Skip to content
OpenBao Fork Enhances Security with External Keys and Quantum-Ready TLS

OpenBao Fork Enhances Security with External Keys and Quantum-Ready TLS

First seen 6 Nov 2026, 15:15 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 6, 2026 at 15:16 UTC
  • •OpenBao v2.7 adds PostgreSQL read scaling and external key support.
  • •The fork aims to provide an open-source alternative to HashiCorp Vault.
  • •New features include post-quantum cryptography for enhanced security.

OpenBao has released version 2.7, introducing features like PostgreSQL read scaling, support for external HSM and KMS keys, and post-quantum cryptographic algorithms. This update aims to enhance security and scalability for users migrating from HashiCorp Vault, which transitioned to a Business Source License in 2023. OpenBao, a community-driven fork governed by the Linux Foundation, seeks to provide an open-source alternative with advanced capabilities previously restricted under Vault's enterprise licenses. The new version includes control groups for human review of sensitive operations and aims to maintain consistent request headers across load-balanced nodes. The external keys feature allows integration with third-party security modules, appealing to organizations needing stringent key management. The post-quantum cryptography support introduces ML-DSA and ML-KEM to enhance TLS security. This release is part of a broader trend of open-source forks responding to licensing changes in popular software.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 1h ago How this analysis works

Timeline

2026-11-06
OpenBao v2.7 released
OpenBao announced version 2.7 with new features including PostgreSQL scaling and post-quantum cryptography.
Infoq

More articles in this cluster (5)

Following this threat?

Track HashiCorp in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 2

Common questions

What new features does OpenBao v2.7 offer?
It includes PostgreSQL read scaling, external HSM and KMS key support, and post-quantum cryptographic algorithms.
Why was OpenBao created?
OpenBao was forked from HashiCorp Vault due to licensing changes that restricted open-source use.
How does OpenBao's governance differ from Vault?
OpenBao is governed by the Linux Foundation, ensuring community-driven development under an open-source license.