Case Study: Paddy Power Betfair secures 1,000+ daily CI/CD deployments with HashiCorp Vault

How Paddy Power Betfair Secures 1000+ Daily CI/CD Deployments With Vault

Paddy Power Betfair, now part of Flutter Entertainment, needed to secure a large, complex CI/CD environment spanning two datacenters, around 600 hypervisors, about 11,000 VMs, and roughly 1,000 pipeline runs per day. To eliminate plaintext secrets across GitLab, Jenkins, and GoCD, the company turned to HashiCorp Vault for centralized secrets management and tighter control over deployment credentials.

HashiCorp implemented Vault with high availability across two datacenters, using Consul as the backend and integrating it into Paddy Power Betfair’s i2 automation framework. The team built custom Ansible and Chef integrations, AppRole-based token generation, and automated access control from CMDB data, enabling short-lived secrets and self-service workflows. The result was secure support for more than 1,000 daily deployments, over 100,000 tokens generated and revoked daily, and a scalable foundation for future dynamic secrets and certificate provisioning.

Paddy Power Betfair

Alexandru Dima

Application Security Architect