- Home
- Encryption Key Management Software
- Azure Key Vault
Azure Key Vault
What it is
Azure Key Vault is a cloud service accessed through the web for managing keys, secrets, and certificates. Its Standard plan uses software-protected keys, while Premium uses HSM-protected keys. Both plans include operations for secrets and certificates. The service provides key audit logs and audit logs, supports secret rotation, and can inject secrets into CI/CD workflows. Kubernetes integration is also listed. Azure Key Vault is sold on a paid basis and has no free plan. No prices are listed for Standard or Premium. The deployment model is cloud, positioning the service for web-based management rather than a listed desktop or mobile application. Teams can choose between the two plans according to the listed key-protection method while retaining the same categories of secret and certificate operations. Its capabilities address credential handling, cryptographic key administration, deployment-pipeline delivery, and auditing in cloud environments.
For and against
For
- Software- or HSM-protected key options
- Secret and certificate operations
- Secret rotation support
- CI/CD injection
- Kubernetes integration
Against
- Paid service
- No free plan
- Web platform only
- Plan prices not listed
The verdict
Azure Key Vault combines key, secret, and certificate management with auditing, rotation, CI/CD injection, and Kubernetes integration. The main plan distinction is software-protected versus HSM-protected keys.
Who it suits
It suits teams managing application credentials, cryptographic keys, secrets, or certificates in cloud environments. It is also relevant when CI/CD delivery or Kubernetes integration is needed.
Plans and prices
Standard
Software-protected keys · Secrets operations · Certificate operations
Read 22 Sep 2026 · azure.microsoft.com
Premium
HSM-protected keys · Secrets operations · Certificate operations
Read 22 Sep 2026 · azure.microsoft.com