Show HN: VaultOne, a password and access management for companies. Thoughts?

#1

Post by lcooper » Thu, Apr 12, 2018, 1:07 PM UTC

Show HN: VaultOne, a password and access management for companies. Thoughts?
vaultone.com

Re: Show HN: VaultOne, a password and access management for companies. Thoughts?

#2

Post by mtmail » Thu, Apr 12, 2018, 1:14 PM UTC

"A hardware security module, or HSM, is the only appropriate place to store privileged credentials,"

"We provide you with an exclusive hardware container, your private data is never stored together with other customers’ data."

When I read hardware I assumed it's a physical device I have to install. What you provide is still software isn't it?

Re: Show HN: VaultOne, a password and access management for companies. Thoughts?

#3

Post by lcooper » Thu, Apr 12, 2018, 1:17 PM UTC

mtmail wrote: post #2

"A hardware security module, or HSM, is the only appropriate place to store privileged credentials," "We provide you with an exclusive hardware container, your private data is never stored together with other customers’ data." When I read hardware I assumed it's a physical device I have to install. What you provide is still software isn't it?

Yes, it's software on the cloud, you don't have to install anything. Nevertheless, your passwords and keys are stored in a HSM on the cloud. Thanks.

Re: Show HN: VaultOne, a password and access management for companies. Thoughts?

#4

Post by Cryptohacker » Thu, Apr 12, 2018, 2:17 PM UTC

"Let your users connect to your IT infrastructure without knowing the password or key used to access the server."

How does that work?

Re: Show HN: VaultOne, a password and access management for companies. Thoughts?

#5

Post by gdallo » Thu, Apr 12, 2018, 2:29 PM UTC

How HSM works?

Re: Show HN: VaultOne, a password and access management for companies. Thoughts?

#6

Post by lcooper » Thu, Apr 12, 2018, 2:51 PM UTC

Cryptohacker wrote: post #4

"Let your users connect to your IT infrastructure without knowing the password or key used to access the server." How does that work?

We have a component called 'Connector', which acts as a proxy between the user and the server, this component handles the authentication part of the RDP and SSH protocols.

The whole process is transparent for the user, the user clicks to connect to a server and 'magically' the authenticated session is on the user's browser window.

Re: Show HN: VaultOne, a password and access management for companies. Thoughts?

#7

Post by lcooper » Thu, Apr 12, 2018, 2:53 PM UTC

gdallo wrote: post #5

How HSM works?

We use the HSM to store sensitive data.

Re: Show HN: VaultOne, a password and access management for companies. Thoughts?

#8

Post by gdallo » Thu, Apr 12, 2018, 2:57 PM UTC

lcooper wrote: post #7

gdallo wrote: post #5

How HSM works?

We use the HSM to store sensitive data.

What is HSM, how it works?

Re: Show HN: VaultOne, a password and access management for companies. Thoughts?

#9

Post by lcooper » Thu, Apr 12, 2018, 3:17 PM UTC

gdallo wrote: post #8

lcooper wrote: post #7

Earlier quoted context omitted.

We use the HSM to store sensitive data.

What is HSM, how it works?

HSM stands for Hardware Security Module, which is a physical appliance that safeguards cryptographic keys.

Re: Show HN: VaultOne, a password and access management for companies. Thoughts?

#10

Post by mistermatt » Fri, Apr 13, 2018, 10:04 AM UTC

I would say, if it's not open source it could be a no-go for some people/companies