HashiCorp, the infrastructure automation company, has announced the acquisition of code security startup BluBracket. The terms of the acquisition were not disclosed. BluBracket, founded by the team behind Vera Security, raised $12 million in a Series A funding round in 2021. HashiCorp’s focus on security has primarily revolved around identity-based security and secure secrets management with Vault, as well as secure remote access with Boundary.
With the increasing importance of software supply chain security, the addition of BluBracket’s capabilities is a natural extension for HashiCorp, and the company plans to integrate BluBracket into Vault.
The integration of BluBracket into Vault will enable HashiCorp to enhance its zero trust capabilities and secret lifecycle management tools by incorporating detection and remediation workflows. BluBracket’s solution helps developers and their teams prevent the leakage of secrets, credentials, and personally identifiable information (PII) from source code.
Additionally, it can scan Infrastructure-as-Code configurations to identify potential vulnerabilities that could expose a company’s infrastructure to attacks. The service integrates with platforms such as GitHub, Bitbucket, GitLab, and Jira.
By integrating BluBracket into Vault, HashiCorp aims to provide a more comprehensive solution for managing secrets throughout their lifecycle. The addition of BluBracket’s capabilities will bolster HashiCorp’s security offerings and enable customers to have greater visibility and control over their code security and infrastructure vulnerabilities.
Both HashiCorp and BluBracket expressed excitement about the acquisition and highlighted the synergies between their respective products. The collaboration between the teams will focus on integrating BluBracket’s code security features into Vault, enhancing the overall secrets management user experience.
With the acquisition of BluBracket, HashiCorp aims to strengthen its position in the market as a provider of comprehensive security solutions for cloud platform teams, enabling them to effectively manage secrets and secure their infrastructure throughout the software development lifecycle.
