SecureIQ

Secret discovery and management for migrations.

Overview

SecureIQ helps you manage secrets during migrations:

• Discovers all secrets without reading values
• Classifies secrets by type and criticality
• Maps dependencies between secrets and services
• Generates migration checklists
• Validates compliance requirements

Commands

Scan

# Discover secrets from infrastructure scan
infraiq secureiq scan \
  --provider heroku \
  --input scan.json \
  --output secrets.yaml

Audit

# Check compliance requirements
infraiq secureiq audit \
  --manifest secrets.yaml \
  --framework soc2

Checklist

# Generate migration checklist
infraiq secureiq checklist \
  --manifest secrets.yaml \
  --target aws \
  --output checklist.md

Validate

# Validate migration readiness
infraiq secureiq validate \
  --manifest secrets.yaml \
  --migration-plan plan.json

Secret Types

Privacy

!!! note "Zero Data Access" SecureIQ never reads secret values. It only analyzes metadata, variable names, and patterns to classify secrets.

Next Steps

• MigrateIQ — Use with migrations
• ComplyIQ — Compliance validation