Crypto4A QxVault™

Crypto4A QxVault is a hardware-based secrets management vault with a built-in Hardware Security Module (HSM). It is designed for enterprises and governments that require on-premises or private cloud deployment of secrets, credentials, and API key management. The product is built on the OpenBAO codebase and runs on Crypto4A's QxOS operating system, using QxHSM hardware. It integrates a FIPS 140-3 Level 3 (pending validation) HSM directly into the blade module, removing the need for separate HSM expertise or infrastructure. Key capabilities include: - Secure storage of arbitrary key/value secrets, encrypted before being written to persistent storage - Dynamic secret generation for systems such as Kubernetes and SQL databases, with automatic revocation after lease expiry - Encryption as a service with centralized key management for data in transit and at rest across clouds and datacenters - Identity-based access control using a unified ACL system to manage access across multiple cloud providers and services - Lease management with automatic secret revocation and client-accessible renewal APIs - Tree-based secret revocation, allowing revocation of individual secrets or groups of secrets by user or type - Automatic HSM clustering and synchronization for high availability - Disaster recovery (DR), fault-tolerance, and business continuity support Deployment options include three chassis configurations: QxBMC-1 (single blade desktop), QxBMC-3 (1RU, 3-blade), and QxBMC-12 (4RU, 12-blade with integrated 40G network switching). The product supports both classical and post-quantum cryptography (PQC), providing hardware-based crypto-agility. Pricing uses an unlimited client license model.