Simplify securing non-human identities for all applications, DevOps pipelines and cloud workloads.
CyberArk Secrets Management is designed to centrally manage, and
secure secrets used by the broadest range of application identities
in cloud-native and hybrid environments. The solution helps security
teams offer developers solutions “that meet them where they are” for
example by offering APIs for cloud portability, dynamic or rotated secrets,
or for teams that have embraced a specific technology, transparent
integrations with the Cloud Service Provider’s built-in secrets manager.
Additionally, the platform helps security teams discover unmanaged
secrets and gain visibility to secrets across the entire enterprise, apply
consistent policies, simplify audit and reduce vault sprawl.
• For cloud-native applications built using DevOps methodologies – Several solutions are offered, each of
which solve a unique set of uses cases.
° For multi-cloud, cloud portability and DevOps environments – Conjur Cloud (SaaS) and Conjur
Secrets Manager Enterprise (Self-Hosted) provide secrets management solutions designed for the
unique requirements of multi-cloud and multi-vendor DevOps environments. Conjur offers REST
APIs and integrates with a wide range of DevOps tools, container platforms, and supports hybrid
and multi-cloud environments.
° For teams that have embraced the CSP’s built-in (native) secrets stores – Secrets Hub enables
security teams to discover, centrally manage and rotate secrets in built-in (native) secrets stores
without changing the developers experience. The SaaS solution provides security teams with visibly,
helps reduce vault sprawl across multiple AWS and Azure project teams and simplifies securing
hybrid environments.
Conjur Cloud and Secrets Hub are part of the CyberArk Identity Security Platform which provides
a comprehensive enterprise-wide platform for securing human and machine identities across the
entire organization.
• For securing commercial off-the-shelf solutions – Credential Providers can rotate and manage
the credentials that third-party tools and solutions such as security tools, RPA, automation tools, IT
management, etc. need to complete their jobs. For example, a vulnerability scanner typically needs high
levels of privilege to scan systems across the enterprise’s infrastructure. Now, instead of storing privilege
credentials in COTS solutions, they are managed by CyberArk. And to simplify how enterprises allow third
party solutions to access privileged credentials, CyberArk offers the most validated COTS integrations
for solving identity security challenges.
• For internally-developed traditional applications – Credential Providers can protect businesssystem data and simplify operations by eliminating hard-coded credentials from internally developed
applications. The solution provides a comprehensive set of features for managing application passwords
and SSH keys, and supports a broad range of application environments, including application servers,
Java, .Net, and scripting running on a variety of platforms and operating systems including Unix/Linux,
Windows and zOS.
CyberArk Identity Security Platform
Secrets Management is part of the CyberArk Identity Security Platform which helps organizations secure
access to critical business data and infrastructure, protect a distributed workforce, and accelerate business
in the cloud. The integrated solution helps organizations reduce the attack surface by applying consistent
policies to human and machine identities across the enterprise.