Conjur

Conjur offers comprehensive solutions for DevOps security, including secrets management, role-based access control (RBAC), and secretless applications. The company addresses various use cases such as securing CI/CD pipelines, Kubernetes security, container security, application security, and security automation. Conjur supports interactive learning with tutorials on securing Ansible automation, CI/CD pipelines, and Kubernetes secrets. It provides a REST API, CLI, SDK, and tools for injecting secrets and using a secretless broker. Conjur’s quick start guide helps users set up a Conjur OSS environment, define policy, store secrets, and run a demo app. The Secretless Broker feature allows applications to connect securely to services without fetching or managing secrets. Conjur supports native integrations with most DevOps tools and offers a centralized platform for secrets management and access control across tools, applications, container platforms, CI/CD pipelines, and cloud environments. The Conjur Buildpack for Cloud Foundry automatically injects secret values into applications’ environments at runtime, and the Conjur service broker for Cloud Foundry creates Host identities for applications that bind to it. Conjur supports security policy as code, enabling operations and DevOps teams to restore access policies from the last known state checked into code version control. The Summon utility fetches secrets from trusted stores and exports them as environment variables. Conjur’s monitoring strategy includes feeding audit trails into tools like Prometheus. It supports machine identity-based authentication and RBAC for securing automation workloads, and offers tutorials for integrating Conjur with popular DevOps tools like Jenkins, Cloud Foundry, and Ruby API.