Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Confidant is an open-source service designed for secret management, enabling secure and user-friendly storage and retrieval of sensitive information, developed by the team at Lyft. It addresses the challenge of authentication by leveraging AWS KMS and IAM, which enables IAM roles to create secure tokens that Confidant can validate. Additionally, Confidant oversees KMS grants for your IAM roles, facilitating the generation of tokens for service-to-service authentication and enabling encrypted communication between services. Secrets are stored in an append-only format within DynamoDB, with each revision of a secret linked to a distinct KMS data key, utilizing Fernet symmetric authenticated encryption for security. Furthermore, Confidant features a web interface built with AngularJS, allowing users to efficiently manage their secrets, associate them with services, and track the history of modifications. This comprehensive tool not only enhances security but also simplifies the management of sensitive data across various applications.

Description

An open-source interface that ensures secure authentication, management, and auditing of non-human access across various tools, applications, containers, and cloud environments is essential for robust secrets management. These secrets are vital for accessing applications, critical infrastructure, and other sensitive information. Conjur enhances this security by implementing precise Role-Based Access Control (RBAC) to manage secrets tightly. When an application seeks access to a resource, Conjur first authenticates the application, then conducts an authorization assessment based on the established security policy, and subsequently delivers the necessary secret securely. The framework of Conjur is built on the principle of security policy as code, where security directives are documented in .yml files, integrated into source control, and uploaded to the Conjur server. This approach treats security policy with the same importance as other source control elements, fostering increased transparency and collaboration regarding the organization's security standards. Additionally, the ability to version control security policies allows for easier updates and reviews, ultimately enhancing the security posture of the entire organization.

API Access

Has API Yes 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Amazon Web Services (AWS) Yes 
1Kosmos No 
AWS Amplify Yes 
Amazon DynamoDB Yes 
Check Point IPS No 
Check Point Infinity No 
Cyberwatch No 
Docker No 
Entrust Identity Essentials No 
Kubernetes No 
Qualys WAS No 
Red Hat OpenShift No 
Sandfly Security No 
Securonix Unified Defense SIEM No 
TCPWave No 
Tenable One No 
ThreatAware No 
Trustwave DbProtect No 
XYGATE Identity Connector No 

Integrations

Amazon Web Services (AWS) Yes 
1Kosmos Yes 
AWS Amplify No 
Amazon DynamoDB No 
Check Point IPS Yes 
Check Point Infinity Yes 
Cyberwatch Yes 
Docker Yes 
Entrust Identity Essentials Yes 
Kubernetes Yes 
Qualys WAS Yes 
Red Hat OpenShift Yes 
Sandfly Security Yes 
Securonix Unified Defense SIEM Yes 
TCPWave Yes 
Tenable One Yes 
ThreatAware Yes 
Trustwave DbProtect Yes 
XYGATE Identity Connector Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Confidant

Founded

2014

Website

lyft.github.io/confidant/

Vendor Details

Company Name

CyberArk

Founded

2013

Country

United States

Website

conjur.org

Product Features

Privileged Access Management

Application Access Control No 
Behavioral Analytics No 
Credential Management No 
Endpoint Management No 
For MSPs No 
Granular Access Controls No 
Least Privilege No 
Multifactor Authentication No 
Password Management No 
Policy Management No 
Remote Access Management No 
Threat Intelligence No 
User Activity Monitoring No 

Product Features

Container Security

Access Roles / Permissions No 
Application Performance Tracking No 
Centralized Policy Management No 
Container Stack Scanning No 
Image Vulnerability Detection No 
Reporting No 
Testing No 
View Container Metadata No 

Privileged Access Management

Application Access Control No 
Behavioral Analytics No 
Credential Management No 
Endpoint Management No 
For MSPs No 
Granular Access Controls No 
Least Privilege No 
Multifactor Authentication No 
Password Management No 
Policy Management No 
Remote Access Management No 
Threat Intelligence No 
User Activity Monitoring No 

Alternatives

HashiCorp Vault Reviews

HashiCorp Vault

HashiCorp
Knox Reviews

Knox

Pinterest
RadiantOne Reviews

RadiantOne

Radiant Logic