Ratings and Reviews 0 Ratings

Total 0 out of 5 stars
ease 0 out of 5 stars
features 0 out of 5 stars
design 0 out of 5 stars
support 0 out of 5 stars

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total 0 out of 5 stars
ease 0 out of 5 stars
features 0 out of 5 stars
design 0 out of 5 stars
support 0 out of 5 stars

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • Keeper Security Reviews & Ratings
    4.6 out of 5 stars 1,812 Ratings
    Company Website for Keeper Security
  • 1Password Reviews & Ratings
    4.2 out of 5 stars 16,918 Ratings
    Company Website for 1Password
  • Securden Password Vault for Enterprises Reviews & Ratings
    4.6 out of 5 stars 63 Ratings
  • Passwork Reviews & Ratings
    4.7 out of 5 stars 129 Ratings
    Company Website for Passwork
  • Rocket Secure Host Access Reviews & Ratings
    4.8 out of 5 stars 4 Ratings
    Company Website for Rocket Secure Host Access
  • Securden Unified PAM Reviews & Ratings
    4.9 out of 5 stars 89 Ratings
  • Community Phone Reviews & Ratings
    4.7 out of 5 stars 1,597 Ratings
    Company Website for Community Phone
  • Aikido Security Reviews & Ratings
    4.6 out of 5 stars 364 Ratings
    Company Website for Aikido Security
  • Admin By Request Endpoint Privilege Management Reviews & Ratings
    4.8 out of 5 stars 107 Ratings
    Company Website for Admin By Request Endpoint Privilege Management
  • Uniqkey Reviews & Ratings
    4.6 out of 5 stars 182 Ratings
    Company Website for Uniqkey

What is Knox?

Knox is a secret management solution created to securely store and rotate sensitive information, including secrets, keys, and passwords used across various services. At Pinterest, a wide range of keys and secrets are relied upon for numerous purposes, such as signing cookies, encrypting sensitive data, securing the network with TLS, accessing AWS machines, and interacting with third-party services. The potential for these keys to be compromised presented major challenges, as rotating them often required a deployment and usually involved modifications to the codebase. Previously, keys and secrets were kept in Git repositories at Pinterest, which led to their widespread replication throughout the organization's infrastructure and on numerous employee laptops, making it nearly impossible to monitor access and audit permissions for their use. To tackle these challenges, Knox was designed to make it easier for developers to securely access and manage confidential secrets, keys, and credentials. It guarantees the confidentiality of these sensitive assets while incorporating strong mechanisms for key rotation in case of a security breach, thereby significantly improving security practices. By adopting Knox, Pinterest seeks to not only enhance its secret management processes but also to strengthen its defenses against potential vulnerabilities, ensuring that sensitive information remains protected at all times. This proactive approach reflects Pinterest's commitment to safeguarding its data and maintaining trust with its users.

What is Apache Knox?

The Knox API Gateway operates as a reverse proxy that prioritizes pluggability in enforcing policies through various providers while also managing backend services by forwarding requests. Its policy enforcement mechanisms cover an extensive array of functionalities, such as authentication, federation, authorization, auditing, request dispatching, host mapping, and content rewriting rules. This enforcement is executed through a series of providers outlined in the topology deployment descriptor associated with each secured Apache Hadoop cluster. Furthermore, the definition of the cluster is detailed within this descriptor, allowing the Knox Gateway to comprehend the cluster's architecture for effective routing and translation between user-facing URLs and the internal operations of the cluster. Each secured Apache Hadoop cluster has its own set of REST APIs, which are recognized by a distinct application context path unique to that cluster. As a result, this framework enables the Knox Gateway to protect multiple clusters at once while offering REST API users a consolidated endpoint for access. This design not only enhances security but also improves efficiency in managing interactions with various clusters, creating a more streamlined experience for users. Additionally, the comprehensive framework ensures that developers can easily customize policy enforcement without compromising the integrity and security of the clusters.

Media

Media

Integrations Supported

Docker
Pinterest
Pradeo
Swarm
Yaguara

Integrations Supported

Apache Flink
Apache HBase
Apache Hadoop YARN
Apache Hive
Apache Ranger
Apache Solr
Apache Storm
Cloudera
Hadoop
Hue

API Availability

Has API

API Availability

Has API

Pricing Information

Pricing not provided
Free Version

Pricing Information

Pricing not provided

Supported Platforms

SaaS

Supported Platforms

SaaS

Customer Service / Support

Web-Based Support

Customer Service / Support

Web-Based Support

Training Options

Documentation Hub

Training Options

Documentation Hub
On-Site Training

Company Facts

Organization Name

Pinterest

Date Founded

2009

Company Location

United States

Company Website

github.com/pinterest/knox

Company Facts

Organization Name

Apache Software Foundation

Date Founded

1999

Company Location

United States

Company Website

knox.apache.org

Categories and Features

Categories and Features

API Gateways

Not specified

API Management

Not specified

Popular Alternatives

SharePass Reviews & Ratings

SharePass

5.0 out of 5 stars

Popular Alternatives

Apache Sentry Reviews & Ratings

Apache Sentry

Apache Software Foundation