Much of the Radar team was initially surprised to see such widespread adoption of HashiCorp Vault among the companies that responded. Vault has often been considered in the industry as a rather complex tool with high operational burden. However, the broad adoption makes sense when you consider many smaller organizations likely would prefer to outsource their secrets management rather than creating and maintaining an in-house solution. This is backed up by our conclusion that commercial tools have a higher adoption rate since they remove the complexity of creating an in-house tool. Show More

Offerings from cloud providers were also widely adopted among participating companies. This finding was not surprising since it is much easier for an organization to use a service if that same provider is already managing the infrastructure. Show More

We found that there is a lot of fragmentation and specialization in general among the tools included in the Radar, but this was especially the case with Kubernetes and with certificates appearing in tools and services from vendors. Show More

Behind Vault, cloud vendor solutions, and Certificate Manager, we saw a lot of fragmentation in responses which included tools designed for more specific use cases like frameworks, encrypted files in git repositories, and other overlapping tools in the Kubernetes ecosystem. Some of these were not included in the original list of tooling but did appear as one-off instances in responses. However, they did not receive enough adoption/trial/asses votes to be included on the Radar. Show More