Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Confidant is an open-source service designed for secret management, enabling secure and user-friendly storage and retrieval of sensitive information, developed by the team at Lyft. It addresses the challenge of authentication by leveraging AWS KMS and IAM, which enables IAM roles to create secure tokens that Confidant can validate. Additionally, Confidant oversees KMS grants for your IAM roles, facilitating the generation of tokens for service-to-service authentication and enabling encrypted communication between services. Secrets are stored in an append-only format within DynamoDB, with each revision of a secret linked to a distinct KMS data key, utilizing Fernet symmetric authenticated encryption for security. Furthermore, Confidant features a web interface built with AngularJS, allowing users to efficiently manage their secrets, associate them with services, and track the history of modifications. This comprehensive tool not only enhances security but also simplifies the management of sensitive data across various applications.

Description

An open-source interface that ensures secure authentication, management, and auditing of non-human access across various tools, applications, containers, and cloud environments is essential for robust secrets management. These secrets are vital for accessing applications, critical infrastructure, and other sensitive information. Conjur enhances this security by implementing precise Role-Based Access Control (RBAC) to manage secrets tightly. When an application seeks access to a resource, Conjur first authenticates the application, then conducts an authorization assessment based on the established security policy, and subsequently delivers the necessary secret securely. The framework of Conjur is built on the principle of security policy as code, where security directives are documented in .yml files, integrated into source control, and uploaded to the Conjur server. This approach treats security policy with the same importance as other source control elements, fostering increased transparency and collaboration regarding the organization's security standards. Additionally, the ability to version control security policies allows for easier updates and reviews, ultimately enhancing the security posture of the entire organization.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Amazon Web Services (AWS)
AWS Amplify
AWS Marketplace
Amazon DynamoDB
Aquera
Check Point IPS
Cloud Foundry
Entrust Identity Essentials
InsightCloudSec
Kubernetes
Multi-Domain Security Management
OfficeSpace Software
Qualys WAS
Red Hat OpenShift
SQLXPress
Securonix Unified Defense SIEM
Sendmail
Tenable One
XYGATE SecurityOne

Integrations

Amazon Web Services (AWS)
AWS Amplify
AWS Marketplace
Amazon DynamoDB
Aquera
Check Point IPS
Cloud Foundry
Entrust Identity Essentials
InsightCloudSec
Kubernetes
Multi-Domain Security Management
OfficeSpace Software
Qualys WAS
Red Hat OpenShift
SQLXPress
Securonix Unified Defense SIEM
Sendmail
Tenable One
XYGATE SecurityOne

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Confidant

Founded

2014

Website

lyft.github.io/confidant/

Vendor Details

Company Name

CyberArk

Founded

2013

Country

United States

Website

conjur.org

Product Features

Privileged Access Management

Application Access Control
Behavioral Analytics
Credential Management
Endpoint Management
For MSPs
Granular Access Controls
Least Privilege
Multifactor Authentication
Password Management
Policy Management
Remote Access Management
Threat Intelligence
User Activity Monitoring

Product Features

Container Security

Access Roles / Permissions
Application Performance Tracking
Centralized Policy Management
Container Stack Scanning
Image Vulnerability Detection
Reporting
Testing
View Container Metadata

Privileged Access Management

Application Access Control
Behavioral Analytics
Credential Management
Endpoint Management
For MSPs
Granular Access Controls
Least Privilege
Multifactor Authentication
Password Management
Policy Management
Remote Access Management
Threat Intelligence
User Activity Monitoring

Alternatives

HashiCorp Vault Reviews

HashiCorp Vault

HashiCorp
Knox Reviews

Knox

Pinterest
RadiantOne Reviews

RadiantOne

Radiant Logic