Story
HashiCorp
MorningstarHow Morningstar Runs Secure Delivery on Vault
Morningstar, a financials organization in the United States, uses Vault from HashiCorp to support secure delivery for developers and AppSec.
Value results
| Category | Value result |
|---|---|
| Productivity | Handoffs in secure delivery sit in a shared queue instead of a mailbox trail |
| Risk and compliance | Vault is the governed place developers and AppSec use for secure delivery |
| Capability | New joiners can see how secure delivery actually runs |
Story
Financials work at Morningstar spans more than one site, even when headquarters sits in the United States. Developer security was splitting across regional habits. Developers and AppSec asked for a shared way to run secure delivery without freezing local judgment.
HashiCorp (Vault) is what they standardized on. HashiCorp (an IBM company) provides infrastructure automation software, including Terraform and Vault, for cloud provisioning and secrets. Morningstar uses it as the system of record for developer security, with developers and AppSec as the primary operators and other groups coming in through the same queue.
Leaders get a picture they can actually walk. Teams get fewer mystery statuses. The story is about operating change, not an unpublished percentage.
