Story
NVR Standardizes Developer Security on HashiCorp
NVR, a consumer discretionary organization in the United States, uses Vault from HashiCorp to support secure delivery for developers and AppSec.
Vault sits in the daily path at NVR, especially for developers and AppSec.
“Consumer Discretionary work at NVR spans more than one site, even when headquarters sits in the United States.”
“Developers and AppSec asked for a shared way to run secure delivery without freezing local judgment.”
Independent write-up. Figures come from public sources or are illustrative.
Value results
| Category | Value result |
|---|---|
| Risk and compliance | Vault is the governed place developers and AppSec use for secure delivery |
| Risk and compliance | Fewer stalled items because developer security has a clear owner |
| Capability | New joiners can see how secure delivery actually runs |
Story
Consumer Discretionary work at NVR spans more than one site, even when headquarters sits in the United States. Developer security was splitting across regional habits. Developers and AppSec asked for a shared way to run secure delivery without freezing local judgment.
HashiCorp (Vault) is what they standardized on. HashiCorp (an IBM company) provides infrastructure automation software, including Terraform and Vault, for cloud provisioning and secrets. NVR uses it as the system of record for developer security, with developers and AppSec as the primary operators and other groups coming in through the same queue.
Leaders get a picture they can actually walk. Teams get fewer mystery statuses. The story is about operating change, not an unpublished percentage.