Story
HashiCorp
Citizens FinancialCitizens Financial Modernizes Developer Security with HashiCorp
Citizens Financial, a financials organization in the United States, uses Terraform from HashiCorp to support secure delivery for developers and AppSec.
Developers and AppSec at Citizens Financial review developer security in Terraform rather than in personal files.
“From the United States, financials teams still had to serve customers and internal partners who expected a straight answer.”
“HashiCorp (an IBM company) provides infrastructure automation software, including Terraform and Vault, for cloud provisioning and secrets.”
Independent write-up. Figures come from public sources or are illustrative.
Value results
| Category | Value result |
|---|---|
| Risk and compliance | Named workflow replaces ad hoc routing for developer security |
| Risk and compliance | Developers and AppSec work from the same Terraform record for developer security |
| Capability | Secure delivery stays visible to adjacent teams through Terraform |
Story
Citizens Financial grew developer security faster than the local tools around it. From the United States, financials teams still had to serve customers and internal partners who expected a straight answer. Developers and AppSec were the ones stitching the picture together by hand.
Rolling out Terraform put secure delivery on HashiCorp. HashiCorp (an IBM company) provides infrastructure automation software, including Terraform and Vault, for cloud provisioning and secrets. Citizens Financial keeps the product in the path where work already happens, so developers and AppSec do not context-switch into a graveyard system used only for audits.
The visible result is steadier secure delivery. Developer security is easier to inspect, and adjacent groups can join developers and AppSec without a guided tour of someone's desktop.
