Conjur

Conjur provides secrets management and application identity for modern infrastructure. It is built to secure non-human access by managing identities, storing secrets, and controlling access with a policy model for humans and machines.

It uses Machine Authorization Markup Language - MAML - to define roles, privileges, and metadata. A REST web service manages identity lifecycles, organizes and searches roles and data, authorizes access to resources, and stores secrets for secure retrieval. It also includes built-in authenticators and rotators, plus support for custom authenticators and custom rotators.

Conjur runs in Docker containers with PostgreSQL as the backing data store and can use an external managed database such as AWS RDS. It supports multiple accounts in the same database and provides a migration path to CyberArk Secrets Manager, Self-Hosted. The server is LGPL v3.0, with commercial licenses also available from CyberArk.