HashiCorp Vault
Secrets management with short-lived credentials and encryption as a service.
Data Protection
Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
Addresses 223 stories in our coverage in the last 90 days 4 products that provide it
What it is
Encryption of data at rest and in transit, with keys kept in hardware security modules or key management services, and every use of a key logged.
How to value it
If stolen data is properly encrypted and the keys were not taken, the incident is far less serious, and under GDPR the affected people may not even need to be told. Holding your own keys also answers sovereignty questions about data in the cloud.
Questions to ask a vendor
- 1Can we hold our own keys for cloud services (BYOK or HYOK)?
- 2Is the hardware certified, for example FIPS 140-3 or Common Criteria?
- 3How are keys rotated, and who can use them?
- 4What is the plan for post-quantum algorithms?
For your risk register
- Risk
- Exposure of sensitive data at rest or in transit.
- Control
- Encryption with centrally managed keys whose use is logged.
- Owner
- Security architect.
- Measure
- Share of sensitive data stores encrypted with managed keys.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
CipherTrust Data Security Platform
Data discovery, encryption and central key management across on-premises and cloud.
Thales Luna HSM
Hardware security modules for protecting cryptographic keys.
Utimaco General Purpose HSM
Hardware security modules for key generation, storage and cryptographic operations.
Recent stories it addresses
853 stories in total- 13 Nov 2026New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs
Two new attacks, Mior and Skyfall, allow malicious cloud hosts to steal data from AMD SEV-SNP protected VMs.
- 13 Nov 2026TSMC confirms employee data breach tied to cloud service provider
TSMC confirms employee data breach via cloud service provider, impacting current and former employees.
- 13 Nov 2026Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases
Trezor confirms implants in crypto wallets sold by CryptoBilis can steal recovery phrases.
- 13 Nov 2026Apify Confirms Customer Data Accessed in Cyberattack
Apify confirms customer data accessed in cyberattack via compromised credentials.
- 13 Nov 2026FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance
US Seizes $1.2B in Crypto Stolen from Binance; North Korea Blamed for Separate $400M Theft
- 12 Nov 2026Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
US seizes $1.2B from Binance theft and disrupts North Korean 'FaceStealer' tools.
- 12 Nov 2026Notion Customer Data Compromised in Fireworks AI Hack
Notion AI chat transcripts accessed in Fireworks AI hack affecting less than 1% of workspaces.
- 12 Nov 2026Critical Red Hat Quay Vulnerability Could Expose Private Container Images
Red Hat Quay vulnerability CVE-2026-123710 allows attackers to steal private container images.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.