Skip to content
Language: EN
Menu

Secret management

Haven

Available

Because it holds other systems’ credentials, it fails closed.

Visit Haven Documentation Contact us

Haven holds the database passwords, API keys, signing keys and certificates that sit behind a business. It issues them with an expiry, scopes what any application may reach, and records all requests before it runs them. Its master key never touches disk. After a restart it stays locked until enough of your named holders combine their shares. Someone who has the server does not have the secrets.

Who it is for. Organisations that must show where a credential came from, who could use it and when it was withdrawn, and that want credentials to expire on their own.

Status
Available
Part of
Core platform
Product site
haven.rodmena.co.uk
Tags
Secret managementExpiring credentialsSplit-key unlockAudit trail

What it does

  • Locked until your people open it

    The master key is never written to disk. A stolen server or a copied backup gives up nothing, because after a restart three of five share holders must combine their parts before anything can be read.

  • Separation between teams

    A tenant has its own encryption key, policies and secrets, and the database enforces the boundary between tenants. Because the credential a caller presents fixes its tenant, a caller cannot ask to be treated as another.

  • Credentials that expire on their own

    Haven issues a database password per process with a lifetime attached. It is created when asked for and withdrawn when the time is up. A leaked password therefore stops working even if nobody noticed the leak.

  • Applications hold no keys

    Haven encrypts and decrypts on their behalf, so the key never reaches the application. Rotating a key leaves everything already encrypted readable.

  • A private certificate authority

    Short-lived certificates are issued per service for the domains its role allows it to ask for.

  • An audit trail that is checked

    Requests are recorded before they run, in a log where a hash chains a record to the one before it. Verification walks the chain and recomputes it.

Documentation and access details are on the product site, haven.rodmena.co.uk. For a pilot, an integration or procurement questions, contact us.

Screens

All 6 screens of Haven