DigiNews

Tech Watch by Johan Denoyer

← Back to articles

Keeper – embedded secret store for Go

Quality: 8/10 Relevance: 9/10

Summary

Keeper is a Go-based secret store offering embedded and HTTP-accessible secret management with multi-level key derivation and envelope encryption. It supports four security levels (password-derived, admin-wrapped, HSM/Remote, and remote KMS), auditable and tamper-evident audit chains, and crash-safe rotation. The project includes a Go library, an HTTP handler, and a CLI, plus optional Jack integration for background tasks.

🚀 Service construit par Johan Denoyer