Keeper Security
About
Keeper Security is a cybersecurity company that provides identity security solutions built on zero-trust and zero-knowledge architecture. Their platform covers enterprise password management, privileged access management, secrets management, secure remote access and encrypted messaging for individuals, businesses and government agencies. Keeper serves over 100,000 business customers and 5 million individuals across 150+ countries.
Details
VenSearch Intelligence
Ideal Customer
- Keeper's sweet spot spans SMB, mid-market and enterprise organizations, with Gartner positioning the company most strongly for mid-to-large enterprises with 500 or more employees requiring privileged access management beyond basic password storage.
- Regulated industries such as finance, healthcare and government derive particular value from Keeper's deep compliance certifications and FedRAMP authorization.
Key Differentiators
- Keeper's primary differentiator is its pure zero-knowledge, zero-trust architecture applied uniformly across every product—from consumer password management to enterprise PAM and government deployments—meaning Keeper itself can never access customer vault data.
- It claims the longest-standing SOC 2 and ISO 27001 certifications in the password management industry and holds more security certifications than any competitor, including FedRAMP High and FIPS 140-3, creating a compliance moat that competitors have struggled to match.
Industries Served
- Keeper serves a broad cross-section of industries including financial services, healthcare, telecommunications, manufacturing, legal, technology and the public sector, with specific compliance offerings tailored to each.
- Its FedRAMP High and GovRAMP High Authorizations make it a fit for federal agencies and defense contractors, while its HIPAA compliance and FDA 21 CFR Part 11 certification address healthcare and life sciences requirements.
Service Coverage
- Keeper Security is a globally operating cybersecurity company headquartered at 311 West Monroe Street, Chicago, IL.
- Its platform and customer base span more than 150 countries across North America, Europe, Asia and beyond, with employees distributed across five continents.
Partnerships
- Keeper maintains an extensive technology partner ecosystem, integrating natively with hundreds of identity, SIEM, MFA and IGA solutions including Microsoft Entra ID, Okta, SailPoint, Duo, Splunk, Datadog, Google Security Operations, Elastic, HYPR and Wiz.
- A September 2026 SailPoint integration links KeeperPAM directly to SailPoint's IGA platform for automated privileged access governance, and the Wiz integration positions Keeper as a remediation engine for cloud-native security findings.
Company Size & Ownership
- Keeper Security was founded in 2011 by CEO Darren Guccione and CTO Craig Lurey and is headquartered in Chicago, IL.
- The company currently employs approximately 750–830 people across five continents based on recent data points from multiple sources.
Compliance & Certifications
- Keeper holds one of the most extensive compliance portfolios in the password and PAM market.
- It is FedRAMP High Authorized, GovRAMP High Authorized, SOC 2 Type 2 and SOC 3 attested, ISO 27001/27017/27018 certified, PCI DSS Level 1 certified, FIPS 140-3 validated, HIPAA compliant, GDPR compliant, CCPA compliant, StateRAMP Authorized, TX-RAMP certified, ITAR compliant, FDA 21 CFR Part 11 compliant, GSA and SAM certified, and certified by TrustArc for privacy.
Compiled from public sources by VenSearch · Last researched October 14, 2026
Offerings
25 offeringsAdvanced Reporting & Alerts Module
A reporting and alerting add-on that allows organizations to build custom reports and set up real-time alerts for security events, role changes and vault activity. It integrates with SIEM platforms to centralize visibility and accelerate incident response. Reports can be used to support compliance requirements including SOX, HIPAA and ISO 27001.
Business Password Management
A password management solution designed for business teams to securely store, manage and share credentials with zero-knowledge encryption. It provides a centralized encrypted vault for employees, with admin controls over password policies, team management and access sharing. The solution includes autofill, secure sharing and two-factor authentication capabilities.
Compliance Reporting
A compliance reporting add-on that provides instant auditing of who has access to which credentials and resources, with downloadable reports supporting SOX, HIPAA, ISO 27001 and other frameworks. It allows security and compliance teams to snapshot and export real-time views of user permissions and vault access for internal reviews and external audits. The module also enables encryption of the record title, URL and record type fields for enterprise admins with compliance reporting privileges.
