Your sovereign secret vault
A secret manager powered by OpenBao (open source fork of Vault under the Linux Foundation), installed and maintained by DINAO. Centralize secrets, keys, and certificates — hosted in France.
What is OpenBao?
OpenBao is an open source and community-driven secret manager, a Vault fork governed by the Linux Foundation. It was created from the last version of Vault under the MPL 2.0 license, before the license change, to preserve Vault's experience, security model, and features under a truly free license.
OpenBao manages static secrets (provided and securely stored) as well as dynamic secrets generated on demand to integrate with databases or cloud provider identities, then automatically revoked upon lease expiration. It offers PKI (SSH or X.509 certificate creation), encryption-as-a-service with centralized key management, and resolves identity fragmentation through a unified ACL system.
Compatible with the Vault API, it facilitates the migration of existing integrations. Deployed in a dedicated container, monitored, backed up, and updated by DINAO — with optional high-availability configuration.
Host OpenBao at DINAO
Resource tiers compatible with OpenBao prerequisites (minimum 1 vCPU / 512 Mo / 1 Go). Hosted in France, fully managed.
- 1 dedicated vCPU
- 2 Go RAM
- 20 GB NVMe
- Daily backups
- Managed & monitored by DINAO
- 2 dedicated vCPU
- 4 Go RAM
- 40 GB NVMe
- Daily backups
- Managed & monitored by DINAO
- 4 dedicated vCPU
- 8 Go RAM
- 80 GB NVMe
- Daily backups
- Managed & monitored by DINAO
- 8 dedicated vCPU
- 16 Go RAM
- 160 GB NVMe
- Daily backups
- Managed & monitored by DINAO
Technical details
You might be wondering…
What is the difference with HashiCorp Vault?
OpenBao is an open source fork of Vault, created from the last version under the MPL 2.0 license before Vault switched to a non-free license. It is governed by the Linux Foundation and remains compatible with the Vault API.
Can I generate credentials on demand?
Yes. OpenBao manages dynamic secrets: it creates credentials on the fly for your databases or clouds, with a limited-time lease, then automatically revokes them upon expiration.
Does it manage certificates?
Yes. OpenBao acts as a PKI authority (issuing X.509 and SSH certificates) and offers encryption-as-a-service to encrypt your data without directly handling keys.
Where are the secrets hosted?
On DINAO infrastructure in France, in one of the available datacenters. Your secrets are encrypted at rest and do not leave the country.
Can I migrate from Vault?
Yes. OpenBao maintains compatibility with the Vault API, greatly facilitating the migration of your existing integrations. DINAO supports you in the setup.