HashiCorp Vault

Iru connects to Vault to confirm that access to your secrets is governed by policy, not convention. It reads policies, auth method configuration, and audit device logs directly, so every request to read a secret is on record.

Key Capabilities

• Verify secret access is governed by policy rather than convention
• Confirm authentication methods and mounts are deliberately scoped
• Track secret access through configured audit devices

Evidence Collected

• Policies and their bindings
• Mount and auth method topology
• Seal and storage encryption configuration
• Lease metadata and history
• Audit device configuration recording client requests

Learn more