HTTP 200 verified twice
Cybersecurity · Tool
Keeper Security
ResearchedKeeper Security provides a zero-trust, zero-knowledge unified control plane for privileged access, secrets, remote connections, endpoints and databases. It is FedRAMP High Authorized, FIPS 140-3 validated, and offers developer SDKs, AI-driven session monitoring, and AWS-hosted multi-region deployments.
Official site snapshots
Visit live site See the official site at a glance
Read-only public captures of Keeper Security’s homepage. Screenshots are dated, never live embeds, and open full-screen.
1 earlier capture
In one minute
Start here for the decision-making essentials: what Keeper Security does, who it is for, how it is accessed, and the first-party sources behind this profile.
PricingCurrent signal
KeeperPAM volume-based tiers: Tier 1 (25-99 NHIs, 5,001-25,000 workloads), Tier 2 (100-249
Platforms
Web
API accessNot public
FoundedNot disclosed by source
AvailabilityWeb / remote
LicenseKeeper Marks are registered trademarks of Keeper Security, Inc. (e.g., Keeper®, KeeperPAM®
Best suited to
Source-backed fit Federal agencies requiring FedRAMP High and GovRAMP High authorization Enterprises seeking unified privileged access, secrets and connection… DevOps and engineering teams managing infrastructure secrets across CI/CD… Organizations needing agentless Zero-Trust Network Access to RDP, SSH and… Teams building AI workflows requiring secure vault access via the Model… Multi-region AWS customers needing isolated data residency
Decision support
6 sourced answersCommon questions and adoption checks
Short answers to the questions buyers and builders commonly ask about Keeper Security. Each answer cites the shared ledger below, where every source is listed once.
01What does Keeper Security say it can do?
Unified control plane for privileged access, secrets, remote connections, endpoints and da · Keeper Secrets Manager supports SDKs in Java/Kotlin, JavaScript, Python, .NET, Go, Ruby an · Keeper SSH Key Management stores SSH keys encrypted in the Keeper Vault and loads them dyn · Keeper Secrets Manager supports secure secret access for AI agents via the Model Context P
Keeper ® is the unified control plane for privileged access, secrets, remote connections, endpoints and databases – all in a single zero-trust platform.
02Who is Keeper Security intended for?
Millions of consumers and businesses, including family plan members, business/enterprise u · Federal Government (Public Sector)
Millions of consumers and businesses trust Keeper to secure and access their passwords and private information.
03What use cases does Keeper Security describe?
Keeper Enterprise Password Management (EPM) gives businesses visibility and control over e · Keeper Secrets Manager (KSM) provides engineering teams credential management for infrastr · Keeper Connection Manager (KCM) is a remote desktop gateway providing agentless Zero-Trust · Secure AI Agents
Keeper Enterprise Password Management (EPM) gives businesses total visibility and control over their employees' password practices, empowering IT admins to monitor password use and enforce security best practices.
04What should teams verify before adopting Keeper Security?
Compliance Reports must be purchased as an add-on and explicitly enabled in the Admin Cons
No, Compliance Reports must be purchased as an add-on and explicitly enabled in the Admin Console. Admins also need specific permission to run Compliance Reports, which must be granted at the role level.
Ledger citation[7] keepersecurity.com/features/compliance-reports
05What pricing information is available for Keeper Security?
KeeperPAM volume-based tiers: Tier 1 (25-99 NHIs, 5,001-25,000 workloads), Tier 2 (100-249
KeeperPAM includes protection for up to 24 annual active NHIs transacting through the Keeper Gateway and 5,000 monthly workloads transacting on endpoints at no cost. As your environment grows, volume-based pricing scales with you.
Ledger citation[12] keepersecurity.com/pricing/keeperpam
06Does Keeper Security document API access?
Keeper supports SCIM 2.0 for automated user provisioning, deprovisioning, group management · RESTful APIs for vault management, provisioning and audit logging, plus CLI vault access a · Keeper Commander CLI/SDK enables scripting and scheduling of recurring compliance reports
Keeper supports SCIM 2.0 for automated user provisioning, deprovisioning, group management, shared folder access and policy enforcement.
Decision guide
CybersecurityCapabilities and operating fit
This profile connects the jobs Keeper Security is described as handling with its delivery model, access options and the subjects used to match it to related products in this directory.
