ControlPlane, a specialist AI Security and DevSecOps consultancy, today announced the launch of ControlPlane Enterprise for OpenBao, a new offering designed to help organisations across Asia Pacific and globally to securely adopt and operate the OpenBao secrets management platform.

Following IBM’s $6.4 billion acquisition of HashiCorp and the transition of Vault to IBM Software, organisations are seeking open source alternatives with enterprise-grade support.

ControlPlane Enterprise for OpenBao provides organisations with a secure and supported pathway to deploy OpenBao while maintaining the flexibility and cost advantages of open source software. The offering extends the core platform with enterprise-grade security hardening, supply chain assurance, rapid CVE remediation and optional FIPS 140-3 cryptographic compliance.

As organisations scale up cloud native infrastructure for AI initiatives, the number of credentials, access tokens, and machine identities used across systems has increased dramatically, making secrets management a critical control in modern cybersecurity.

For many organisations, preventing breaches now depends on keeping one step ahead of malicious actors to protect sensitive data that sits at the heart of IT environments.

Andrew Martin, CEO of ControlPlane, said, “Modern infrastructure runs on secrets, machine identities, and credentials that allow systems to operate securely. If those secrets are exposed or poorly managed, attackers can move rapidly through an environment”.
“OpenBao represents an important step forward for the open source security ecosystem. With ControlPlane Enterprise for OpenBao, we are driving a modern secrets management platform with our years of experience with regulated organisations: offering enterprise-grade security, operational assurance, and the expertise to run it at massive scale.”

OpenBao is open source software that enables organisations to securely store and manage sensitive information, controlling who and what can access systems and data. As cloud environments grow more complex, secrets management is now viewed as a foundational security control.

ControlPlane’s founding engineer, Alex Scheel is OpenBao’s top contributor and former Technical Steering Committee Chair, having authored Vault’s core cryptographic layer at HashiCorp and deployed it for GitLab into their native Secrets Manager, validating its enterprise readiness.

Aiman Alsari, Head of Asia Pacific, ControlPlane said, “After a string of high-profile incidents last year, both across Asia Pacific and globally, the message from our customers is clear: protecting the keys to their infrastructure is fundamental to preventing a breach. That’s why we’ve packaged enterprise-grade support around the open source project, to give security and platform teams the flexibility and cost advantages of open source without taking on the full operational risk themselves.
“We’ve already had significant enquiries from organisations across banking, retail, government and finance, to name a few, and that interest tells us something important: teams are looking for practical, supported ways to harden the places attackers go after first.
“By combining an open source secrets manager with enterprise-grade technology, ControlPlane customers get the best of both worlds – agility and cost control, plus the confidence of vendor-backed operations. That combination is what’s driving the early momentum we’re seeing.”

ControlPlane’s Enterprise for OpenBao service includes secure architecture and configuration, integration with existing identity and security systems, operational runbooks, and ongoing product and implementation support from their global consultancy SMEs.

For more information visit www.control-plane.io/enterprise-for-openbao/

About ControlPlane

ControlPlane is a global specialist AI Security and DevSecOps consultancy. The company provides strategic advisory, architecture and implementation expertise across AI and data security, GitOps and continuous delivery, cyber resilience and threat assurance, cloud native transformation, and DevSecOps. ControlPlane works with organisations operating in complex, regulated environments to help them build, secure, and operate resilient, modern platforms.