Keywhiz is a system for managing and distributing secrets.  Keywhiz servers in a cluster centrally store secrets encrypted in a database. Clients use mutually authenticated TLS (mTLS) to retrieve secrets they have access to. Authenticated users administer Keywhiz via CLI or web app UI. To enable workflows, Keywhiz has automation APIs over mTLS and support for simple secret generation plugins.

Keywhiz -  A system for distributing and managing secrets

Vault secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Vault handles leasing, key revocation, key rolling, and auditing. Vault presents a unified API to access multiple backends: HSMs, AWS IAM, SQL databases, raw key/value, and more. 

Vault - A tool for managing secrets

Confidant is a open source secret management service that provides user-friendly storage and access to secrets in a secure way, from the developers at Lyft.  Confidant stores secrets in an append-only way in DynamoDB, generating a unique KMS data key for every revision of every secret, using Fernet symmetric authenticated cryptography. 

Confidant - Your Secret Keeper. Stores secrets in DynamoDB, encrypted at rest.

Discover open source projects across all platforms

Projects

Keywhiz - A system for distributing and managing secrets

Vault - A tool for managing secrets

Confidant - Your Secret Keeper. Stores secrets in DynamoDB, encrypted at rest.

TechStack

Tagcloud

License

Suggested keywords:

Projects

Keywhiz - A system for distributing and managing secrets

Vault - A tool for managing secrets

Confidant - Your Secret Keeper. Stores secrets in DynamoDB, encrypted at rest.

TechStack

Tagcloud

License