GitGuardian and Idira partnered to help organizations prevent breaches resulting from leaked secrets and mismanaged identities.

This integration provides:

• Seamless detection of hardcoded secrets across the SDLC.
• Automated prioritization and remediation of hardcoded secrets based, including Conjur Cloud insights
• Onboarding of hardcoded secrets into Conjur for centralized lifecycle management.
• Runtime insight and observability on managed and unmanaged secrets and tied machine identities.

Why this matters:

Idira customers can centrally manage secrets in Conjur, but may lack visibility into how those secrets are exposed in their SDLC. Unused or unmanaged secrets increase the attack surface, presenting risk and compliance challenges.

Key Benefits:

1. Unmanaged Secrets Discovery:

• Identify hardcoded secrets (not managed by Conjur), including their exact location in code or infrastructure.
• One-click onboarding into Conjur.

2. Comprehensive Observability:

• Surface machine identities and their associated secrets within Conjur and aggregate them in one central location
• Map each secret and tied identity in the infrastructure, giving insights on where they are stored, which servers are using them and what service can be accessed

3. Secret Manager posture:

• Identify stale secrets, long-lived or overprivileged secrets
• Assess and improve secret management posture