{"id":654450,"date":"2025-06-03T14:44:00","date_gmt":"2025-06-03T12:44:00","guid":{"rendered":"https:\/\/www.devoteam.com\/expert-view\/hashidays-2025-hashicorp-maintains-course-after-ibm-acquisition\/"},"modified":"2025-06-03T14:44:00","modified_gmt":"2025-06-03T12:44:00","slug":"hashidays-2025-hashicorp-maintains-course-after-ibm-acquisition","status":"publish","type":"expert-view","link":"https:\/\/devoteam.info\/be\/expert-view\/hashidays-2025-hashicorp-maintains-course-after-ibm-acquisition\/","title":{"rendered":"HashiDays 2025: HashiCorp Maintains Course After IBM Acquisition"},"content":{"rendered":"\n

Devoteam, a valued HashiCorp partner, was invited to HashiDays London, one of HashiCorp’s two flagship annual events. The day was packed with announcements, including a keynote address hosted by HashiCorp CTO Armon Dadgar, followed by customer testimonials.<\/p>\n\n\n\n

\"HashiDays<\/figure>\n\n\n\n

HCP Vault Radar<\/h2>\n\n\n\n

HCP Vault Radar is now generally available, as announced a few days ago on April 30th. For those unfamiliar, it’s a SaaS tool that finds cleartext secrets in your environment. It helps discover, assess, and integrate these secrets into Vault or other managers, particularly useful for lift & shift migrations, multi-cloud deployments<\/a>, and interconnected SaaS solutions.<\/p>\n\n\n\n

Getting started is easy: choose a cloud source (Azure DevOps Cloud is coming soon!) or manually install an agent.<\/p>\n\n\n\n

\"HashiDays<\/figure>\n\n\n\n

Here is the workflow:
<\/p>\n\n\n\n

    \n
  1. Secret Scanning<\/li>\n\n\n\n
  2. Entropy and randomness<\/li>\n\n\n\n
  3. Reduced false positives<\/li>\n\n\n\n
  4. Notification workflows<\/li>\n<\/ol>\n\n\n\n


    Leaving aside the broader overview of the tool, I wish to emphasise a singular, novel functionality: a button designed to extract an unmanaged secret located directly within Vault, utilising the KV v2 engine. This addition significantly enhances workflow automation and is, therefore, highly beneficial.<\/p>\n\n\n\n

    My opinion: <\/h4>\n\n\n\n

    Vault Radar really shines when you need to lock down secrets across your whole system. If it’s just Github you’re worried about, honestly, there are plenty of free, open-source options that’ll get the job done. Where Vault Radar stands out is its ability to connect with all those other tools that often get overlooked\u2014like Jira, Confluence, and even your messaging platforms. The automatic fixes are a huge win too, way better than just getting a report. That’s key for any serious business.<\/p>\n\n\n\n

    And the price? It’s $7 per user monthly (keep in mind, that’s based on the sources being scanned).<\/p>\n\n\n\n

    \"HashiDays<\/figure>\n\n\n\n

    Vault Enterprise<\/h2>\n\n\n\n

    HashiCorp presented a review of recent feature introductions, specifically those incorporated in version 1.19, rather than announcing any major updates. Key among these was the implementation of automatic root credential rotation for various plugins, including AWS, Azure, Google Cloud, LDAP authentication methods, and databases. This development addresses the previously manual requirement for rotating static plugin credentials.<\/p>\n\n\n\n

    Other new features:<\/p>\n\n\n\n