Secure your infrastructure with a zero-trust remote access solution.

Keeper Connection Manager provides teams with instant access to remote desktops, servers, databases and critical web applications through a web browser.

Request a Demo Try Now

Built by the creators of the Apache Guacamole platform

Securely access any system or device without a VPN

Keeper Connection Manager is an agentless gateway that can be installed in any on-prem or cloud environment.

Agentless and clientless

Lightning-fast and responsive

Simple access controls

Keeper Connection Manager's core features

RDP, SSH, K8s and VNC desktop protocols
Multi-user session sharing
MySQL, PostgreSQL, SQL Server database connections
Role-based access controls
Remote Browser Isolation for protecting web apps
Two-factor authentication
Accessible from mobile devices
SSO, Active Directory, LDAP and PIV/CAC integration
Optional session and keystroke recording
Custom branding

Easy to implement

No special client to install, no plugins and absolutely no concurrency limits.

1. Setup

Run the container on your network on-prem or in the cloud

2. Connect

Easily connect from anywhere using your web browser

3. Integrate

Works with multiple protocols and third-party systems

Keeper Connection Manager provides seamless admin control

Enable least privilege with role-based access controls
Enable and access session recordings for security and compliance
Integrate directly with Keeper Secrets Manager to retrieve session credentials directly from the Keeper Vault
Quickly deploy to users and groups with SSO, Active Directory and LDAP integration
Deploy as a container to any Docker environment
Receive reports and alerts about connection activity and integrate directly with any SIEM platform

Why leading organizations choose Keeper Connection Manager

Nothing to install

Accessing a machine or web app is just one click. No special plugins or client software to install.

User friendly

Simple, fast and intuitive user interface that is compatible with all web browsers.

Simplified auditing

Session recording with points of interest to quickly and easily identify where activity occurred during sessions.

Co-browsing sessions

Share active sessions with other users for ultimate collaboration.

Rapid deployment

Flexible installation options using Docker on any on-prem or cloud environment. Seamless authentication with SSO, AD and LDAP.

Network isolation

Keeper Connection Manager can be deployed to air-gapped environments to support the most strict network security requirements.

Works on mobile

Supports iOS and Android web browsers on mobile and tablet devices with all capabilities including RDP, Database and SSH sessions.

Responsive support

Business customers receive dedicated training and 24/7 support.

Remote Browser Isolation

Keeper’s Remote Browser Isolation is a zero-knowledge approach to isolating web browsing activities from BYOD end-user devices.

Zero-knowledge security: Experience true privacy with browser sessions that carry no customer data
Secure and simplified web browsing: Access internal and external sites securely, without data exposure risks if a device is compromised
Autofill credentials: Integrate with Keeper's password manager for seamless autofill without exposing credentials to the user
Enhanced compatibility and security: Access websites through an up-to-date Chromium browser, regardless of the user's local browser version

Learn More

Trusted by millions of IT professionals

Keeper Connection Manager was built by the creators of Apache Guacamole, which has more than 10 million users.

Resources

Blogs

Datasheets

Frequently asked questions

How do I install Keeper Connection Manager?

Keeper Connection Manager can be installed on any Windows, Linux or Cloud environment that runs Docker containers. Instructions can be found here.

What protocols are supported?

RDP, SSH, Remote Browser Isolation (HTTP/HTTPS), VNC, Telnet, Kubernetes, MySQL, PostgreSQL, Microsoft SQL Server.

Is multi-factor authentication available?

Yes, Keeper Connection Manager supports Duo or TOTP for MFA. If you are using an SSO such as Entra ID (Azure) or Okta, multi-factor authentication can be activated on the identity provider.

Do users need to install anything on their client machines?

No, all that is required for users is a web browser and an internet connection. Keeper Connection Manager is a solution that is clientless and agentless.

Do users have access to my entire network when they authenticate?

No. Keeper Connection Manager utilizes the principle of least privilege. Users will only have access to connections that have been explicitly granted to them by the administrator.

Is there a way to avoid hard-coding the connection credentials inside Keeper Connection Manager?

Yes. Keeper Connection Manager integrates directly with Keeper Secrets Manager, allowing administrators to configure connections on the server and store the credentials in Keeper’s encrypted Vault.

How do I migrate from Apache Guacamole to Keeper Connection Manager?

Keeper Connection Manager’s packages use the same configuration files and database schema as upstream, so you can simply replace your deployment by transferring over the same data and copying your configuration. Additionally, if Keeper Connection Manager was installed using the RPMs, previously existing Keeper Connection Manager packages for any extensions will also need to be installed.