Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Confidant is an open-source service designed for secret management, enabling secure and user-friendly storage and retrieval of sensitive information, developed by the team at Lyft. It addresses the challenge of authentication by leveraging AWS KMS and IAM, which enables IAM roles to create secure tokens that Confidant can validate. Additionally, Confidant oversees KMS grants for your IAM roles, facilitating the generation of tokens for service-to-service authentication and enabling encrypted communication between services. Secrets are stored in an append-only format within DynamoDB, with each revision of a secret linked to a distinct KMS data key, utilizing Fernet symmetric authenticated encryption for security. Furthermore, Confidant features a web interface built with AngularJS, allowing users to efficiently manage their secrets, associate them with services, and track the history of modifications. This comprehensive tool not only enhances security but also simplifies the management of sensitive data across various applications.
Description
Stop wasting time attempting to find API keys scattered around, or hacking together configuration tools that you don't know how to use, and stop avoiding access control. Doppler gives your team a single source for truth. The best developers automate all the work. Doppler will make it easy to find frequently-used secrets. You only need to update them once if they change. Your team's single source for truth. Your variables can be organized across projects and environments. You can no longer share secrets via email, Slack, email and git. Your team and their apps will instantly have the secret once you add it. The Doppler CLI, just like git, intelligently determines which secrets to fetch based upon the project directory you're in. No more trying to keep ENV files synchronized! Use granular access controls to ensure that you have the least privilege. Reduce exposure by using read-only tokens for service deployment. Access to only development for contractor? It's easy!
API Access
Has API
Yes
API Access
Has API
Yes
Integrations
Amazon Web Services (AWS)
Yes
AWS Lambda
No
AWS Secrets Manager
No
AccessOwl
No
Amazon DynamoDB
Yes
Axis LMS
No
Azure Key Vault
No
CircleCI
No
Dealer-FX
No
DigitalOcean
No
Integrations
Amazon Web Services (AWS)
Yes
AWS Lambda
Yes
AWS Secrets Manager
Yes
AccessOwl
Yes
Amazon DynamoDB
No
Axis LMS
Yes
Azure Key Vault
Yes
CircleCI
Yes
Dealer-FX
Yes
DigitalOcean
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
$6 per seat per month
Free Trial
Yes
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Confidant
Founded
2014
Website
lyft.github.io/confidant/
Vendor Details
Company Name
Doppler
Founded
2018
Country
United States
Website
www.doppler.com
Product Features
Privileged Access Management
Application Access Control
No
Behavioral Analytics
No
Credential Management
No
Endpoint Management
No
For MSPs
No
Granular Access Controls
No
Least Privilege
No
Multifactor Authentication
No
Password Management
No
Policy Management
No
Remote Access Management
No
Threat Intelligence
No
User Activity Monitoring
No
Product Features
Data Security
Alerts / Notifications
No
Antivirus/Malware Detection
No
At-Risk Analysis
No
Audits
No
Data Center Security
No
Data Classification
No
Data Discovery
No
Data Loss Prevention
No
Data Masking
No
Data-Centric Security
No
Database Security
No
Encryption
No
Identity / Access Management
No
Logging / Reporting
No
Mobile Data Security
No
Monitor Abnormalities
No
Policy Management
No
Secure Data Transport
No
Sensitive Data Compliance
No
DevOps
Approval Workflow
No
Dashboard
No
KPIs
No
Policy Management
No
Portfolio Management
No
Prioritization
No
Release Management
No
Timeline Management
No
Troubleshooting Reports
No
Encryption
Central Policy Enforcement
No
Drag & Drop UI
No
Email Encryption
No
Encryption Key Management
No
Endpoint Encryption
No
File Compression
No
File Encryption
No
Full Disk Encryption
No
Public Key Cryptography
No
Tokenization / Data Masking
No