Deckhouse Stronghold Secure Storage and Secret Management Solution

2024: Inclusion in the register of Russian software

The Deckhouse Stronghold secure storage and secret management solution from Flant is included in the register of Russian software. The developer announced this on May 15, 2024. The product is assembled, supplied and fully works on Russian operational systems. It is fully compatible with the Vault API from HashiCorp and has an interface in Russian.

source = Flant

Deckhouse Stronghold can be used in all environments, clouds and closed circuits with increased security requirements. The solution allows you to separate access rights for managing storage and obtaining application secrets - which minimizes data leakage risks and provides maximum access control.

The solution is part of the Deckhouse ecosystem and is deeply integrated with all of its products. In addition, Stronghold is compatible with a large range of existing solutions on the market, including for secure delivery of secrets to databases, CI/CDs and for authentication from external identification sources (for example, AD, OIDC, LDAP, SAML).

The inclusion of Deckhouse Stronghold in the register is a natural event for us. The solution is based on a mature product that has existed since 2015. The Stronghold code is stored and developed in Russia, and is also constantly tested for vulnerabilities. All documentation and interface are written in Russian, which makes working with the product more convenient and easier. Technical support from experts is also provided, "said Konstantin Aksyonov, director of the Deckhouse development department at Flant. - We continue to actively work on the technological development of the product. In the process of implementation - isolated environments and multi-tenancy, which will allow you to divide the storage of secrets between individual departments or teams.

At the end of 2024 algorithm enciphering , GOST will be implemented at Deckhouse Stronghold. Also in the first quarter of 2025, the solution developer will begin implementing support for HSM (Hardware Security Modules) - hardware and software cryptographic modules for systems with increased security requirements.