Common use cases
- Enterprise password management with admin enforcement of security best practices
- Secrets and SSH key management with runtime injection and memory-only sessions
- Agentless Zero-Trust Network Access through a browser-based remote desktop gateway
- Real-time AI-driven privileged session risk classification and automated termination
- Automated AWS password rotation for EC2, RDS, Directory Services and IAM users
- Automated Azure application client secret rotation via Microsoft Graph API
Topics mapped
Verified capabilities
- Unified control plane for privileged access, secrets, remote connections, endpoints and da
- Keeper Secrets Manager supports SDKs in Java/Kotlin, JavaScript, Python, .NET, Go, Ruby an
- Keeper SSH Key Management stores SSH keys encrypted in the Keeper Vault and loads them dyn
- Keeper Secrets Manager supports secure secret access for AI agents via the Model Context P
- KeeperDB connects to PostgreSQL, MySQL, SQLite, Microsoft SQL Server, Oracle and Amazon Re
- AI Integrations enabling AI assistants and agents to securely access vault credentials thr
- Automated AWS password rotation for EC2 instances, RDS databases, Directory Services, and
- Automated Azure application client secrets rotation using Microsoft Graph API integration
Recorded integrations
Over 100 technology integrationsKeeper Secrets Manager integrates natively with popular CI/CD platforms, container environKeeper provides a Secrets Manager Terraform Provider for referencing vault secrets in TerrSingle Sign-On (SSO), SAML-based Identity Provider authentication, Active Directory/LDAP iSSO (SAML 2.0) with Keeper SSO Connect delivering simplified login and one-click provisionSCIM provisioning for centralized identity policies across cloud and on-premises environmeSlack app for securely accessing vault credentials, sharing passwords, and receiving securMicrosoft ADFS auto-provisioning syncing Keeper Enterprise with Active Directory via KeepeIdentity provider integrations: Microsoft Entra ID (Azure AD), Active Directory sync, LDAPWorkflow integrations: Slack (approve/deny access requests), Jira (handle access requests
Intended audiences
Access signals
- Pricing model
- KeeperPAM volume-based tiers: Tier 1 (25-99 NHIs, 5,001-25,000 workloads), Tier 2 (100-249
- API
- Not publicly listed
- Source links
- 17 recorded
Source-backed
Updated July 31, 2026Verified facts
Each fact points to a recorded source, making it easy to distinguish verified product information from claims that need checking.
Keeper Security | Identity Security for Humans, Machines and AI Agents
Unified control plane for privileged access, secrets, remote connections, endpoints and da · Zero-trust and zero-knowledge architecture with end-to-end encryption at device and record · FedRAMP High Authorized and GovRAMP High Authorized
Unified control plane for privileged access, secrets, remote connections, endpoints and databases in a single zero-trust platform
Zero-trust and zero-knowledge architecture with end-to-end encryption at device and record levels
FedRAMP High Authorized and GovRAMP High Authorized
FIPS 140-3 validated; ISO 27001, 27017 and 27018 certified
Keeper Security, Inc.
View 32 more verified facts
KeeperPAM volume-based tiers: Tier 1 (25-99 NHIs, 5,001-25,000 workloads), Tier 2 (100-249 NHIs, 25,001-250,000 workloads), Tier 3 (250-749 NHIs, 250,001-1,000,000 workloads), Enterprise (750+ NHIs, 1,000,000+ workloads); up to 24 annual ac
KeeperAI analyzes privileged activity, classifies risk in real time, automatically terminating high-risk sessions and generating encrypted, forensic-ready summaries
Over 100 technology integrations
Cloud-first identity security solution designed for federal agencies and exceeding stringent government standards
Keeper Secrets Manager supports SDKs in Java/Kotlin, JavaScript, Python, .NET, Go, Ruby and Rust
Keeper Secrets Manager uses zero-knowledge and zero-trust security, with secrets retrieved at runtime and held in memory only for the duration of the process
Keeper SSH Key Management stores SSH keys encrypted in the Keeper Vault and loads them dynamically into memory-only sessions via the Keeper SSH Agent
