-privilege, default-deny access.
What it means for you
Consul brings zero trust to service traffic; Boundary to infrastructure access, without VPNs.
The open-source-licensing shift (BSL & forks)
Vendors moving open tools to source-available licences like BSL are driving forks such as OpenTofu.
What it means for you
Terraform’s 2023 BSL relicense spawned OpenTofu; choose between them on licensing needs.
IBM/Red Hat consolidation of the platform stack
IBM’s purchase of HashiCorp puts it alongside Red Hat Ansible and OpenShift in one portfolio.
What it means for you
HashiCorp has been IBM-owned since Feb 2025 — ask about neutrality, roadmap and Red Hat overlap.
Platform engineering & IaC in India
India’s IT/ITES and GCC sector is growing fast in platform engineering, with deep Terraform skills.
What it means for you
The stack fits India’s multi-cloud teams; Bengaluru R&D, plus INR/GST (18%) via TechBag.
Questions buyers ask about HashiCorp
Ready to shortlist HashiCorp?
Open any of the twelve intel pages for the deep dive, or let a TechBag advisor build the case with you — MDR-vs-self-managed scoping, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.