Fortanix Data Security Manager vs SAP Data Custodian Key Management Service

Fortanix Data Security Manager (DSM) gives DevOps and security teams a way to manage secrets, credentials, certificates, API keys and tokens outside source code. Secrets management can run on-premises, in the cloud, or across hybrid and multicloud environments. DSM provides REST APIs and supports standards and technologies including OAuth, OpenID (SAML), LDAP, JWT, PKI, Kubernetes and Docker.

Documented CI/CD integrations include HashiCorp Vault, Kubernetes Secret Store CSI Driver, Ansible, Jenkins, GitHub, GitLab, CyberArk, Delinea and Azure DevOps. Fortanix says the service stores secrets in a FIPS 140-2 Level 3 certified HSM and uses Intel SGX and Runtime Encryption technology. Role-based access controls, safeguards against unauthorized password changes, simultaneous-login alerts and audit logs support access oversight. Listed certifications include FIPS 140-2 Level 3, PCI-DSS, ISO 27001, CIS and SOC 2 Type 2. The DSM SaaS trial includes the full feature set for 30 days at free, with no credit card required to start. No numeric Enterprise price is listed.

SAP Data Custodian Key Management Service is a cloud service accessed through the web for managing cryptographic keys. It supports three listed key types: AES, RSA, and ECC. Automated key rotation changes keys according to the service’s rotation capability, while key audit logs provide records of key-related activity. The service supports external key control and also lists a combined external-and-other control option, giving organizations more than one way to handle control of keys. Its deployment model is cloud, and its platform is web. SAP sells the service on a paid basis. Pricing is available on request, and no free plan is listed. Organizations can use the service as a web-based cloud option when AES, RSA, or ECC management, rotation, control choices, and audit logging are requirements.