Story
HashiCorp
MorningstarHow Morningstar Runs Secure Delivery on Vault
Morningstar, a financials organization in the United States, uses Vault from HashiCorp to support secure delivery for developers and AppSec.
Developers and AppSec at Morningstar review developer security in Vault rather than in personal files.
“Financials work at Morningstar spans more than one site, even when headquarters sits in the United States.”
“Developers and AppSec asked for a shared way to run secure delivery without freezing local judgment.”
Independent write-up. Figures come from public sources or are illustrative.
Value results
| Category | Value result |
|---|---|
| Productivity | Handoffs in secure delivery sit in a shared queue instead of a mailbox trail |
| Risk and compliance | Vault is the governed place developers and AppSec use for secure delivery |
| Capability | New joiners can see how secure delivery actually runs |
Story
Financials work at Morningstar spans more than one site, even when headquarters sits in the United States. Developer security was splitting across regional habits. Developers and AppSec asked for a shared way to run secure delivery without freezing local judgment.
HashiCorp (Vault) is what they standardized on. HashiCorp (an IBM company) provides infrastructure automation software, including Terraform and Vault, for cloud provisioning and secrets. Morningstar uses it as the system of record for developer security, with developers and AppSec as the primary operators and other groups coming in through the same queue.
Leaders get a picture they can actually walk. Teams get fewer mystery statuses. The story is about operating change, not an unpublished percentage.
