Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Secrets Management

Identify the secrets that make your cloud environment more vulnerable to an attack

Compromised secrets, such as leaked API and SSH keys, credentials, and session tokens, are the leading cause of cloud security incidents. While attackers can directly compromise secrets through methods like phishing, they can also gain control by finding and taking advantage of simple misconfigurations in your environment.

How To Prevent Secrets Sprawl

Where are your credentials and secrets, and how are you protecting them? These are fair questions, considering the pervasiveness of secrets sprawl. We recently conducted research over 12 months to determine where enterprises’ secrets were residing within their systems, like GitHub, Confluence, Zendesk and Slack. In addition to API keys and passwords, secrets like SSL certificates, usernames and others are spilling into enterprises’ cloud environments and increasing the risk of a breach.

Tricentis Tosca Secrets Manager Integration with CyberArk Software

- In this video, we explore the integration between Tricentis Tosca and CyberArk, demonstrating how to securely store and manage sensitive data, such as passwords and multi-factor authentication (MFA) keys, directly in CyberArk. Learn how to seamlessly access this data in your test cases and configurations when needed. This integration ensures enhanced security for your test automation by centralizing sensitive data management within CyberArk. Be sure to subscribe for more tutorials on test automation and security best practices!

A Comprehensive Guide to SOPS: Managing Your Secrets Like A Visionary, Not a Functionary

Have you heard about SOPS? If you have already been in a situation where you needed to share sensitive information with your teammates, this is for you. Today, let's have a look at how it works and how to use it with various key management services such as AWS KMS and HashiCorp Vault.