Story
HashiCorp
SoFiSoFi Brings Developer Security onto HashiCorp
SoFi, a financials organization in the United States, uses Consul from HashiCorp to support secure delivery for developers and AppSec.
Value results
| Category | Value result |
|---|---|
| Risk and compliance | Developer security can be reviewed without waiting on a personal export |
| Risk and compliance | Named workflow replaces ad hoc routing for developer security |
| Capability | Secure delivery stays visible to adjacent teams through Consul |
Story
Inside SoFi, secure delivery used to depend on whoever still had the latest file. That pattern is common in financials groups working out of the United States. Developers and AppSec needed a system that would still make sense after the original project team moved on.
SoFi uses Consul from HashiCorp as the working layer for developer security. HashiCorp (an IBM company) provides infrastructure automation software, including Terraform and Vault, for cloud provisioning and secrets. The practical change is simple: secure delivery has a home, and reviews happen there instead of in a forwarded thread.
Nothing in this writeup invents a savings number. What SoFi gets from HashiCorp is a durable place to run secure delivery and a way for developers and AppSec to see the same developer security at the same time.
