diff --git a/Dockerfile b/Dockerfile
index 90ad177ef46831d1e75490ed44781ba875174c8f..dd351c76fb24ff7e2a3d469dd50083b4047153f0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dsop.io
 ARG BASE_IMAGE=ubi8
 ARG BASE_TAG=8.3
 
-FROM vault:1.6.1 AS source
+FROM vault:1.6.3 AS source
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 09136db70789e7443cc4451d916c51f117445cc4..03578191a6ad7ede81147f47ea4ccee6f3769594 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -8,7 +8,7 @@ name: "hashicorp/vault/vault"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-- "1.6.1"
+- "1.6.3"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -27,7 +27,7 @@ labels:
   org.opencontainers.image.url: "https://www.vaultproject.io/"
   ## Name of the distributing entity, organization or individual
   org.opencontainers.image.vendor: "Hashicorp"
-  org.opencontainers.image.version: "1.6.1"
+  org.opencontainers.image.version: "1.6.3"
   ## Keywords to help with search (ex. "cicd,gitops,golang")
   mil.dso.ironbank.image.keywords: "opensource"
   ## This value can be "opensource" or "commercial"
@@ -37,8 +37,8 @@ labels:
 
 # List of resources to make available to the offline build context
 resources:
-- tag: vault:1.6.1
-  url: docker://docker.io/library/vault@sha256:e2fedbd8dadb71d909c7f989c8182b82052107aeb09f62ec18e5fb24fc622c53
+- tag: vault:1.6.3
+  url: docker://docker.io/library/vault@sha256:8c988769b7857a76c572beb69f836867b6b1897099aaa2e85c1eed63f8cb19ab
 
 # List of project maintainers
 maintainers: