Integrations
HashiCorp Vault Data Source
See who can read, write or administer every secret in Vault, without reading the secrets.
All product updates
Integrations · Security
Google Secret Manager Data Source
Hydden now collects Google Secret Manager, Cloud KMS and Certificate Manager, and shows which accounts can reach each secret, key and certificate.
Use case
Secrets, encryption keys and certificates spread across Google Cloud projects, and IAM decides who can use each one. Hydden collects them from Secret Manager, Cloud KMS and Certificate Manager and maps every IAM access entry to the object it covers.
Why it matters
A key that too many accounts can use is a quiet risk. Hydden puts a name on every account that can reach it.
How it works
1. Collect across projects
Secrets, keys and certificates from every Google Cloud project.
2. Map who can reach them
Read, write, use or admin access, per account and per object.
3. Find the broad grants
Spot objects that far more accounts can reach than need to.
Screens and documentation
The Google Secret Manager data source is available to all customers. Add it like any other source in Hydden.
Need configuration detail? Technical documentation is available to customers after sign-in.
Key benefits
Let's say John, a cloud security lead, keeps payment API keys in Google Secret Manager. He needs to prove who can read them. Here is what Hydden does.
- Finds the secret and every IAM entry that covers it.
- Lists each account that can read it, including service accounts.
- Shows which person owns each of those accounts.
Related updates
All updatesIntegrations
Azure Key Vault Data Source
See which accounts and groups can reach each vault, secret and key in Azure.
Integrations
AWS Connector For Hydden
IAM, Identity Center and CloudTrail activity in Hydden, for one account or a whole organization.
See who can reach your Google Cloud secrets
Request a trial and connect Google Cloud to Hydden.