Remediate secret sprawl at scale
summary
HCP Vault Radar scans code and environments to detect, remediate, and prevent credential exposure, ranks findings by severity, and identifies secret type, activity, exact git commit and author. It assigns repo-level ownership via HCP groups, sends Slack notifications for critical events, and offers guided remediation actions that can import secrets into Vault at a chosen key and subpath, plus customizable docs. Developers mark issues resolved so security teams track program-wide progress and reduce secret sprawl.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 0:44Secret sprawl challenges
- 3:18Four-pillar framework
- 6:10Remediation workflow steps
- 8:19Vault Radar features
- 13:39Summary and Q&A
related talks
25mInspect and protect distributed environments with HCP Vault Radar
40mDay 2 keynote
24mDeveloper-First Application Security and DevSecOps
24mSecrets at Scale with Vault and Waypoint
25mCan you keep a secret?
14mSecurity lifecycle management in a multicloud world
26mSecret Hunting
12mCentralize and manage secrets with HashiCorp Cloud