Managing secrets at scale is not just about security — it’s about availability, resilience, and cost efficiency. At BioCatch, we use HashiCorp Vault to manage secrets in our Kubernetes environment, but our initial setup left room for improvements.

Here’s how we redesigned our Vault architecture using Raft storage, Kubernetes automation, and snapshot-based disaster recovery — resulting in a system that is highly available, cost-effective, and production-ready.