Subscribe
  • Home
  • /
  • Security
  • /
  • CyberArk integrates with Puppet to automate DevOps secrets protection

CyberArk integrates with Puppet to automate DevOps secrets protection

CyberArk Conjur and Puppet improve visibility, flexibility and security across DevOps workflows.


San Francisco - PuppetConf 2017, 06 Nov 2017

CyberArk (NASDAQ: CYBR), the undisputed leader in privileged account security and company that protects organisations from cyber attacks across the enterprise, into the cloud and throughout the DevOps pipeline, today announced its partnership with Puppet as an Advanced Technology Partner. Together, CyberArk and Puppet are working together to create supported modules that provide automated, enterprise-grade protection of secrets and are seamlessly integrated with Puppet's configuration automation, enabling secure, high-velocity DevOps workflows.

In dynamic DevOps environments, tools, scripts and applications/services are constantly being created, used and disabled. Each step requires secrets, including SSH/API keys, passwords and certificates, which regularly go unchanged or revoked, or may not be available for a range of reasons, making the application unable to run or run properly. Because these accounts provide access to sensitive resources, they are a prime target for an external attacker or malicious insider to facilitate enterprise-wide cyber attacks.

CyberArk Conjur is the only platform-independent secrets management solution that allows organisations to integrate secrets management and machine identity security into their projects with minimal effort. CyberArk Conjur is specifically architected for containerised environments and can be deployed on premises or to any cloud at massive scale.

"This integration balances security and productivity by allowing Puppet users to continue to work within the familiar Puppet interface to secure and manage secrets used by Puppet Masters, nodes and users," said Tim Zonca, vice president of business development, Puppet. "The integrated solution provides security with a strong authentication mechanism for machines before granting secrets, as well as implementing least privilege for nodes."

CyberArk Conjur allows DevOps teams to integrate security best practices into their cloud-native application development projects with ease, while giving security teams assurance that security and compliance best practices are being applied to these dynamic environments, without creating new security silos.

"The CyberArk Conjur module for Puppet is designed with both DevOps users and security teams in mind. It provides visibility and flexibility for Puppet secrets workflows and users can view and manage host accounts maintained by Puppet," said Adam Bosnian, executive vice president, global business development, CyberArk. "The integration with Puppet furthers CyberArk's commitment to automating secrets protection and makes it easier for organisations to recognise the benefits of using Puppet to improve productivity without changing the way developers work."

As part of this integration, Puppet is also joining the CyberArk global technology partner programme that brings together enterprise software, IT security and service providers to build on the power of privileged account security to better protect customers from cyber threats across multi-platform environments. CyberArk recently joined Puppet's Technology Alliance Partner Program (TAPP).

To learn more about the CyberArk Conjur supported module for Puppet, join CyberArk's session, "Securing Secrets for Puppet, Without Interrupting Flow," at PuppetConf 2017 on Wednesday, 11 October at 11.45 am PT.

CyberArk will participate in a joint Webinar with Puppet: "Delivering Infrastructure and Security Policy as Code with Puppet and CyberArk Conjur," on Wednesday, 8 November, 2017 at 8 am PT/11 am ET. Register via this link: https://goo.gl/2Bn9A7.

Share

CyberArk

CyberArk is the only security company focused on eliminating the most advanced cyber threats; those that use insider privileges to attack the heart of the enterprise. Dedicated to stopping attacks before they stop business, CyberArk proactively secures against cyber threats before attacks can escalate and do irreparable damage. The company is trusted by the world's leading companies - including more than 50% of the Fortune 100 - to protect their highest value information assets, infrastructure and applications. A global company, CyberArk is headquartered in Petach Tikva, Israel, with US headquarters located in Newton, Mass. The company also has offices throughout the Americas, EMEA, Asia Pacific and Japan. To learn more about CyberArk, visit www.cyberark.com, read the CyberArk blog, or follow on Twitter via @CyberArk, LinkedIn or Facebook.

Editorial contacts