HeyGen streamlines security for hypergrowth with Infisical
HeyGen, the leader in AI-generated videos, helps over 70,000 companies create, localize, and personalize videos at scale. As their team rapidly expanded, they partnered with Infisical to implement robust secrets management with advanced access controls.
Looking to improve your secret management processes?Talk to an expert
We chose Infisical because of its developer-friendly UI, robust access controls, approval workflows, and a wide range of integrations, as well as team’s quick response time to any issues and requests— Eddy, R&D Engineer
Challenge
As HeyGen rapidly grew to serve over 70,000 customers with AI-powered video solutions, their infrastructure team faced several key challenges:
- Scalable Secrets Management: HeyGen's rapid growth made their existing secrets management solution insufficient for their expanding needs.
- Robust Access Control Requirements: As their organization scaled, they needed more sophisticated access control mechanisms beyond what basic solutions offered.
- Developer Experience: With their engineering team tripling in size over six months, HeyGen needed to streamline the onboarding process and improve developer workflows.
Solution
After evaluating several solutions, HeyGen chose Infisical Cloud for its comprehensive secret management platform with enhanced security features:
- Robust Access Controls: They implemented attribute-based access control (ABAC), access requests, and approval workflows for sensitive environments – capabilities that were critical for their security requirements.
- Temporary Access: For highly sensitive environments, HeyGen utilized Infisical's temporary access features to implement just-in-time access, enhancing security for critical systems.
- Infisical CLI: HeyGen engineers transitioned from using .env files to Infisical CLI for local development, eliminating the security risks of storing secrets locally while keeping secrets in sync across the team.
- Kubernetes Operator: For their AWS EKS infrastructure, HeyGen leveraged Infisical's Kubernetes operator with auto-redeploy functionality, ensuring applications always run with the latest secrets.
Results
Implementing Infisical has delivered significant benefits to HeyGen's infrastructure and development teams:Enhanced security postureBy utilizing Infisical with AWS KMS, HeyGen achieved robust encryption security that complies with their security standards. The sophisticated access control features, including temporary access and approval workflows, have significantly minimized security risks across their infrastructure.Streamlined developer workflowsTransitioning from .env files to Infisical CLI has transformed HeyGen's local development process:
- Synchronized secrets: Developers now work with consistent, up-to-date secrets across the team, eliminating configuration drift and related troubleshooting.
- Secure access controls: Access controls are enforced consistently whether accessing secrets through the web dashboard, CLI, or infrastructure integrations.
- Automated deployments: The Kubernetes operator with auto-redeploy capability ensures applications are always running with the most current secrets configuration.
Seamless team scalingAs HeyGen's engineering team tripled in size over six months, Infisical played a crucial role in their onboarding process:
- Efficient onboarding: New engineers get immediate access to the secrets they need through Infisical's integration with Okta IdP.
- Self-service access: Engineers can request access to specific environments through structured workflows rather than requiring manual intervention from security teams.
- Secure offboarding: When engineers leave the organization, their access is immediately revoked across all systems.
With Infisical's comprehensive platform, HeyGen now has a robust secrets management foundation that will scale with their business. The ability to integrate with various systems provides the flexibility they need as they continue to expand their infrastructure to support their hypergrowth trajectory.
Starting with Infisical is simple, fast, and free.
PRODUCT
CONTACT