Inspect and protect distributed environments with HCP Vault Radar

on YouTube ↗25m

" summary

HCP Vault Radar scans code and docs (GitHub, GitLab, Bitbucket, Confluence, Azure DevOps) via the SaaS console or agent pools/hybrid agents, indexes Vault to correlate leaked copies, and runs activeness checks (entropy, attempted logins) to escalate live credentials; found-audit stories range from hundreds to thousands of secrets (500 vs 5,000). Integrations open Jira/ServiceNow/Slack tickets for remediation, and prevention uses pre-commit hooks and PR checks; Radar is available in public beta.

AI-written summary · about

" chapters (11)

1. 0:00Introduction to Vault Radar
2. 2:18Meet the speakers
3. 3:20Why secret sprawl is a problem
4. 5:27Secret sprawl pyramid explained
5. 7:56Types of risks Radar detects
6. 9:23How Vault Radar works
7. 10:46Demo: Setting up data sources
8. 13:36Demo: Prioritizing findings
9. 18:09Prevention with PR checks
10. 19:54Pre-commit hooks for security
11. 21:02Call to action and resources

" related talks

• 15mRemediate secret sprawl at scaleCami Cano Gomez · HashiConf 2025
• 24mDeveloper-First Application Security and DevSecOpsKevin Alwell · HashiTalks 2022
• 39mSecurity in a DevOps WorldPeter Souter · DevOps Pro Europe 2019
• 14mSecurity lifecycle management in a multicloud worldMike Doheny · AWS re:Inforce 2024
• 12mCentralize and manage secrets with HashiCorp CloudSridhar Krishnamurthy · AWS re:Inforce 2023
• 50mDevOps: Shhhh! It's a secret! - HashiCorp VaultGrzegorz Piotrowski · 4Developers 2020
• 28mEmbedding secrets governance into the enterprise through organizational changeTyler Lynch, Gabe Maentz, Lee March · HashiConf 2025
• 38mKeeping Secrets - A Practical Approach to Managing CredentialsChris Antenesse · ChefConf 2017