Why secrets management is incomplete without secret scanning
Learn how secret scanning gives your teams the visibility, detection, and guardrails to minimize secret exposure.
Secret sprawl is costing you more than you think
Secret sprawl — the uncontrolled spread of credentials across development tools and repositories — is silently costing organizations millions annually through reduced developer productivity and security team overhead.
Why default secret detection rules don't work (and how to fix it)
Transform noisy, one-size-fits-all secret scanning into precise threat detection using custom patterns, intelligent filtering, and automated severity-based workflows.
The unseen risk: Securing NHIs in your infrastructure
We’re used to tracking every employee. Who they are. What they can access. What systems they touch. But there’s a growing, largely invisible workforce that rarely gets the same scrutiny: non-human identities (NHIs).
Prevent secret exposure across IT: 4 tools and techniques
Explore four methods to proactively secure secrets, preventing exposure of sensitive information that can lead to security breaches.
Integrating secret hygiene into AI and ML workflows
Your MLOps pipeline is a target in the emerging LLM training landscape. Learn how to use secret scanning in this new frontier.
HashiCorp at re:Inforce: Advancing Security Lifecycle Management with AWS
HashiCorp will be at AWS re:Inforce 2025 sharing expert talks, product demos, and news announcements.
Vault Radar, Boundary transparent sessions, and more at HashiDays 2025
New Security Lifecycle Management (SLM) features from HashiCorp Vault, Boundary, and Consul help organizations remediate and prevent secrets exposures, improve developer access experience, and improve service discovery.
HCP Vault Radar agent: Local secret scanning at enterprise scale
The Vault Radar agent enables hybrid secret scanning across source code and collaboration tools within your environment, delivering deep visibility and risk reduction without sensitive data leaving your network.
Why adopt HCP Vault Radar
HCP Vault Radar, enables teams to move from reactive firefighting to proactive secret remediation and management.
Vulnerability tools aren’t enough to resolve exposed credentials
Relying on vulnerability tools is insufficient for protecting against credential leaks; specialized solutions like HCP Vault Radar are necessary to effectively detect and prevent unauthorized access.
Improve secret scanning efficiency in HCP Vault Radar
Learn how HCP Vault Radar uses tuning detection with regex, ignore rules, and exclusion rules to detect leaks and unmanaged secrets.
HCP Vault Radar goes GA with Vault import
HCP Vault Radar, now GA, can copy and secure secrets discovered in Git-supported repositories and collaboration platforms directly into HashiCorp Vault.
Why we need short-lived credentials and how to adopt them
Go from static credentials, to auto-rotation, to fully ephemeral “dynamic” credentials with two example roadmaps and see why short-lived credentials are so important.
3 cybersecurity stories from 2024 that show what we need to do in 2025
The majority of attacks in 2025 aren’t going to be related to AI or use zero-days. They’ll continue to focus on the easiest exploits, including exposed credentials and user access patterns.
HashiCorp at re:Invent 2024: Security Lifecycle Management with AWS
A recap of HashiCorp security news and developments on AWS from the past year, for your security management playbook.
New SLM offerings for Vault, Boundary, and Consul at HashiConf 2024 make security easier
The latest Security Lifecycle Management (SLM) features from HashiCorp Vault, Boundary, and Consul help organizations offer a smoother path to better security practices for developers.
False positives: A big problem for secret scanners
False positives can distract security teams, exhaust resources, and increase the potential for actual threats to go unnoticed, but HCP Vault Radar can help minimize them.
How to stop secret exposure in your collaboration platforms
Collaboration platforms are becoming lucrative targets for cyber criminals, but secret scanners like HCP Vault Radar can help safeguard your organization.
Vault integrations with Dell, GitHub, Rubrik, Veza, and more strengthen customer security
Nine new HashiCorp Vault ecosystem integrations extend security use cases for customers.
Secret remediation best practices
Finding insecure secrets in your environment before they lead to downtime or breach is critical, but so is establishing best practices for remediating the problem.
New Vault and Boundary offerings advance Security Lifecycle Management at HashiDays 2024
New Security Lifecycle Management (SLM) offerings from HashiCorp Vault and Boundary help organizations protect, inspect, and connect their most sensitive data.
How secret scanning works
Secret scanners should conduct ongoing reconnaissance of unsecured secrets stored as plain text in code repositories as well as configuration, DevOps, and collaboration tools.
How to close attack vectors for exposed secrets in Docker
Learn to protect your enterprise assets by detecting vulnerable container images and proactively following secure best practices.
HCP Vault Radar for secret discovery enters limited availability
HCP Vault Radar, HashiCorp’s new SaaS-based secret scanning and discovery product is now prepared for production workloads.