Concierge Service
A support service offered by Keeper Security that provides dedicated assistance to business customers. It is listed as a support service add-on available to enterprise and business customers. Specific details of the service scope are listed under Support Services on the Keeper platform.
Dark Web Monitoring (BreachWatch)
A dark web monitoring add-on for businesses and personal users that continuously scans the dark web for exposed or compromised credentials linked to a user's accounts. It sends real-time alerts when Keeper detects compromised passwords so users can take immediate action. The business version, called BreachWatch for business, monitors across all organizational accounts, while BreachWatch for personal monitors individual users.
Endpoint Privilege Manager
A Privilege Elevation and Delegation Management solution that enforces least-privilege access policies across Windows, macOS and Linux endpoints by eliminating standing local admin rights. It deploys a lightweight agent that intercepts privilege elevation requests and grants Just-in-Time access using ephemeral, Keeper-controlled accounts based on administrator-defined policies. All elevation activity is logged in a centralized dashboard for compliance and auditing.
Enterprise Password Management
A cloud-based password management solution for enterprise organizations that gives IT admins total visibility and control over employee password practices. It supports role-based enforcement policies, Active Directory/LDAP integration, SSO, two-factor authentication and security enforcement policies. Administrators can manage user on-boarding, off-boarding and delegated administration through a centralized admin console.
Family Password Manager
A password management plan for up to five family members that provides each member their own private, encrypted vault. The plan includes secure sharing between family members, dark web monitoring and access across all devices. It is built on the same zero-knowledge architecture as Keeper's enterprise products.
Forcefield
An endpoint-level memory protection tool for Windows that extends Keeper's zero-knowledge security model by providing real-time protection for sensitive applications against credential-stealing malware. It blocks unauthorized memory access attempts from infostealer malware by enforcing strict memory access controls at the operating-system kernel level. Forcefield closes the security gap where malware running under the same user context could read decrypted credentials from application memory during runtime.
Keeper DNA
An advanced two-factor authentication method that uses Apple Watch and Android Wear smartwatches as a secure second factor for logging into the Keeper Vault. When a user logs in, a verification prompt is sent to the paired smartwatch, and the user taps Verify on the watch to approve access. It also includes a Watch Favorites feature that allows users to view selected vault records directly from their smartwatch.
Keeper Secrets Manager
A secrets management platform for engineering and DevOps teams to manage all infrastructure credentials including SSH keys, API keys, certificates and database credentials. It integrates with CI/CD pipelines using SDKs for Python, Go and .NET, and supports automated password rotation across servers, databases and services. Secrets are delivered via CLI tools and SDKs without ever being written to disk or embedded in configuration files.
KeeperDB
A secure database access solution that provides a zero-trust, embedded database front-end allowing privileged users to access, query and manage databases directly from the Keeper Vault without exposing credentials or relying on traditional client applications. Every session is fully recorded and all queries are logged for complete visibility and auditability. It supports natural-language querying via KeeperAI, which writes and runs SQL queries on behalf of the user.
KeeperPAM
A next-generation privileged access management platform that serves as a unified control plane for privileged access, secrets, remote connections, endpoints and databases in a single zero-trust platform. It enforces least privilege with Just-in-Time access, session control and full audit trails across admins, workloads and service accounts. The platform includes AI-powered threat detection via KeeperAI, which analyzes privileged activity, classifies risk in real time and automatically terminates high-risk sessions.
Password Manager for MSPs
A password management solution tailored for Managed Service Providers that allows MSPs to protect their own organization and their end customers while adding new revenue streams. It provides the same zero-knowledge, zero-trust password management capabilities as the enterprise product with MSP-specific administration features. MSPs can manage multiple customer tenants from a centralized platform.
Personal Password Manager
A password manager for individual consumers that stores passwords, passkeys and personal information in a fully encrypted, zero-knowledge vault. It supports biometric login, autofill across apps and websites, secure file storage and multi-factor authentication. Users can access their vault from mobile devices, desktop apps and browser extensions.
