Game time

The pioneer in online gaming uses HashiCorp Vault to enhance security, availability, and performance across a global gaming platform.

고객 사례 다운로드

141 million unique players over consoles and PC in FY21
Highly distributed across 7 regions
Reduced risk of breach due to secrets exposure
500+ active entities accessing Vault secrets per day
1000s of applications
Improved security posture by adopting secrets management best practices

Founded in 1986, Paris-based Ubisoft’s 20,000 global team members, working across more than 30 locations around the world, are bound by a common mission to enrich players’ lives with original and memorable gaming experiences. The company is the publisher of many acclaimed video game franchises such as Assassin’s Creed, Rainbow Six, Far Cry, Watch Dogs, Rayman, and Just Dance.

When we were looking for a solution, one of the things we really cared about was extensibility, and Vault really shines on this. It's really pluggable, with the ability to develop custom auth engines and secrets engines, which means the runway is unlimited.

- Anthony Ralston, Senior Software Engineer, Cloud Security, Canva

Canva is a global online visual communications platform on a mission to empower the world to design. Used by over 90% of Fortune 500 companies across 190 countries, Canva stands out as the leader in accessible, user-friendly graphic design solutions.

As a SaaS company serving both B2B and B2C clients, Canva relies on numerous APIs, databases, and services that require secure management of access credentials. The sheer scale of its customer base (over 170 million monthly users) demands a sound infrastructure that can support millions of monthly secret reads.

Secrets used to be sprawled across multiple stores, compromising visibility and multiplying security risks. This decentralized approach to secrets management created significant manual overhead that made scaling IT operations challenging.

To address this, Canva implemented HashiCorp Vault to centralize and automate secrets management. It took an iterative approach and started by migrating its build systems to Vault, integrating a custom authentication plugin for Buildkite agents using OIDC. This ensured agents had short-lived, pipeline-specific access to secrets, significantly enhancing security posture. Following this success, Canva expanded Vault usage to its backend systems, seamlessly migrating 80% of them. Vault currently vends secrets for two million builds a month and fields two million secret reads for Canva backends.