Conjur

What Conjur does

Conjur is an open-source secrets management and application identity platform designed for containerized and automated environments. It uses an identity-driven access control model to securely store credentials (API keys, tokens, certificates) and enforce policy-based Role-Based Access Control (RBAC) across tools, applications, containers, and cloud environments. Core technical components include a REST API, CLI, Ruby SDK, audit trails, native container authentication (using platform-native attributes such as Kubernetes/OpenShift identifiers), and a differentiated Secretless Broker that enables applications to consume resources without embedding raw credentials in code.

Conjur serves DevOps engineers and security operations teams running Kubernetes, OpenShift, and CI/CD pipelines, as well as multi-cloud enterprises that need centralized, consistent secrets policy across heterogeneous toolchains. It offers native integrations with Ansible, AWS (IAM Authenticator), Cloud Foundry, Jenkins, Kubernetes, OpenShift, Pivotal Cloud Foundry, Puppet, and Terraform.

The business model is freemium and open-source: Conjur Open Source is freely downloadable from conjur.org and GitHub, with self-service deployment and community support. Commercial revenue flows through the enterprise upgrade path to CyberArk Application Access Manager for DevOps, a subscription product sold via CyberArk's enterprise field sales force. Conjur is no longer an independent entity; it operates as an open-source project maintained by CyberArk Software Ltd., which has been acquired by Palo Alto Networks, placing Conjur within a much larger platform-security portfolio.

Name

Conjur

Legal name

CyberArk Software Ltd.

Website

https://conjur.com

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

11–50 employees

Short description

Conjur is an open-source, identity-driven secrets management platform for DevOps, SecOps, and multi-cloud/containerized environments, maintained by CyberArk (recently acquired by Palo Alto Networks) with an enterprise upgrade to CyberArk Application Access Manager.

Ownership category

akta.pro rank

Product category

Cloud Security Software

NAICS

Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD)

akta.pro secondary industries

Secrets Management & Credential Vaulting (HDADAAAJ), Secrets Management & Credential Security (HDADACAH)

Keywords

• Secrets management
• Application identity
• DevOps security
• Container security
• Privileged access management

Headquarters

HQ city

Newton

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Open Source Distribution: Conjur Open Source is freely available for download and use. The open-source version is community-supported with free access to core secrets management capabilities.
2. Conjur Enterprise / CyberArk Application Access Manager: Conjur Open Source can be upgraded to the enterprise version, CyberArk Application Access Manager for DevOps, containers and cloud, which is a commercial enterprise product with additional features, support, and enterprise capabilities.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels5 records

Core offering

Conjur provides an open-source secrets management platform that securely authenticates, controls, and audits non-human access to credentials (API keys, tokens, passwords) across tools, applications, containers, and cloud environments. It enforces identity-driven, policy-based Role-Based Access Control and offers a Secretless Broker so applications can consume secrets without embedding them in code. The open-source distribution can be upgraded to the commercial enterprise version, CyberArk Application Access Manager for DevOps, containers and cloud.

Product overview

Conjur is an open-source secrets management platform designed for containerized and automated DevOps environments. The core offering consists of the Conjur Open Source platform with integrated Secrets Management and Role Based Access Control (RBAC) capabilities, complemented by Secretless Applications for eliminating hardcoded credentials. The platform addresses DevOps Security challenges through solutions for CI/CD pipelines, Kubernetes, and container security. Conjur Enterprise offers an upgrade path to CyberArk Application Access Manager for DevOps, providing additional enterprise-grade features.

Differentiator

Problem solved

Functional benefit

Products and services

• Conjur Open Source Open-source secrets management platform providing identity-driven authentication, policy-based RBAC, and secure secrets distribution for tools, applications, containers, and cloud environments. Available for self-service download and deployment by developers and DevOps teams.
• Secrets Management Core solution that enables secure authentication, access control, and auditing of non-human identities across tools, applications, containers, and cloud environments. Addresses credential sprawl through centralized storage, policy-based RBAC, and audit logging.
• Role-Based Access Control (RBAC) Granular role-based access control system for consistently controlling access to secrets across dynamic infrastructure, enforcing security policies at the application and resource level with policy-as-code.
• Secretless Applications (Secretless Broker) Solution that enables applications to consume secrets without ever handling them directly, eliminating hardcoded credentials from application code and reducing the application-level attack surface.
• Conjur Enterprise (CyberArk Application Access Manager for DevOps) Enterprise version of Conjur that upgrades from the open-source edition to CyberArk Application Access Manager for DevOps, containers and cloud. Provides additional features, enterprise support, and advanced capabilities for DevOps, containers, and cloud environments.