Privileged Access Manager for MSPs
A privileged access management solution designed specifically for Managed Service Providers to secure privileged access across their own infrastructure and their customers' environments. It provides the same KeeperPAM capabilities including Just-in-Time access, session recording and secrets management in an MSP-friendly delivery model. MSPs can use it to add PAM services as a new revenue stream for their customers.
Privileged Session Management
A privileged session management solution within KeeperPAM that secures, controls and monitors privileged access sessions across SSH, RDP, VNC, MySQL, PostgreSQL and SQL Server protocols without ever exposing credentials to users. Sessions are launched from the Keeper Vault, brokered through the Keeper Gateway using end-to-end encrypted connections, and include graphical playback and text-based input/output recording for audit trails. KeeperAI monitors sessions in real time to detect suspicious behavior and automatically terminate critical sessions.
Public Sector
A FedRAMP High Authorized and GovRAMP High Authorized version of the Keeper platform designed to meet stringent U.S. government security standards for federal agencies and public sector organizations. It provides the full suite of password management and privileged access management capabilities within a cloud environment that is FIPS 140-3 validated and compliant with government security frameworks. The solution is hosted in the US GovCloud AWS region to ensure data isolation for government customers.
Remote Browser Isolation
A secure web browsing solution delivered through Keeper Connection Manager that isolates browsing activities from end-user devices by hosting sessions in a controlled remote environment running a virtualized Chromium browser. It enables VPN-less access to internal and external web applications, supports session recording for compliance, and can automatically inject credentials into isolated browser sessions without transmitting them to the user's device. Admins can restrict access to specific URLs and customize actions like file uploads, downloads and clipboard use.
Remote Database Access
A secure remote database access solution delivered through KeeperPAM that uses a cloud-native, zero-knowledge architecture to provide Just-in-Time access to databases without exposing credentials to end users or storing them on endpoints. The Keeper Gateway brokers encrypted connections to target databases without requiring inbound firewall rules or VPN dependencies, supporting tools like MySQL Workbench, pgAdmin and SSMS. All sessions are fully recorded, queries are logged and KeeperAI can automatically terminate high-risk sessions.
Remote Privileged Access Management (RPAM)
A security solution delivered through KeeperPAM that allows internal and external privileged users such as IT admins, third-party vendors and contractors to securely access critical systems without relying on a traditional VPN. It routes all privileged connections through the Keeper Vault and Keeper Gateway using outbound encrypted tunnels, eliminating the need for inbound firewall changes. All sessions are recorded and can be monitored with KeeperAI for real-time threat detection.
Secure AI Agents
A solution built on the KeeperPAM platform that secures non-human AI agent identities by replacing hardcoded credentials with Just-in-Time secrets delivered through Keeper Secrets Manager, ensuring secrets are never written to disk, logs or prompts. It enforces policy-based access controls on every credential, command and system interaction, and grants AI agents ephemeral, encrypted tunnel access to infrastructure without VPNs or open ports. All agent actions are logged, recorded and linked to a specific AI identity for compliance and incident response.
Secure File Storage
An add-on that allows users and businesses to securely upload and store sensitive files, photos and documents within Keeper's encrypted vault with full end-to-end encryption. Files are protected by the same zero-knowledge, AES-256 encryption architecture used for passwords and vault records. Both business and personal versions are available.
Secure Messaging (KeeperChat)
An encrypted messaging application offered by Keeper Security that provides secure, private communications. It is listed as an add-on support service in the Keeper platform and is also available as a free tool via the Encrypted Messaging App offering. The messaging app uses Keeper's zero-knowledge encryption framework to protect message contents.
SSO Connect
A single sign-on integration product that seamlessly connects Keeper with any SAML 2.0-compatible identity provider including Okta, Microsoft Entra ID, AD FS, Google Workspace, OneLogin, Ping Identity and others. It is available in two implementations: SSO Connect Cloud and SSO Connect On-Prem, both providing a zero-knowledge architecture with seamless authentication for users. Users log in through their existing identity provider without transmitting master passwords over the network.
Considering Keeper Security?
Our team will work with you to determine if Keeper Security is the right fit for your organization. From research and assessment through procurement negotiation and ongoing vendor management — we handle the entire process at no cost to you.