Case Study: Comcast Xfinity Mobile achieves scalable secret management with HashiCorp Vault

Scaling Security at Comcast Xfinity Mobile With Vault and Spring Cloud Config

Xfinity Mobile, Comcast, needed to scale security and configuration management as it grew from a monolith into an 80+ microservice cloud-native platform across five regions. To keep pace with rapid releases while protecting secrets and avoiding configuration drift, the team looked for a way to manage configuration as code without creating brittle dependencies.

HashiCorp helped Xfinity Mobile use Vault, first alongside Spring Cloud Config and then more tightly integrated with Spring Vault, to keep secrets out of Git while still supporting atomic config updates. The final approach let developers encrypt values for Git-based configs using a Vault-backed starter and runtime utility, reduced operational coupling to Vault, and improved resilience so services could keep running even if Vault was temporarily unavailable.

Xfinity Mobile,Comcast

Pankesh Contractor

Platform Architect