Keeper Secrets Manager supports secure secret access for AI agents via the Model Context Protocol (MCP)
KeeperDB connects to PostgreSQL, MySQL, SQLite, Microsoft SQL Server, Oracle and Amazon Redshift
KeeperDB is available as a standalone desktop app on Windows, macOS and Linux
Keeper supports SCIM 2.0 for automated user provisioning, deprovisioning, group management, shared folder access and policy enforcement
Keeper Secrets Manager integrates natively with popular CI/CD platforms, container environments and orchestration tools including Kubernetes
Keeper provides a Secrets Manager Terraform Provider for referencing vault secrets in Terraform configurations
Keeper support is available 24x7
Keeper's connection management solutions are commercially supported capabilities powered by Apache Guacamole, developed by its original creators
Keeper publishes SDKs and tools for the Commander CLI, Secrets Manager and third-party integrations on a public GitHub repository
Zero-knowledge and zero-trust architecture with AES 256-bit encryption and Elliptic-Curve cryptography (ECC)
FIPS 140-3 validated via the NIST Cryptographic Module Verification Program (CMVP)
Vault data encrypted at rest with AES-256 GCM and in transit with TLS 1.3 plus an additional payload-encryption layer; super-encryption with multi-region hardware security modules (HSM) using non-exportable keys
Quarterly third-party penetration testing by NCC Group, CyberTest and independent security researchers, plus a Bugcrowd-managed Vulnerability Disclosure Program and bug bounty program
Cloud platform hosted on AWS with isolated tenants available in US, US GovCloud, EU, AU, CA and JP regions
Cloud SaaS hosted across multiple high-availability AWS data centers; customer data is fully isolated in the customer's preferred AWS region
Keeper Enterprise Password Management (EPM) gives businesses visibility and control over employees' password practices with admin enforcement of security best practices
Keeper Secrets Manager (KSM) provides engineering teams credential management for infrastructure secrets, SSH keys, API keys and certificates with SDKs and CI/CD integration
Keeper Connection Manager (KCM) is a remote desktop gateway providing agentless Zero-Trust Network Access (ZTNA) to RDP, SSH, databases, internal web applications and Kubernetes endpoints via a web browser
Millions of consumers and businesses, including family plan members, business/enterprise users and public sector
Single Sign-On (SSO), SAML-based Identity Provider authentication, Active Directory/LDAP integration, Two-Factor Authentication, role-based permissions and delegated administration
Keeper Security, Inc., provider of mobile and desktop password and privileged access security software
AI Integrations enabling AI assistants and agents to securely access vault credentials through standardized protocols for automated workflows and intelligent applications
Model Context Protocol (MCP) via Docker or Node.js implementations for AI agents
SSO (SAML 2.0) with Keeper SSO Connect delivering simplified login and one-click provisioning
SCIM provisioning for centralized identity policies across cloud and on-premises environments
Practical capabilities
8 documented areasWhat it helps with
A concise view of the jobs, capabilities and integrations described in the recorded product sources.
Enterprise password management with admin enforcement of security best practices
Secrets and SSH key management with runtime injection and memory-only sessions
Agentless Zero-Trust Network Access through a browser-based remote desktop gateway
Real-time AI-driven privileged session risk classification and automated termination
Automated AWS password rotation for EC2, RDS, Directory Services and IAM users
Automated Azure application client secret rotation via Microsoft Graph API
Database access to PostgreSQL, MySQL, SQLite, SQL Server, Oracle and Amazon Redshift
SCIM 2.0 automated user provisioning, deprovisioning and policy enforcement
Availability
Source checkedWhere it runs and where to get it
Documented product formats, platforms and official distribution destinations. Availability can vary by region and plan.
