Bella Baxter is a single control plane for non-human identities. It sits as a gateway over the vaults you already run — without storing a single secret itself — and replaces static credentials with short-lived, auditable access.
Three forces compound: non-human identity sprawl, vault fragmentation, and a regulatory clock already running.
For every developer, between 45 and 144 service accounts, tokens and keys exist in production. Credential growth has rapidly outpaced the controls designed to manage them.
Most modern stacks juggle four or more vaults — AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, OpenBao — without a common management plane.
DORA applies directly to financial entities — insurers included — since 17 January 2025, with no grace period. NIS 2 is a directive still in transposition; in Spain, not yet national law. The window to prepare is still open.
Toggle the two states. The number of moving parts stays the same — what changes is the topology.
Bella Baxter does not add another vault. It removes the work between the ones you already have.
Acts as a gateway over your existing vaults. Bella Baxter never stores a secret itself — it brokers access and writes the audit trail.
Uses OIDC and TrustDomains to replace static credentials with short-lived, auto-expiring access. The blast radius of a leak shrinks to minutes.
Integrates Model Context Protocol (MCP) so agents request secrets through a policy-checked, signed, and fully auditable interface.
Same surface area. Different posture.
| Dimension | Traditional management | With Bella Baxter |
|---|---|---|
|
01
Visibility
|
Fragmented & manual
Each vault has its own console, exports and access logs. Engineers reconstruct the picture by hand. |
Unified, real-time
One inventory of identities, one policy view, one stream of access events — across every vault. |
|
02
Audit trail
|
Reactive & reconstructed
Audits assembled post-hoc from disjoint logs. Hard to attest to integrity or completeness. |
End-to-end signed HMAC
Every secret request is signed at the source. Continuous, tamper-evident chain of custody. |
|
03
Secret life
|
Infinite TTL · manual rotation
Long-lived keys rotated on calendars (or forgotten). Each one a standing risk on the balance sheet. |
Ephemeral & automatic
Credentials issued on demand, expire by default. Rotation becomes an attribute, not a project. |
Bella Baxter is the control plane cosmicchimps uses for itself — and the one we deploy with our clients. Let's build IT together!