vault-backup-validator

The Vault Backup Validator is an open-source Go application designed to ensure the reliability of OpenBao (and historically HashiCorp Vault) backups. It exposes a REST API endpoint that accepts a POST request containing URLs to a backup snapshot and its associated unseal keys. The service programmatically restores the backup in an isolated environment and validates that specific secret paths contain expected key-value pairs. This process confirms that backups are not only structurally intact but also functionally correct for disaster recovery scenarios. The tool supports configuration for the source version and provides clear HTTP status codes for validation results, aiding DevOps teams in automating backup verification workflows.