Lowp tae content
Leid: SCO
Menu

Secret management

Haven

Available

Acause it hauds ither systems’ credentials, it fails closed.

Veisit Haven Documentation Contact us

Haven hauds the database passwords, API keys, signing keys an certificates that sit ahint a business. It issues thaim wi an expiry, scopes whit onie application mey rax, an records aw requests afore it runs thaim. Its master key niver touches disk. Efter a restart it bides lockit till eneuch o yer named hauders combine their shares. Onieane wha hes the server disna hae the secrets.

Wha it is for. Organisations that maun shaw whaur a credential cam frae, wha could uise it and whan it wis withdrawn, and that want credentials tae expire on their ain.

Status
Available
Pairt o
Core platform
Product site
haven.rodmena.co.uk
Tags
Management o secretsCredentals that are expirinSplit-key unlockAudit trail

Whit it dis

  • Lockit till yer fowk open it

    The master key is niver written tae disk. A stown server or a copied backup gies up naething, acause efter a restart three o five share hauders maun combine their pairts afore onything can be read.

  • Separation atween teams

    A tenant hes its ain encryption key, policies an secrets, an the database enforces the boond atween tenants. Acause the credential a caller presents fixes its tenant, a caller canna spier tae be treatit as anither.

  • Credential that expire on their ain

    Haven issues a database password per process wi a lifetime attached. It is creatit whan spiert for an athdrawn whan the time is up. A leaked password thairfore stops wirkin e'en gin naebody noticed the leak.

  • Applications haud na keys

    Haven encrypts and decrypts on their behalf, so the key never reaches the application. Rotating a key leaves everything already encrypted readable.

  • A private certificate authority

    Short-lived certificates are issued per service for the domains its role allous it tae spier for.

  • An audit trail that is checked

    Requests are recorded afore thay run, in a log whaur a hash chains a record tae the ane afore it. Verification gangs the chain an recomputes it.

Documentation and access details are on the product site, haven.rodmena.co.uk. For a pilot, an integration or procurement questions, contact us.

Screens

Aw 6 screens o Haven