Put secrets, certs and credentials in a vault

[sfr]

Managing credentials locally in Lansweeper, can pose a security risk. Especially when it comes to audit logs and access tracking, it would be very helpful if Lansweeper could use a vault to get the scanning credentials like Hashicorp vault, Azure Vault, AWS Secrets, Delinea etc.

Is something like this planned?

[MariaOrellana · Accepted solution]

Hi @sfr, 

Thanks for raising this — that’s a great point. We understand the security considerations around managing credentials locally.

We do have plans to support integrations with external credential vaults for managing network discovery credentials. We’ll start with CyberArk and BeyondTrust, with more vaults to follow later on.

We can’t commit to an exact timeline yet, but our current goal is between Q4 this year and Q1 next year.

Best regards,

[sfr]

Thank you for the reply Maria. Good to hear, it's going forward 🙂 ... Azure Key Vault and AWS Secrets Manager should be very high on the list as well as Hashicorp Vault. Especially the first two are available to most organisations already and a quick win for them to improve security significantly.

[MariaOrellana]

You’re absolutely right — great suggestions! We’ll definitely take those into account as we move forward.

If you’d like to be involved in the beta program for this feature once it’s available, feel free to reach out to me at maria.orellana@lansweeper.com — I’d love to work with you more closely on this improvement.