HashiCorp breidt security portfolio uit met Boundary Enterprise, Boundary session recording en HCP Vault Secrets

"De nieuwe Boundary Enterprise en HCP Vault Secrets oplossingen pakken kritieke multi-cloud beveiligingsuitdagingen aan," zegt Armon Dadgar, medeoprichter en CTO van HashiCorp. "We werken nauw samen met klanten die de overstap naar de cloud maken en helpen hen sneller succesvol te zijn door identiteitsgebaseerde beveiliging te implementeren, een cruciaal onderdeel van een cloud operating model."

hieronder is het volledige persbericht in het Engels te lezen.

New HashiCorp Boundary offering delivers identity-driven, modern privileged access management 

HashiCorp extends security portfolio with Boundary Enterprise, Boundary session recording, and HCP Vault Secrets

HashiCorp, Inc. (NASDAQ: HCP) a leader in multi-cloud infrastructure automation software, today announced at its European user conference, HashiDays, new products and solutions to expand HashiCorp’s identity-based security portfolio. These include a new addition for privileged access management (PAM), HashiCorp Boundary Enterprise, and a simplified secrets management SaaS offering, HashiCorp Cloud Platform (HCP) Vault Secrets. These offerings expand HashiCorp’s approach to identity-based security for dynamic cloud environments. 

According to the HashiCorp 2023 State of Cloud Strategy Survey, conducted by Forrester Consulting, as organizations transition to a cloud operating model, two of the three highest-ranking security initiatives are secrets management and access control/session management. The offerings announced today are a key part of HashiCorp’s identity-based, multi-cloud approach to security.  

"The new Boundary Enterprise and HCP Vault Secrets offerings address critical multi-cloud security challenges,” said Armon Dadgar, co-founder and CTO of HashiCorp. “We are working closely with customers as they transition to the cloud and helping them succeed faster by adopting identity-based security, a critical piece of a cloud operating model.”  

Modern privileged access management with HashiCorp Boundary

As organizations move to the cloud, traditional privileged access management approaches that rely on managing SSH keys and VPNs to manually access applications and systems become cumbersome and can expose the private network. HashiCorp’s approach improves upon legacy PAM tools that require highly manual configuration and rely on IP-based security. HashiCorp Boundary integrates identity-driven controls to enable secure user access across dynamic environments without exposing the network to users. 

“HashiCorp Boundary has made it possible to operationalize our zero trust access strategy and improve our privileged access management,” said Andrew Vezina, CISO and VP at EQ Bank. “With its powerful capabilities and least-privileged access model, HashiCorp Boundary has helped us eliminate manual, time-consuming privilege access management tasks and elevated our security posture to mitigate evolving threats.”

Today’s announcements extend the current offering of HCP Boundary and include:

• HashiCorp Boundary Enterprise — a self-managed commercial offering of HashiCorp Boundary for secure remote user access. Boundary Enterprise leverages just-in-time credentials to deliver a simple and flexible way to access cloud infrastructure and provides least-privileged access to users with single sign-on access using existing cloud service providers.  Boundary Enterprise is now generally available and complements our existing HCP Boundary and Boundary OSS offerings.  
• Session recording — a capability that lets organizations track user and application actions when accessing critical systems so they can gain valuable insights into user behavior and maintain an auditable record of all activities. These capabilities enable organizations to further bolster their security posture and enhance overall compliance. Session recording is now generally available in HCP Boundary and Boundary Enterprise.

Simplified secrets management with HashiCorp Vault 

Organizations that leverage multiple secrets management tools may increase their risk of a breach due to secret sprawl across different systems, files, and repositories. HashiCorp Vault is the de facto standard for automating access to secrets and sensitive data. It uses trusted identities to broker connections between applications and users. The new offerings include:

• HCP Vault Secrets — a new SaaS offering for identity-based secrets management designed for organizations that want to quickly get started managing their secrets with minimal overhead and cost. With HCP Vault Secrets and secret syncing, organizations can centrally manage secrets while allowing developers to use their cloud-native development workflows. Teams can get started for free in a matter of minutes with extensive secrets management capabilities, benefit from simplified workflows, and reduce operational burden via the HashiCorp Cloud Platform. Now in beta, HCP Vault Secrets joins the already available HCP Vault Dedicated, a managed, single-tenant offering, and HashiCorp Vault Enterprise, a self-managed offering.
• Vault Secrets Operator for Kubernetes — a new capability enabling users to natively sync secrets from Vault to Kubernetes clusters. The Vault Secrets Operator improves Vault and Kubernetes integration by ​​implementing a first-class Kubernetes operator and a set of custom resource definitions (CRDs) responsible for synchronizing Vault secrets to Kubernetes secrets natively. This enables automated rotation of secrets without service disruption using Kubernetes rolling updates. Vault Secrets Operator for Kubernetes is now generally available for HCP Vault and Vault Enterprise. 

HashiDays 

HashiDays is being held today in London, Munich, and Paris, and virtually for practitioners and decision-makers around the world. Attendees will hear from HashiCorp customers including Vodafone, Deutsche Börse, and Zurich Insurance, as well as experts from HashiCorp sharing details on the latest product announcements and technical deep dives. 

To watch HashiDays live or replay sessions on demand, register at https://www.hashicorp.com/conferences/hashidays