Authenticate and authorise every user and device in your enterprise with monitoring, threat tracking and reporting.
KeeperPAM secures and manages access to your critical resources, including servers, web apps, databases and workloads. As a cloud-native, zero-knowledge platform, KeeperPAM combines enterprise password management, secrets management, connection management, zero-trust network access and remote browser isolation in one easy-to-use interface.
The Keeper Vault protects all users in the organisation for complete coverage. Access is provisioned through consistent policies, and KeeperPAM integrates with all Identity Providers (IdPs) and network infrastructure.
With a zero-knowledge and zero-trust architecture, connections and tunnels established from Keeper to the target infrastructure are encrypted end-to-end.
Keeper's engineers are the original creators of Apache Guacamole and are experts in browser-based remote session protocols covering SSH, RDP, VNC, HTTPS, MySQL, PostgreSQL, SQL Server and more.
KeeperPAM uses a zero-trust gateway service to access each environment. No firewall updates or ingress changes are needed, thereby enabling seamless, secure access without complexity.
With Keeper’s remote session capabilities, the user never has access to the credentials or SSH keys.
Access to a resource can be time-limited, and credentials automatically rotate after access has been revoked.
Use your own SSH clients and database management tools like PuTTY, MySQL Workbench, Oracle SQL Developer, SQL Server Management Studio and pgAdmin with an added layer of protection.
Start a tunnel with one click and connect to localhost. Tunnels are end-to-end encrypted, ensuring zero-trust architecture and zero-knowledge security are preserved throughout the session.
KeeperPAM centralises access in a single UI across multiple cloud providers, on-premises workloads and client environments.
A Keeper Gateway service is deployed to each cloud provider region, ensuring that the customer is in full control of privilege.
Remote sessions can record screen and keyboard activity across all protocols including: SSH, RDP, VNC, databases and web browser sessions.
Establish a Multi-Factor Authentication (MFA) layer on cloud and on-prem infrastructure, including resources not natively supported by MFA.
Lock down service accounts across on-prem and cloud infrastructure.
Developers can finally improve security without friction from unnecessary network configurations.
KeeperPAM centralises access to systems and data with zero-trust security, enforcing role-based policies and MFA across all assets. Automated SCIM provisioning ensures that every user in your organisation is protected and Just-In-Time (JIT) access eliminates standing privileges.
Address many controls of compliance standards like FedRAMP, NIST 800-53, CMMC, SOC 2, ISO 27001 and HIPAA. KeeperPAM provides complete visibility with detailed logs, session recording and automated reports to ensure you have instant access to any data needed for audits.
KeeperPAM streamlines access to resources with developer-friendly features designed to enhance productivity without having to open ports or create bastion hosts. From APIs to open-source toolkits, engineers get the flexibility they need to work efficiently and securely.
Protect, discover, share and rotate passwords, passkeys and confidential data in a zero-knowledge vault with role-based access control, auditing and compliance.
Integrate CI/CD pipelines, DevOps tools, custom software and multi-cloud environments into a fully-managed, zero-knowledge platform to secure infrastructure secrets and reduce secrets sprawl.
Establish cloud and on-prem privileged sessions, create tunnels, power zero-trust infrastructure access and secure remote database access without a VPN.
Secure internal web-based applications, cloud apps and BYOD devices from malware, prevent data exfiltration and control browsing sessions with full auditing, session recording and password autofill.
Manages and deploys Keeper to users, integrates with identity providers, monitors activity and establishes role-based enforcement policies.
Orchestrates and monitors the various components and activities related to privileged access, session management, policies and workflow.
Keeper quickly and seamlessly integrates with your existing infrastructure and Identity and Access Management (IAM) stack to achieve enterprise-wide coverage and visibility.
Keeper charges per user, billed annually. See our pricing page for the packaging and pricing details.
The prior Keeper Connection Manager product was a fully on-prem, self-hosted solution. This new KeeperPAM platform is fully cloud-based and does not require the customer to install and host any applications. In this new model, the customer is only required to install the lightweight Keeper Gateway service to any cloud or on-prem environment. The Keeper Gateway only requires an outbound connection over port 443 to the Keeper Cloud. No ingress connections are required, which simplifies access control. All access to PAM capabilities is managed directly inside the Keeper vault.
Customers simply log in to the Keeper Vault from any web browser. Advanced capabilities such as tunneling and SSH agents require the native Keeper Desktop application. Keeper Desktop is available for Windows, macOS and Linux.
Yes, Keeper supports storing and managing passkeys in the vault, and customers can use a passkey to enforce MFA into the web vault or desktop application.
Yes, Keeper supports discovery of users, machines and infrastructure through the Keeper Commander CLI. The next version of KeeperPAM will support discovery from the vault user interface.
Yes, Keeper Secrets Manager is a component of KeeperPAM and provides automated password rotation of any type of service account across on-prem and cloud environments.
Yes, with Keeper's tunneling feature, any preferred tool can be used to connect to remote infrastructure with full end-to-end encryption through the Keeper Gateway to any target endpoint.
Yes, KeeperPAM doesn’t require a local installation and provides superior session recording for streamlined auditing and compliance compared to Island Browser. View the full comparison here.
Choose Language
