OpenKCM (Open Key Chain Manager) vs Oracle Audit Vault and Database Firewall
OpenKCM (Open Key Chain Manager)
openkcm.ioOracle Audit Vault and Database Firewall
oracle.comSide by side
| Figure | OpenKCM (Open Key Chain Manager) | Oracle Audit Vault and Database Firewall |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Windows | — | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | — |
| Plans published | 0 | 8 |
| Spec score · Encryption Key Management Software | 7.3 (#10) | 6.6 (#13) |
Plans
Oracle Audit Vault and Database Firewall
- Database Cloud Service — first 1 million audit recordsFree
- Processor PerpetualPriced on request
- Database Cloud Service — audit collection over 1 million recPriced on request
- On-premises databases and databases on Compute — first 100 tPriced on request
- On-premises databases and databases on Compute — targets 101Priced on request
- On-premises databases and databases on Compute — targets 301Priced on request
- On-premises databases and databases on Compute — over 500 taPriced on request
- On-premises databases and databases on Compute — audit collePriced on request
In their own words
OpenKCM (Open Key Chain Manager)
OpenKCM (Open Key Chain Manager) is a free, open-source key management service for governing encryption keys and protecting data at rest. It supports BYOK key import and HYOK, which keeps master keys in a customer’s infrastructure. Its recursive L1–L4 hierarchy makes data keys dependent on higher-level keys. Governance and policy control are handled by CMK, while Krypton performs cryptographic execution; applications request key operations through the KMIP API.
The Gateway is designed to run near applications, such as in Kubernetes or a cloud VPC, and the same software can operate across AWS, Azure and on-premise environments. Customer root keys can remain in AWS, Azure or GCP key services, or on-premise HSMs, while OpenKCM holds a reference to the L1 key. A kill switch can halt downstream key use by removing that reference or revoking the root key. CMK connects to a corporate identity provider and sends audit logs to SIEM systems. The project’s CMK and Krypton components are actively being developed; encryption and decryption operations are in progress, while audit export, high availability and disaster recovery are planned for 2027.
Oracle Audit Vault and Database Firewall
Oracle Audit Vault and Database Firewall has no write-up on Specifiction yet; its figures are above.