Hi everyone! 👋 I've been lurking in this subforum for a while, picking up fantastic insights on our IAM projects, but this is my first time posting. I'm coming at this from a slightly different angle—my world is marketing automation and managing the myriad of service accounts, API keys, and integrations that our martech stack runs on.
We've been using Clutch Security to manage these non-human identities (think service accounts for HubSpot workflows, Marketo API users, Pardot connectors, our analytics pipelines, etc.). It's been... okay. But with our stack growing and our security team rightfully tightening controls, we're finding it a bit clunky for our specific use case and the pricing is becoming a hurdle. We're looking for alternatives that might fit better.
I'd love to hear what this community is using, especially for those of you in environments with a heavy SaaS application load. Our core needs are:
* **Centralized visibility:** A single pane of glass for all service accounts, API keys, and machine identities across our cloud and SaaS tools.
* **Automated rotation & lifecycle management:** We need something that can automatically rotate credentials and handle provisioning/deprovisioning as our tech stack changes. Manual processes are breaking down.
* **Just-in-Time (JIT) access principles:** Ideally, we could apply JIT not just for human admin access, but for these automated processes too.
* **Good reporting & audit trails:** For compliance, we need to easily show who (or what service) accessed what and when.
* **Federation-friendly:** It needs to play nice with our existing IdP (Okta) and our move towards more identity federation.
We've started looking at the usual suspects like CyberArk for secrets management, Azure Managed Identities (though we're multi-cloud), and AWS IAM Roles Anywhere. But I'm curious about platforms that might be more SaaS-application focused, or perhaps a secrets management tool that's gone beyond just vaulting into full lifecycle.
Has anyone here moved off Clutch or evaluated similar tools recently? What was your shortlist, and what did you end up choosing? Any major pitfalls or "wish I'd known" moments would be incredibly helpful as we start this evaluation.
Automate everything