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration9 records

Feature6 records

Partnerships

Ten partnerships are on record, tiered core.

• CyberArkcoreOEM/ Whitelabel/ Licensing PartnerConjur is an open-source project maintained by CyberArk Software Ltd. Conjur Open Source can be upgraded to CyberArk Application Access Manager for DevOps, containers and cloud - the enterprise commercial version. CyberArk acquired CyberArk (the company behind Conjur) in the broader consolidation trend in the identity security space.
• KubernetescoreTechnology or IntegrationNative integration with Kubernetes for strongly authenticating container requests for secrets using native container platform attributes and managing secrets with RBAC policy.
• AnsiblecoreTechnology or IntegrationNative integration with Ansible for securing Ansible automation with Conjur secrets management.
• JenkinscoreTechnology or IntegrationNative integration with Jenkins for securing CI/CD pipelines and removing hard-coded secrets from Jenkins workflows.
• AWScoreTechnology or IntegrationNative integration with AWS including AWS IAM Authenticator support for cloud-native secrets management.
• TerraformcoreTechnology or IntegrationNative integration with Terraform for managing infrastructure-as-code secrets securely.
• PuppetcoreTechnology or IntegrationNative integration with Puppet for configuration management secrets management.
• OpenShiftcoreTechnology or IntegrationNative integration with OpenShift for enterprise Kubernetes secrets management.
• Cloud FoundrycoreTechnology or IntegrationNative integration with Cloud Foundry for platform-level secrets management.
• Pivotal (Cloud Foundry)coreTechnology or IntegrationNative integration with Pivotal Cloud Foundry for enterprise platform secrets management.

Scale indicators1 record

Recent moves5 records

Expansion highlights4 records

Direct peers

• HashiCorp Vault: Open-source secrets management platform with policy-based access control and broad language SDKs. Vault is the most direct competitor to Conjur in the open-source, DevOps-focused secrets management category.
• Akeyless: SaaS-based secrets management and vaultless platform targeting DevOps and cloud-native workloads. Akeyless competes directly with Conjur Enterprise for enterprise secrets management deals.
• Doppler: Developer-focused secrets management platform with strong sync integrations to CI/CD, Kubernetes, and cloud infrastructure. Competes with Conjur for the same DevOps/SecOps personas.

Emerging players

• Infisical: Open-source secrets management platform with developer-first UX and self-hosting options. Targets the same DevOps secrets management use case as Conjur with a newer open-source community.
• 1Password (Developer / Secrets Automation): Password and secrets management platform with an emerging developer/SecOps automation tier. Adjacent rather than fully overlapping with Conjur, but competes for DevOps team budget for shared credential and secret management.

Broad incumbents

• AWS Secrets Manager: Hyperscaler-native secrets management service bundled into AWS environments. Competes with Conjur on the AWS portion of multi-cloud customers and serves as a default option that limits Conjur's wallet share.
• Microsoft Azure Key Vault: Azure-native secrets, keys, and certificate management service. Overlaps with Conjur for customers standardizing on Microsoft infrastructure for DevOps and container workloads.
• Google Secret Manager: GCP-native secrets management service integrated into Google Cloud IAM. Competes with Conjur on Google Cloud deployments and is bundled into existing cloud spend.
• CyberArk Privileged Access Manager: CyberArk's flagship privileged account security platform, which now houses the enterprise tier of Conjur (CyberArk Application Access Manager for DevOps). Overlaps with Conjur for human and non-human credential management in enterprises.
• Palo Alto Networks Prisma Cloud: Cloud-native application protection platform that includes secrets scanning and management capabilities. As PAN's parent of Conjur post-acquisition, Prisma Cloud is both a potential distribution channel and a competing portfolio offering.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights5 records

Customer concentration

• GitHubgithub.com/cyberark/conjur
• Xx.com/ConjurInc
• Facebookfacebook.com/conjurinc
• LinkedInlinkedin.com/company/3071019

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds2 records

Investors3 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Conjur