A Toronto enterprise password administration supplier is increasing into the sector of machine secrets and techniques administration with the launch of a brand new product and an acquisition.
On Tuesday, 1Password launched Secrets Automation, a brand new strategy to simply safe, handle and orchestrate infrastructure secrets and techniques held in purposes. These “secrets” embrace company credentials, API tokens, keys and certificates.
At the identical time, the corporate stated it had purchased SecretHub, a Netherlands-based secrets and techniques administration firm that protects almost 5 million enterprise secrets and techniques per thirty days.
The SecretHub group and chief govt officer Marc Mackenbach will be part of 1Password instantly to assist speed up the Secrets Automation roadmap.
Secrets Automation permits builders to simply use, retrieve and set secrets and techniques that purposes want with out hardcoding passwords or sharing different wanted secrets and techniques inappropriately, Carson Brown, 1Password’s senior product supervisor, stated in an interview.
Secrets Automation, which runs inside 1Password, integrates with companies builders could already use, similar to HashiCorp Vault, Terraform, Kubernetes and Ansible. There are additionally shopper libraries within the Go, Node and Python languages.
”This is one thing many purchasers have requested us to try to assist them with,” Brown stated. “All businesses that have any kind of infrastructure have this problem: You’ve got team-mates – your DevOps teams, you’re SREs (site reliability engineering) et cetera – who need to securely send secrets to one another. And then it has to be part of the infrastructure where their software runs.”
He added level options don’t remedy the issue as a result of they create “multiple sources of truth to manage.”
An instance of this was the 2016 publicity of knowledge on 57 million customers and drivers of Uber trigger when a software program engineer by chance positioned a secret key into supply code.
The pricing of Secrets Automation is on prime of a 1Password subscription. It begins at $29 a month for 25 credit and goes up primarily based on the variety of password vaults created and accessed.
During setup, an administrator configures the quantity of1Password vaults that Secrets Automation can entry. Specific permissions for accessing a improvement atmosphere with tokens could be created.
All 1Password clients are allowed three credit without spending a dime to allow them to energy a workflow with the delicate knowledge they hold within the password supervisor.
To assist builders, Secrets Automation shall be built-in with the GitHub improvement platform.
The acquisition of SecretHub got here as 1Password started coming into the secrets and techniques administration house, Brown stated.
“The problems we want to solve align very much with the problems they want to solve … We saw them as complementary to the way our method of building products,” Brown stated. “We put security and privacy first, and so do they. Their encryption is not too dissimilar from ours.”
The buy worth hasn’t been revealed.
Founded in 2006, 1Password had about 450 earlier than the acquisition. About 150 have been added final yr, Brown says, partially due to the demand for enterprise password administration with extra company workers working from dwelling.
The firm says it has 80,000 enterprise clients together with IBM, Slack, GitLab and Dropbox.