HashiCorp Vault
Secrets management with short-lived credentials and encryption as a service.
Data Protection
Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
Addresses 146 stories in our coverage in the last 90 days 4 products that provide it
What it is
Encryption of data at rest and in transit, with keys kept in hardware security modules or key management services, and every use of a key logged.
How to value it
If stolen data is properly encrypted and the keys were not taken, the incident is far less serious, and under GDPR the affected people may not even need to be told. Holding your own keys also answers sovereignty questions about data in the cloud.
Questions to ask a vendor
- 1Can we hold our own keys for cloud services (BYOK or HYOK)?
- 2Is the hardware certified, for example FIPS 140-3 or Common Criteria?
- 3How are keys rotated, and who can use them?
- 4What is the plan for post-quantum algorithms?
For your risk register
- Risk
- Exposure of sensitive data at rest or in transit.
- Control
- Encryption with centrally managed keys whose use is logged.
- Owner
- Security architect.
- Measure
- Share of sensitive data stores encrypted with managed keys.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
CipherTrust Data Security Platform
Data discovery, encryption and central key management across on-premises and cloud.
Thales Luna HSM
Hardware security modules for protecting cryptographic keys.
Utimaco General Purpose HSM
Hardware security modules for key generation, storage and cryptographic operations.
Recent stories it addresses
728 stories in total- 16 Oct 2026Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor
Attackers tampered with AOMEI Backupper update servers to deliver a backdoor.
- 16 Oct 2026Burger King Japan data breach exposes 11 million customer records
Burger King Japan data breach exposes 11.18 million customer records.
- 16 Oct 2026AEPD (Spain) - PS/00194/2025
Spain's AEPD fines Vodafone Spain €400,000 for data breach due to unmitigated vulnerability.
- 15 Oct 2026Vibetech Database Exposes 13.7M Records Including AT&T and FBI Data
Vibetech database exposed 13.7M records from previous breaches, including AT&T and FBI data.
- 15 Oct 2026UK Legal Aid Agency Hack Scope Widens After Forensic Review
UK Legal Aid Agency hack impacts records dating back to 1978.
- 15 Oct 2026CenterPoint Energy Data Breach Impacts 1 Million Texans
CenterPoint Energy data breach exposes personal information of over 1 million Texans.
- 15 Oct 2026UK Legal Aid Agency: Hackers stole records dating back to 1978
UK Legal Aid Agency confirms hackers stole records dating back to 1978 in April 2025 breach.
- 14 Oct 2026Garante per la protezione dei dati personali (Italy) - 710/2026
Italy's DPA fines IQVIA €7M for GDPR violations after patient data breach.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.