Cost / license
KeeperPAM volume-based tiers: Tier 1 (25-99 NHIs, 5,001-25,000 workloads), Tier 2 (100-249Keeper Marks are registered trademarks of Keeper Security, Inc. (e.g., Keeper®, KeeperPAM®Keeper's connection management solutions are commercially supported capabilities powered bKeeper Marks are registered trademarks of Keeper Security, Inc. (e.g., Keeper®, KeeperPAM® · Keeper's connection management solutions are commercially supported capabilities powered b
Platforms
KeeperDB is available as a standalone desktop app on Windows, macOS and LinuxCloud platform hosted on AWS with isolated tenants available in US, US GovCloud, EU, AU, CBrowser extensions for Chrome, Safari, Edge, Firefox, Brave, and Opera providing autofill Available on iOS, Android, macOS, Windows and Linux, with browser extensions for Chrome, F
App stores and other links
Adoption notes
DeploymentCloud-first identity security solution designed for federal agencies and exceeding stringe · Cloud SaaS hosted across multiple high-availability AWS data centers; customer data is ful · Cloud-hosted with an option to self-host Keeper's Multi-Cloud Proxy server to control rout · Cloud-based delivery via the Keeper Vault with minimal infrastructure requirements; Keeper
LicenseKeeper Marks are registered trademarks of Keeper Security, Inc. (e.g., Keeper®, KeeperPAM® · Keeper's connection management solutions are commercially supported capabilities powered b
Model supportKeeperAI analyzes privileged activity, classifies risk in real time, automatically termina
Data controlZero-trust and zero-knowledge architecture with end-to-end encryption at device and record · Keeper Secrets Manager uses zero-knowledge and zero-trust security, with secrets retrieved · Zero-knowledge and zero-trust architecture with AES 256-bit encryption and Elliptic-Curve · FIPS 140-3 validated via the NIST Cryptographic Module Verification Program (CMVP) · Vault data encrypted at rest with AES-256 GCM and in transit with TLS 1.3 plus an addition
Learning curveIntermediate
Primary use casesEnterprise password management with admin enforcement of security best practices, Secrets and SSH key management with runtime injection and memory-only sessions, Agentless Zero-Trust Network Access through a browser-based remote desktop gateway, Real-time AI-driven privileged session risk classification and automated termination, Automated AWS password rotation for EC2, RDS, Directory Services and IAM users, Automated Azure application client secret rotation via Microsoft Graph API, Database access to PostgreSQL, MySQL, SQLite, SQL Server, Oracle and Amazon Redshift, SCIM 2.0 automated user provisioning, deprovisioning and policy enforcement, SAML 2.0 Single Sign-On with one-click provisioning via Keeper SSO Connect, Keeper Enterprise Password Management (EPM) gives businesses visibility and control over e, Keeper Secrets Manager (KSM) provides engineering teams credential management for infrastr, Keeper Connection Manager (KCM) is a remote desktop gateway providing agentless Zero-Trust, Secure AI Agents, Privileged Session Management, Enterprise password management, Privileged Access Management (KeeperPAM), secrets manageme, Zero-trust security across users, credentials, privileged accounts, secrets and infrastruc
What to verify before adopting
- Compliance Reports must be purchased as an add-on and explicitly enabled in the Admin Cons
Evolution and major updates
1 dated updateKeeper Security timeline
A concise history of software releases and material product changes. Events appear only when a dated source supports what changed.
Latest first · exact dates
Showing the newest updates and meaningful milestones. Open an entry for its summary and source.
KeeperPAM Recognized as Top-Rated PAM Solution in 2025 EMA Report
Open detailsKeeper Security announced that KeeperPAM was named a top-rated Privileged Access Management solution in a 2025 EMA report, highlighting industry analyst recognition of the platform.
View source [16]
Citation ledger
18 unique pagesRecorded sources
Facts, answers, structured details, milestones and primary resource links cite this shared ledger. Each external page appears once; release tags from the same GitHub project are grouped under one release history.
- 1keepersecurity.com/security.html 12 facts · 2 answers · Security
- 2keepersecurity.com/developer 11 facts · 2 answers · Security
- 3keepersecurity.com/company/about 10 facts · 2 answers · Security
- 4keepersecurity.com/integrations 11 facts · 1 answer · Security
- 5keepersecurity.com 10 facts · 1 answer · Official site
- 6keepersecurity.com/features 10 facts · 1 answer · Security
- 7keepersecurity.com/features/compliance-reports 4 facts · 2 answers · Security
- 8keepersecurity.com/solutions/zero-trust-security 4 facts · 1 answer · Security
- 9keepersecurity.com/press.html 3 facts · 1 answer · Security
- 10keepersecurity.com/pricing/business-and-enterprise.html 3 facts · 1 answer · Pricing
- 11keepersecurity.com/pricing/personal-and-family.html 4 facts · Pricing
- 12keepersecurity.com/pricing/keeperpam 2 facts · 1 answer · Pricing
- 13keepersecurity.com/getting-started.html 1 fact · Security
- 14keepersecurity.com/support.html 1 fact · Security
- 15keepersecurity.com/blog Security
- 16keepersecurity.com/blog/2025/08/22/keeperpam-named-top-rated-privileged-access-management-solution-in-2025-ema-report 1 milestone
- 17keepersecurity.com/pricing/business-add-ons Pricing
- 18keepersecurity.com/resources/case-studies Security
Research status85 substantive facts · 17 source pages · quality score 100/100