What our engineers handle on HashiCorp Vault
This is the hands-on work, done by a person: the jobs the automatic tools cannot do for you.
- 1Deploy Vault with TLS and integrated storage (Raft) or another supported backend
- 2Set up unseal keys safely or auto-unseal with a KMS
- 3Write policies and authentication methods for your teams and apps
- 4Take and test snapshots, and upgrade one node at a time
Problems we fix
Problem
Vault is sealed after a restart
What we do
We unseal it with the key holders, and set up auto-unseal or a runbook so it recovers predictably.
Problem
Nobody has the unseal keys any more
What we do
We check whether recovery keys exist and, if not, explain the options honestly, because lost keys cannot be recovered. We then set up safe key custody.
Problem
Applications cannot authenticate
What we do
We check auth method configuration, policies and token TTLs and fix the mismatch.
Automatic tools, and our team for the rest
RootManage is automatic server management with every tool in one place. The tools run by themselves on a schedule and report to one dashboard. Everything they cannot do, and every emergency, is handled by our engineers by hand.
Automatic
RootManage tools, running by themselves
- Server Health agent reports load, disk use and failed login attempts to your dashboard.
- Metrics agent draws CPU, memory, disk and network charts, sampled every five minutes.
- Uptime checks check the server every minute and email you when it stops answering, and again when it recovers.
- Backup agent runs scheduled backups at 02:00 IST to storage we provide or to your own SFTP or S3 box, with help restoring.
Manual, by our engineers
Everything else, and every emergency
- Hands-on work. Fixes, tuning, migrations, upgrades and the other jobs listed above on this page.
- Emergency work. A hacked site, an outage or a failed update is handled by a person who investigates and fixes it, not by a script.
- Things we do not automate. Anything the tools do not cover is done by hand, over SSH, WHM or RDP, on a login you can remove at any time.
The tools are optional, run on Linux servers and are installed by you with one command each. Every job our team does is recorded as a task in your dashboard with the details, and you get an email when it is updated.
How it works
- 1
Sign up
Create an account, choose a plan and add the server you want managed.
- 2
Install the tools
Run one command per tool. They then work by themselves and report to your dashboard. For hands-on work you give us a login you can remove at any time.
- 3
Automatic, with people behind it
The tools watch, scan and back up automatically and alert you. Our engineers do the rest by hand and handle every emergency, and you follow each task in your dashboard.
Questions about HashiCorp Vault
Is Vault too much for a small team?
Often, yes. For a few secrets, a password manager or your cloud secret store may be enough. We tell you before you take on the work.
Do you manage OpenBao?
We can, since it is compatible for most uses. We confirm the features you need first.
What does it cost to have HashiCorp Vault managed?
Managed plans start at ₹1,999 a month for one server, and HashiCorp Vault is managed as part of the server. The pricing page lists what each plan includes. If a server is already infected, the emergency cleanup is a one-time ₹9,000 job.