This release 1.25.18+ introduces the integration with data masking with Google Data Loos Prevention. What Is this Integration It allows redacting content from a MongoDB database in realtime when accessing the database with any mongo client. Getting Started Create a MongoDB database and enable the data masking with

The release 1.24.6+ introduces integration with HashiCorp Vault. What Is Vault Integration It allows obtaining credentials securely from a Key Value secrets engine when interacting with Connections on Hoop. Getting Started with Vault Integration Create a Postgres database Connection on Hoop mapping the secret from a KV Version

In release 1.21.13+, we are introducing integration with the MongoDB protocol. You can now connect using your preferred IDE. This integration serves as a proxy for a MongoDB instance, offering auditing capabilities, single sign-on authentication, and TLS offload. Configuring Let's establish a connection! Ensure you deploy your agent

This blogpost is part 1/3 and I'll be showing how Hoop integrates seamless with major cloud platforms like Heroku, AWS and Kubernetes. Beginning from version 1.14.11+ we have shipped a new way of getting started with the agent setup on Heroku. Using our custom buildpack and editing

In this release (v1.11+) we're introducing time based sessions. It allows a user to request access to a connection during certain period. Let's try this out, first create a connection and configure the review plugin hoop admin create plugin review hoop admin create conn bash \ --plugin 'review:admin' \ --agent

I'm happy to announce that we have native integration with slack for reviewing connections (v1.10+). After enabling and configuring, it's possible to approve a time based connection or an one off execution directly from slack. In practice, when a user tries to execute a task with a review: hoop

We've launched a plugin that allows injecting secrets directly into a session, this allow administrators to have a more secure setup when provisioning credentials. This plugin have two options: * Derived secrets from environment variables inside an agent * Derived secrets from AWS secrets manager The pre-requisite is that secrets are encoded

This release (v1.7.5+) brings an experimental client for administrators to interact with api resources. The goal is having an alternative client for more advance uses like automating the creating of connections or agents, configuring credentials, etc. To view the list of connected agents: $ hoop admin get agents NAME

This release (v1.7+) we're introducing mysql native passwordless connections. This new type of connection allows connecting to a database with any mysql client, from IDE's to applications. System administrators have the capability of configuring database credentials without having to expose to end users. To begin it's very easy: # start

This release (v1.3.8+) automatically index the last 45 days of sessions. The job runs at 23h30 UTC daily and the plugin indexer must be installed and enabled for connections. Check it out our documentation for more information.

This release (v1.3+) introduces a plugin to index sessions of users and an API to search through it contents. This plugin allows more power in auditing and discover how users are interacting with internal services. Let's say as an administrator that you want to search for the keyword migrate

This release (v1.2+) introduces runbooks, which are templates that could be run against a connection runtime. With this release, any client could build input types based on a template obtained from a git source. # fetch-customer.runbook.sql SELECT firstname, lastname FROM customers WHERE customerid = {{ .customer_id | squote }} When this

This release introduces plugin hooks, which are standalone go applications leverage by go-plugin. Plugins Hooks are used to extend the functionalities of hoop, a plugin developer can: * Mutate the connection environment variables of a session dynamically * Mutate the connection client args of a session dynamically * Mutate the connection command of