Conjur provides an open‑source secrets management platform that authenticates non‑human identities and enforces policy‑as‑code RBAC for applications, containers, and cloud services. It delivers secrets on demand via API, CLI, or SDKs, supports automated rotation and secretless injection, integrates with CI/CD and orchestration tools such as Jenkins, Terraform, and Kubernetes, and logs all access for audit and compliance.
Funding
$2.6M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Product
Problem
Application code, CI/CD pipelines, containers, and cloud services often embed static credentials or rely on ad‑hoc secret handling, creating security islands, audit gaps, and exposure to credential leakage. Managing non‑human identities across heterogeneous tools lacks a unified, policy‑driven control plane, making rotation and revocation error‑prone.
Solution
Conjur delivers an open‑source secrets management platform that authenticates and authorizes non‑human identities through granular, policy‑as‑code Role‑Based Access Control. When a service requests a secret, Conjur validates the request against a centrally defined security policy, then securely delivers the credential while logging the transaction for full auditability. The system supports automated identity enrollment for elastic workloads, secret rotation, and secretless application patterns that eliminate hard‑coded credentials. Integration adapters are provided for major DevOps tools—including Jenkins, Ansible, Terraform, Kubernetes, and cloud providers—allowing seamless adoption across CI/CD pipelines, container orchestration, and multi‑cloud environments. Access to Conjur’s capabilities is exposed via a REST API, CLI, and language SDKs, enabling developers to embed secret retrieval directly into code or automation scripts.
Target Audience
The primary customers are DevOps, platform, and security engineering teams that need to secure CI/CD pipelines, containerized workloads, and multi‑cloud infrastructures while maintaining compliance and auditability.
Features
- Policy‑as‑code RBAC engine that enforces fine‑grained permissions for applications, containers, and cloud services
- Automated secret rotation and revocation workflows with built‑in audit trails
- Secretless broker that injects credentials at runtime, removing secrets from source code and configuration files
- Native integrations with Jenkins, Ansible, Terraform, Kubernetes (including OpenShift), Cloud Foundry, AWS IAM, and other DevOps tooling
- RESTful API, command‑line client, and SDKs for multiple languages to facilitate programmatic secret access
- Centralized logging and compliance reporting for all secret access events
- Open‑source distribution with optional upgrade path to Conjur Enterprise for advanced scalability and support