Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Knox serves as a secret management platform designed for the secure storage and rotation of sensitive information such as secrets, keys, and passwords utilized by various services. Within Pinterest, a multitude of keys and secrets are employed for diverse functions, including signing cookies, encrypting sensitive data, securing the network through TLS, accessing AWS machines, and facilitating communication with third-party services, among others. The risk of these keys being compromised posed significant challenges, as the process of rotation typically required a deployment and often necessitated changes to the codebase. Previously, keys and secrets at Pinterest were stored in Git repositories, leading to their replication across the company's infrastructure and presence on numerous employee laptops, which made tracking access and auditing who had permission to use these keys virtually impossible. To address these issues, Knox was developed with the intention of simplifying the process for developers to securely access and utilize confidential secrets, keys, and credentials. It also ensures the confidentiality of these sensitive elements while providing robust mechanisms for key rotation in the event of a security breach, thereby enhancing overall security practices. By implementing Knox, Pinterest aims to streamline secret management processes while fortifying its defenses against potential vulnerabilities.
Description
Onboardbase is a secret management platform that provides a single source of shared truth regarding app secrets and usage.
It allows dev teams to securely share and work together with environment-specific configurations at every stage of development, synced across infrastructure and without compromising security. This allows developers to focus on building great apps and not managing secrets.
Secrets are dynamically updated across your infrastructure and environments with 50+ integrations.
Dev teams can track and audit how long, where, and when secrets are used. They can also revoke any usage with a click.
Strong, always-on codebase scanning features prevent developers accidentally leaking secrets into production. This maintains a strong security model.
API Access
Has API
Yes
API Access
Has API
Yes
Integrations
Docker
Yes
AWS Lambda
No
Circle
No
Firebase
No
Fly.io
No
GitLab
No
Google Cloud Build
No
Heroku
No
Jenkins
No
Kubernetes
No
Integrations
Docker
Yes
AWS Lambda
Yes
Circle
Yes
Firebase
Yes
Fly.io
Yes
GitLab
Yes
Google Cloud Build
Yes
Heroku
Yes
Jenkins
Yes
Kubernetes
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
Yes
Pricing Details
Free
$150 USD for Team Plan
Free Trial
Yes
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Vendor Details
Company Name
Founded
2009
Country
United States
Website
github.com/pinterest/knox
Vendor Details
Company Name
Onboardbase
Founded
2022
Country
United States
Website
onboardbase.com
Product Features
Privileged Access Management
Application Access Control
No
Behavioral Analytics
No
Credential Management
No
Endpoint Management
No
For MSPs
No
Granular Access Controls
No
Least Privilege
No
Multifactor Authentication
No
Password Management
No
Policy Management
No
Remote Access Management
No
Threat Intelligence
No
User Activity Monitoring
No
Product Features
Identity Management
Access Certification
No
Compliance Management
No
Multifactor Authentication
No
Password Management
Yes
Privileged Account Management
Yes
Self-Service Access Request
Yes
Single Sign On
No
User Activity Monitoring
No
User Provisioning
No