Secrets Management
Get credentials, API keys, and tokens out of code and config, and into a controlled flow that rotates and audits them, built on Idira (CyberArk).
Secrets are the credentials your software uses to talk to other software, and they are everywhere: in code, in config, in CI variables, in cloud vaults nobody audits. Each one is a standing key an attacker would love to find.
We bring them into one controlled flow on Idira (CyberArk): stored, rotated, scoped, and pulled at runtime, so a leaked file is no longer a leaked credential.
What we deliver
- Centralised secrets vault
One controlled store for application credentials, API keys, and DevOps secrets, with rotation and access policy built in.
- Secrets out of source code
We find hard-coded secrets across repos and pipelines and move them into the vault, so they stop leaking through git history.
- Cloud vault governance
Secrets that live in AWS, Azure, and GCP native vaults synced and governed from one control plane.
- CI/CD and DevOps integration
Pipelines and applications pull short-lived secrets at runtime instead of holding standing credentials.
The platform we offer
Recent insights on Secrets Management
- FM Cyber Breakfast: Idira (CyberArk)
Breakfast seminar on 18 November 2026 about identity security for people, machines and AI agents, with Palo Alto Networks and FM CyberSecurity at MESH Youngstorget, Oslo.
- CyberArk is now Idira: what to check after the name change
Palo Alto Networks introduced Idira in May 2026. Here is how to navigate the new name, existing CyberArk documentation and licence questions.
- How to start a privileged access management programme
Start with account ownership and high-impact access. Plan credential rotation, emergency access and ongoing operation before expanding the rollout.