Customer Secret Vault
Per-org envelope-encrypted secrets with reveal audit
Crypto
AES-256-GCM
Reveal
Audited
BYOK
Supported
What it does
Store integration credentials and certs with AES-256-GCM envelope encryption, reveal-once UX, rotation, and optional BYOK. Pipeline secret resolution cascades through the vault.
- Envelope encryption
- Reveal audit trail
- BYOK path
/dashboard/vault. This page is a static capability preview — not a live workspace.Synthetic mockup
| Secret | Tags | Rotated | Expires |
|---|---|---|---|
| emass-client-cert | emass, prod | 30d ago | 2027-01-01 |
| siem-api-key | siem | 7d ago | — |
| scanner-ssh | scanner | 14d ago | — |
See it with your data
Request a managed demonstration — staff walks you through this module on a provisioned environment with realistic scenarios.
Request a managed demonstration