Conjur is a secrets management and machine identity platform developed by CyberArk. It provides centralised storage and controlled access to credentials used by applications, automation tools and infrastructure services.
The software is designed for environments where applications and machines need to authenticate securely and retrieve sensitive information. Rather than distributing passwords, API keys and certificates through configuration files or scripts, Conjur provides an authenticated service for requesting credentials when required.
Access decisions are governed by policies that describe identities, resources and permissions. This makes Conjur particularly suited to infrastructure automation, continuous integration pipelines and containerised applications.
This is free and open source software.
Key Features
- Centralised secrets storage – manages passwords, API keys, certificates and other sensitive application credentials.
- Machine identity management – authenticates applications and automated workloads before granting access to protected resources.
- Policy-based authorisation – uses a declarative policy language to define roles, privileges and resource relationships.
- Role-based access control – restricts secret access according to assigned identities and permissions.
- REST API – supports credential retrieval, identity management, authorisation and administrative operations.
- Built-in authenticators – provides authentication mechanisms for applications and infrastructure components, with support for custom authenticators.
- Secret rotation – includes facilities for updating managed variables through configurable rotators.
- Encrypted storage – protects sensitive information using AES-256-GCM encryption and cryptographic key management.
- Multi-tenancy – supports separate organisational accounts with independently managed authentication and access policies.
- Infrastructure integration – connects secrets management with configuration management, CI/CD systems and container orchestration workflows.
- PostgreSQL backend – stores application state, identities and encrypted secrets in a relational database.
Website: github.com/cyberark/conjur
Support:
Developer: CyberArk
License: GNU Lesser General Public License v3.0
Conjur is written in Ruby. Learn Ruby with our recommended free books and free tutorials.
Related Software
| Secrets Management | |
|---|---|
| OpenBao | Manage, store, and distribute sensitive data |
| SOPS | Editor of encrypted files |
| Sealed Secrets | One-way encrypted secrets |
| Vault | Tool for securely accessing secrets |
| Infisical | Secrets management, PKI, and SSH access |
| fnox | Encrypted/remote secret manager |
| Envy | Slick TUI for browsing secrets and a CLI for automation |
| Chamber | Modern secret management solution |
Read our verdict in the software roundup.
 LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |
Please read our Comment Policy before commenting.