Skip to content
Back to Insights

ControlPlane Launches Enterprise Support For OpenBao To Strengthen Secrets Security

ControlPlane Launches Enterprise Support For OpenBao To Strengthen Secrets Security
  • Assurance
  • Security
  • Kubernetes
  • OpenBao
  • Software Supply Chain Security

ControlPlane, a specialist AI Security and DevSecOps consultancy, today announced the launch of ControlPlane Enterprise for OpenBao, a new offering designed to help organizations securely adopt and operate the OpenBao secrets management platform (opens in a new tab).

Following IBM's $6.4 billion acquisition of HashiCorp (opens in a new tab) and the transition of Vault to IBM Software, organizations are seeking open source alternatives with enterprise-grade support.

ControlPlane Enterprise for OpenBao provides organizations with a secure and supported pathway to deploy OpenBao while maintaining the flexibility and cost advantages of open source software. The offering extends the core platform with enterprise-grade security hardening, supply chain assurance, rapid CVE remediation and optional FIPS 140-3 cryptographic compliance.

As organizations scale up cloud native infrastructure for AI initiatives, the number of credentials, access tokens, and machine identities used across systems has increased dramatically, making secrets management a critical control in modern cybersecurity.

For many organizations, preventing breaches now depends on keeping one step ahead of malicious actors to protect sensitive data that sits at the heart of IT environments.

Modern infrastructure runs on secrets, machine identities, and credentials that allow systems to operate securely. If those secrets are exposed or poorly managed, attackers can move rapidly through an environment OpenBao represents an important step forward for the open source security ecosystem. With ControlPlane Enterprise for OpenBao we are driving a modern secrets management platform with our years of experience with regulated organizations: enterprise-grade security, operational assurance, and the expertise to run it at massive scale.

Andrew Martin, CEO of ControlPlane

OpenBao is open source software that enables organizations to securely store and manage sensitive information, controlling who and what can access systems and data. As cloud environments grow more complex, secrets management is now viewed as a foundational security control.

ControlPlane's founding engineer, Alex Scheel is OpenBao's top contributor and former Technical Steering Committee Chair, having authored Vault's core cryptographic layer at HashiCorp and deployed it for GitLab into their native Secrets Manager, validating its enterprise readiness.

After a string of high-profile incidents last year, both across Asia Pacific and globally, the message from our customers is clear: protecting the keys to their infrastructure is fundamental to preventing a breach. That’s why we’ve packaged enterprise-grade support around the open source project, to give security and platform teams the flexibility and cost advantages of open source without taking on the full operational risk themselves. We’ve already had significant enquiries from organizations across banking, retail, government and finance, to name a few, and that interest tells us something important: teams are looking for practical, supported ways to harden the places attackers go after first. By combining an open source secrets manager with enterprise-grade technology, ControlPlane customers get the best of both worlds - agility and cost control, plus the confidence of vendor-backed operations. That combination is what’s driving the early momentum we’re seeing.

Aiman Alsari, Head of Asia Pacific, ControlPlane

ControlPlane’s Enterprise for OpenBao service includes secure architecture and configuration, integration with existing identity and security systems, operational runbooks, and ongoing product and implementation support from their global consultancy SMEs.

For more information visit ControlPlane Enterprise for OpenBao

Get in touch

Fields marked with an asterisk (*) are required.

View all
  • Beyond Compliance: Strategic Cyber Resilience in Financial Services Under the EU’s CRA

    • Assurance
    • Security
    • Software Supply Chain Security
    • Kubernetes

    The EU’s Cyber Resilience Act (CRA) isn’t just another regulatory hurdle; it’s a fundamental shift in how we approach digital security. For senior IT risk and security leaders, understanding and strategically navigating the CRA is not just about compliance, it’s about ensuring business resilience and building a foundation for future growth. The financial services industry sits at the nexus of innovation and risk. As custodians of vast amounts of sensitive data and critical infrastructure, Financial Services Institutions (FSIs) are prime targets for the very cyber threats the CRA is designed to protect.

  • Back to the Future: Next-Generation Cloud Native Security - A talk by Andrew

    • Security
    • Kubernetes
    • Assurance
    • Software Supply Chain Security

    In this blog post, we delve into their discussion, unpacking the evolution

  • Future Open Source LLM Killchains! A Talk by Vicente Herrera

    • AI Security
    • Security
    • Software Supply Chain Security
    • Assurance
    • Kubernetes

    Future Open Source LLM Killchains! A Talk by Vicente Herrera

Speak to an expert

Engage with world-leading AI and cloud security specialists