Lowp tae content
Leid: SCO-ULSTER
Menu

Secret management

Haven

Beta

It hauds ither seestems' credentials, sae it fails closed.

Veisit Haven Documentation Contack us

A secret manager for the credentials that sit ahint a business: database passwords, API keys, signing keys an certificates. It issues thaim wi an expiry, scopes what ilka application micht reach, an records ilka request afore it rins. Its master key niver touches disk, an efter a restart it stays lockit till enough o yer named haulders combine thair shares tae open it, sae haudin the server isnae haudin the secrets.

Wha it is for. Organisations that maun shaw whaur a credential cam frae, wha coud uise it an whan it wis taen back, an that want credentials tae expire on their ain.

Status
Beta
Pairt o
Core platform
Product site
haven.rodmena.co.uk
Tags
Secret managementCreddentials gan oot o dateSplit-key unlockAudit trail

Whit it daes

  • Lockit till yer fowk open it

    The master key is niver written tae disk. Efter a restart, three o five share haulders maun combine their pairts afore onythin can be read, sae a stowen server or a copied backup gies up naethin.

  • Separation atween teams

    Ilk tenant haes its ain encryption key, its ain policies an its ain secrets, an the boundarie is enforced inside the database. A caller cannae ask tae be treatit as anither tenant; that is fixed by the credential it presents.

  • Creddentials that expire on thair ain

    A database password is issued per process wi a lifetime attached, creatit whan it is askit for an withdrawn whan the time is up, sae a leaked password stops warkin withoot onybody noticin it leaked.

  • Applications haud na keys

    Haven encrypts an decrypts on their behalf, sae the key niver reaches the application. Rotatin a key leaes everythin already encrypted readable.

  • A private certificate authority

    Short-lived certificates are issued per service, wi the domains a role micht ask for constrained by that role.

  • A audit trail that is checked

    Ilka request is recordit afore it rins, an ilka record is chained tae the ane afore it wi a hash. Verification walks the chain an recomputes it.

Documentation an access details is on the product site, haven.rodmena.co.uk. For a pilot, an integration or procurement questions, contact us.

Screens

All 6 screens of Haven