OpenBao gains enterprise traction as NVIDIA, SAP, and GitLab back open source secrets management. COMPANY NEWS: ControlPlane, a specialist Open Source, AI and Cloud Native Security consultancy, today announced that OpenBao has solidified as a serious enterprise option for secrets management as organisations look for more transparent and portable ways to secure access across cloud, artificial intelligence (AI) and software delivery environments. The open source fork of HashiCorp Vault is now being used or supported by some of the world's largest technology organisations, including NVIDIA, Broadcom, SAP and Gitlab, strengthening its position as a credible enterprise platform for secrets management. Secrets management protects the sensitive digital credentials that allow applications, systems and machines to access data and services. These include passwords, encryption keys, certificates and access tokens, which are becoming harder to govern as enterprise infrastructure grows more distributed and automated. The project is stewarded by the Open Source Security Foundation (OpenSSF). Rob Kenefeck, Field CTO at ControlPlane and Australian OpenSSF ambassador, said OpenBao's rise reflects the increasing complexity of modern cloud-native and AI-enabled environments. "Secrets management is now a core part of cyber resilience. Modern systems rely on it to connect applications, services and infrastructure. As cloud and AI environments become more complex, organisations need better visibility and control over how those secrets are created, stored, rotated and accessed," said Kenefeck. The growing interest in OpenBao shows that enterprise teams are taking open source security infrastructure more seriously, particularly where transparency, portability and operational control matter. NVIDIA's adoption aligns with the company's broader open source commitments, including the recent full open sourcing of its NVIDIA Cloud Functions (NVCF) platform. GitLab's 19.0 release uses OpenBao as the engine underpinning its new native secrets manager, and Broadcom has also integrated OpenBao into vSphere Supervisor as part of VMware Cloud Foundation (VCF) 9.0. With continued investment in AI, cloud and data centre infrastructure, Australian enterprises are facing stronger governance demands around the credentials, keys and machine identities that sit behind modern digital systems. Kenefeck said the move towards open source secrets management should not be seen as a simple technology substitution, but as part of a broader shift towards more transparent and resilient security operations. ControlPlane launched Enterprise for OpenBao, driven by support services adoption across Australia earlier this year and recently appointed Alex Scheel as Head of OpenBao Development, further strengthening the company's expertise in enterprise-scale secrets management and cloud-native security operations and positioning ControlPlane in the global market. Scheel is the OpenBao Development Working Group chair and a former OpenBao Technical Steering Committee chair with deep experience across open source cryptography, HashiCorp Vault and enterprise secrets management. His appointment connects ControlPlane's enterprise support capability with the technical leadership, helping shape OpenBao's development. "Secrets management has never been more critical with the explosion of agentic identities, and the OpenBao community is where serious secrets management work is happening right now. I'm excited to be joining ControlPlane to help organisations across the region and the globe get this right, said Scheel. "When major technology providers begin building around open source infrastructure, it gives the wider market confidence that these platforms are mature, credible and ready for serious operational environments," he continued. ControlPlane's Enterprise for OpenBao provides organisations with migration planning, secure architecture and configuration, integration with existing identity and security systems, and ongoing technical support. About ControlPlane ControlPlane is a specialist open source security and cloud-native consultancy supporting organisations across APAC. The company provides advisory, implementation and managed services across secrets management, Kubernetes security and modern infrastructure platforms, with a secure-by-design, secure-by-default approach.

Introducing CPX Connect: The next step in supporting modern technology organizations. Published on July 22, 2026 ControlPlane exists to help organisations solve modern technology's most complex challenges. By enabling its clients to succeed with Cloud Native technologies, Kubernetes, AI, and Open Source platforms, with the steel thread of Cybersecurity woven throughout, Control Plane Limited is passionate that teams design, secure and scale resilient technology environments. Control Plane Limited understand that successful delivery outcomes depend on more than just technical strategy. They require experienced professionals with specialist skills, high EQ, and deep expertise, capable of turning ideas into effective, sustainable, and secure solutions. That insight has led to the launch of CPX Connect, ControlPlane's specialist technology and executive search business, and an extension of its obsession with its customers' success. A natural extension of what Control Plane Limited do. With such complex consulting engagements and training programmes, Control Plane Limited intrinsically understand the talent and expertise required to build effective technology teams. CPX Connect expands the ways Control Plane Limited can help technology organisations succeed by combining ControlPlane's deep technical insight with a specialist capability focused on identifying and securing exceptional technology talent. Its consultants screen and interview candidates to maintain the exceptional quality standards to which Control Plane Limited hold ourselves accountable. Through this symbiosis, ControlPlane and CPX Connect provide complementary capabilities, solving the most complex of technology challenges through its consulting expertise, while helping organisations nurture and grow the specialist teams required to execute their long-term strategies. A new capability for the ControlPlane Group. ControlPlane's consulting services remain at the heart of its work, delivered by outstanding consultants that enshrine its values and reputation for deep technological delivery, practical systems insight, and a security-first mindset to help its most regulated clients succeed. CPX Connect complements this core expertise by helping organisations identify and secure the specialist technology leaders and professionals needed to build long-term capability and sustain the vision delivered by ControlPlane teams. As a trusted technology partner, CPX Connect supports its existing clients in their expansive delivery programmes, expands on its relationships with new organisations, and helps passionate technology professionals shape the future of the industry. Control Plane Limited is incredibly proud of the team behind this launch and excited for the opportunities and shared successes ahead. ControlPlane CEO Andrew Martin on the launch of CPX Connect. As a highly-specialised and SME-led services company, Control Plane Limited often train and cultivate the teams Control Plane Limited collaborate with to enshrine its next-generation patterns and practices. With CPX Connect, Control Plane Limited can now bring that long-term culture of excellence to its customers far beyond its engagement scope, providing continued support and insight through its extended network of global talent. - Andrew Martin, CEO