Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • Keeper Security Reviews & Ratings
    1,764 Ratings
    Company Website
  • Aikido Security Reviews & Ratings
    231 Ratings
    Company Website
  • Securden Password Vault for Enterprises Reviews & Ratings
    55 Ratings
  • ZeroPath Reviews & Ratings
    2 Ratings
    Company Website
  • Windocks Reviews & Ratings
    7 Ratings
    Company Website
  • Community Phone Reviews & Ratings
    1,323 Ratings
    Company Website
  • Passwork Reviews & Ratings
    97 Ratings
    Company Website
  • 1Password Reviews & Ratings
    16,707 Ratings
    Company Website
  • Proton Pass Reviews & Ratings
    31,996 Ratings
    Company Website
  • Viktor Reviews & Ratings
    17 Ratings
    Company Website

What is SecretHub?

Strengthening security throughout the entire software stack can be achieved by adopting a unified secrets management approach that is readily available to all engineers, from administrators to interns. The practice of embedding passwords and API keys directly in the source code presents a considerable security risk; however, effective management of these secrets can add layers of complexity that hinder deployment efforts. Information-sharing tools like Git, Slack, and email are designed for collaboration rather than for protecting sensitive information. Relying on the method of copy-pasting credentials and depending on a sole administrator for access keys does not align with the quick deployment demands of modern software development teams. Moreover, keeping track of which individuals access specific secrets and their timing can make compliance audits a challenging endeavor. By eliminating secrets from the source code and replacing plaintext credentials with references, SecretHub can effortlessly supply the required secrets to your application upon startup. You can use the command-line interface to encrypt and securely store these secrets, directing your code to access them as needed. Consequently, your code will remain free from sensitive data, facilitating unhindered collaboration among team members while significantly enhancing security. This methodology not only streamlines the development process but also mitigates the risks linked to secret management, ultimately leading to a more robust and secure software environment. Furthermore, by implementing such a strategy, teams can focus on innovation and functionality, knowing that sensitive data is adequately protected.

What is Knox?

Knox is a secret management solution created to securely store and rotate sensitive information, including secrets, keys, and passwords used across various services. At Pinterest, a wide range of keys and secrets are relied upon for numerous purposes, such as signing cookies, encrypting sensitive data, securing the network with TLS, accessing AWS machines, and interacting with third-party services. The potential for these keys to be compromised presented major challenges, as rotating them often required a deployment and usually involved modifications to the codebase. Previously, keys and secrets were kept in Git repositories at Pinterest, which led to their widespread replication throughout the organization's infrastructure and on numerous employee laptops, making it nearly impossible to monitor access and audit permissions for their use. To tackle these challenges, Knox was designed to make it easier for developers to securely access and manage confidential secrets, keys, and credentials. It guarantees the confidentiality of these sensitive assets while incorporating strong mechanisms for key rotation in case of a security breach, thereby significantly improving security practices. By adopting Knox, Pinterest seeks to not only enhance its secret management processes but also to strengthen its defenses against potential vulnerabilities, ensuring that sensitive information remains protected at all times. This proactive approach reflects Pinterest's commitment to safeguarding its data and maintaining trust with its users.

Media

Media

Integrations Supported

AWS Amplify
Amazon Web Services (AWS)
Ansible
Chef
CircleCI
Docker
Git
GitHub
GitLab
Google Compute Engine
HashiCorp Nomad
Jenkins
Microsoft Azure
Phoenix Ortho
Pinterest
Pradeo
Swarm
Terraform
Travis CI
django CMS

Integrations Supported

AWS Amplify
Amazon Web Services (AWS)
Ansible
Chef
CircleCI
Docker
Git
GitHub
GitLab
Google Compute Engine
HashiCorp Nomad
Jenkins
Microsoft Azure
Phoenix Ortho
Pinterest
Pradeo
Swarm
Terraform
Travis CI
django CMS

API Availability

Has API

API Availability

Has API

Pricing Information

$99 per month
Free Trial Offered?
Free Version

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Company Facts

Organization Name

SecretHub

Date Founded

2014

Company Location

Netherlands

Company Website

secrethub.io

Company Facts

Organization Name

Pinterest

Date Founded

2009

Company Location

United States

Company Website

github.com/pinterest/knox

Categories and Features

Categories and Features

Privileged Access Management

Application Access Control
Behavioral Analytics
Credential Management
Endpoint Management
For MSPs
Granular Access Controls
Least Privilege
Multifactor Authentication
Password Management
Policy Management
Remote Access Management
Threat Intelligence
User Activity Monitoring

Popular Alternatives

HashiCorp Vault Reviews & Ratings

HashiCorp Vault

HashiCorp

Popular Alternatives

Knox Reviews & Ratings

Knox

Pinterest