Skip to content
SPECIFICTION
Get listed

Azure Key Vault

azure.microsoft.com

Web

What it is

Azure Key Vault is a cloud service accessed through the web for managing keys, secrets, and certificates. Its Standard plan lists software-protected keys, secrets operations, and certificate operations. Premium lists HSM-protected keys with the same secrets and certificate operations. The service includes key audit logs, audit logs, and secret rotation. It can inject secrets into CI/CD workflows and integrates with Kubernetes. The main stated distinction between plans is key protection: software protection in Standard versus HSM protection in Premium. Its cloud deployment model suits teams that need web-based management of credentials and cryptographic material, including delivery into deployment pipelines. The listed capabilities also provide operational visibility through logging and support recurring secret rotation.

Plans and prices

Standard Priced on request Software-protected keys · Secrets operations · Certificate operations Read 22 Sep 2026 · azure.microsoft.com
Premium Priced on request HSM-protected keys · Secrets operations · Certificate operations Read 22 Sep 2026 · azure.microsoft.com

Every Azure Key Vault plan and price →

Strong points and limits

Strong points

  • Standard and Premium key-protection options
  • Secret and certificate operations
  • Secret rotation
  • Key audit logs and audit logs
  • CI/CD and Kubernetes integration

Limits

  • No free plan
  • Web is the only listed platform

Who it suits

It suits teams managing application keys, secrets, and certificates in cloud environments. Kubernetes users and teams injecting secrets into CI/CD workflows may find its listed integrations relevant.

Verdict

Azure Key Vault provides web-based, cloud key and secret management with logging, rotation, and deployment integrations. Choosing between Standard and Premium centers on software-protected versus HSM-protected keys; neither plan has a listed price.

Where Specifiction places it

Alternatives to Azure Key VaultAll alternatives →