Authenticate and authorise every user and device in your enterprise with monitoring, threat tracking and reporting.
KeeperPAM secures and manages access to your critical resources, including servers, web apps, databases and workloads. As a cloud-native, zero-knowledge platform, KeeperPAM combines enterprise password management, secrets management, connection management, zero-trust network access and remote browser isolation in one easy-to-use interface.
Keeper Discovery empowers DevOps, IT Security and software development teams with centralised visibility into all privileged accounts and IT assets across local infrastructure, AWS and Azure environments.
By deploying the Keeper Gateway, organisations can automatically discover and catalog machines, databases, directories, accounts and credentials, importing them into the Keeper Vault as managed resources.
The Keeper Vault protects all users in the organisation for complete coverage. Access is provisioned through consistent policies, and KeeperPAM integrates with all Identity Providers (IdPs) and network infrastructure.
With a zero-knowledge and zero-trust architecture, connections and tunnels established from Keeper to the target infrastructure are encrypted end-to-end. Public sector organisations can protect Operational Technology (OT) environments to help meet CISA's stringent requirements.
Keeper's engineers are the original creators of Apache Guacamole and are experts in browser-based remote session protocols covering SSH, RDP, VNC, HTTPS, MySQL, PostgreSQL, SQL Server and more.
KeeperPAM uses a zero-trust gateway service to access each environment. No firewall updates or ingress changes are needed, thereby enabling seamless, secure access without complexity.
With Keeper's remote session capabilities, the user never has access to the credentials or SSH keys.
Access to a resource can be time-limited, and credentials automatically rotate after access has been revoked. KeeperPAM supports ephemeral account provisioning and dynamic role or group elevation to deliver just-in-time access without standing privileges. Users can also connect using their own private credentials, be issued temporary credentials with post-session rotation or access resources through connection templates, all while using native tools.
KeeperAI brings real-time, AI-powered monitoring and threat detection to privileged sessions, automatically analyzing user activity, detecting risk and terminating sessions when suspicious activity is detected.
Security teams gain instant visibility into insider threats, eliminate manual session log reviews and reduce false positives, all within Keeper's zero-knowledge architecture.
Use your own SSH clients and database management tools like PuTTY, MySQL Workbench, Oracle SQL Developer, SQL Server Management Studio and pgAdmin with an added layer of protection.
Start a tunnel with one click and connect to localhost. Tunnels are end-to-end encrypted, ensuring zero-trust architecture and zero-knowledge security are preserved throughout the session.
KeeperPAM centralises access in a single UI across multiple cloud providers, on-premises workloads and client environments.
A Keeper Gateway service is deployed to each cloud provider region, ensuring that the customer is in full control of privilege.
Remote sessions can record screen and keyboard activity across all protocols including: SSH, RDP, VNC, databases and web browser sessions.
Establish a Multi-Factor Authentication (MFA) layer on cloud and on-prem infrastructure, including resources not natively supported by MFA.
Lock down service accounts across on-prem and cloud infrastructure.
Developers can finally improve security without friction from unnecessary network configurations.
KeeperPAM centralises access to systems and data with zero-trust security, enforcing role-based policies and MFA across all assets. Automated SCIM provisioning ensures that every user in your organisation is protected and Just-In-Time (JIT) access eliminates standing privileges.
Address many controls of compliance standards like FedRAMP, NIST 800-53, CMMC, SOC 2, ISO 27001 and HIPAA. KeeperPAM provides complete visibility with detailed logs, session recording and automated reports to ensure you have instant access to any data needed for audits.
KeeperPAM streamlines access to resources with developer-friendly features designed to enhance productivity without having to open ports or create bastion hosts. From APIs to open-source toolkits, engineers get the flexibility they need to work efficiently and securely.
Protect and securely share passwords, passkeys and confidential data in a zero-knowledge vault with role-based access control, auditing and reporting.
Integrate CI/CD pipelines, DevOps tools, custom software and multi-cloud environments into a fully-managed, zero-knowledge platform to secure infrastructure secrets and reduce secrets sprawl.
Provide secure, credential-free access to sensitive systems while maintaining full visibility and control over privileged sessions.
Secure internal web-based applications, cloud apps and BYOD devices from malware, prevent data exfiltration and control browsing sessions with full auditing, session recording and password autofill.
Achieve zero standing privileges and enable Just-in-Time (JIT) access across all Windows, Linux and macOS endpoints, with optional approval workflows and MFA enforcement.
Streamline deployment, user provisioning and policy enforcement through a centralised admin interface that seamlessly integrates with your existing identity stack.
Keeper quickly and seamlessly integrates with your existing infrastructure and Identity and Access Management (IAM) stack to achieve enterprise-wide coverage and visibility.
Keeper charges per user, billed annually. See our pricing page for the packaging and pricing details.
The prior Keeper Connection Manager product was a fully on-prem, self-hosted solution. This new KeeperPAM platform is fully cloud-based and does not require the customer to install and host any applications. In this new model, the customer is only required to install the lightweight Keeper Gateway service to any cloud or on-prem environment. The Keeper Gateway only requires an outbound connection over port 443 to the Keeper Cloud. No ingress connections are required, which simplifies access control. All access to PAM capabilities is managed directly inside the Keeper vault.
Customers simply log in to the Keeper Vault from any web browser. Advanced capabilities such as tunneling and SSH agents require the native Keeper Desktop application. Keeper Desktop is available for Windows, macOS and Linux.
Yes, Keeper supports storing and managing passkeys in the vault, and customers can use a passkey to enforce MFA into the web vault or desktop application.
Yes, Keeper Discovery identifies privileged accounts, machines, databases and identities across local, AWS and Azure environments. These assets can then be imported into the Keeper Vault as managed resources. To learn more, visit our Keeper Discovery documentation.
Yes, Keeper Secrets Manager is a component of KeeperPAM and provides automated password rotation of any type of service account across on-prem and cloud environments.
Yes, with Keeper's tunneling feature, any preferred tool can be used to connect to remote infrastructure with full end-to-end encryption through the Keeper Gateway to any target endpoint.
Yes, KeeperPAM doesn’t require a local installation and provides superior session recording for streamlined auditing and compliance compared to Island Browser. View the full comparison here.
You must accept cookies to use Live Chat.