Integrations
Delinea Secret Server Data Source
See who can reach each Delinea secret, and vault discovered accounts into Secret Server.
All product updates
Integrations · Security
HashiCorp Vault Data Source
Hydden now inventories HashiCorp Vault, so you can see who can read, write or administer every secret without Hydden ever reading one.
Use case
Vault holds the secrets your apps and pipelines run on, and its policies decide who can use them. Hydden collects the accounts, groups and roles in Vault's sign-in methods, the secret engines, and the secrets, keys and certificates inside them. It then works out what each policy grants.
Why it matters
Secrets belong to machines more often than people. Seeing who can reach each one closes a gap in non-human identity.
How it works
1. Inventory Vault
Accounts, groups, roles, secret engines and the objects in them.
2. Resolve every policy
See who can read, write or administer each secret, key and certificate.
3. Never read a secret
Hydden collects metadata only, never a secret's value.
Screens and documentation
The HashiCorp Vault data source is available to all customers. Add it like any other source in Hydden.
Need configuration detail? Technical documentation is available to customers after sign-in.
Key benefits
Let's say John, a platform security lead, stores production database credentials in Vault. He needs to know who can read them. Here is what Hydden does.
- Finds the secret and every policy that touches it.
- Lists the people, service accounts and pipelines those policies cover.
- Shows John each grant, so he can remove the ones nobody needs.
Related updates
All updatesIntegrations
Azure Key Vault Data Source
See which accounts and groups can reach each vault, secret and key in Azure.
Integrations
AWS Secrets And Active Directory Audit Data
Collect AWS secrets and Active Directory audit events, and vault accounts from a workflow.
See who can reach your secrets
Request a trial and connect Vault to Hydden.