2024 PAM Radar Report
Keeper Security Vendor Profile
September 2024
By Ken Buckler, CASP, Research Director
Information Security, Risk, and Compliance Management

Vendor Profile: Keeper Security

2024

Overview
Keeper Security
Privileged Access
Management 2024

Vendor Profile: Keeper Security

Keeper Security excels in swift deployment and platform compatibility, but needs customization forcomplex environments. Deployment disruptions are minimal with quick resolutions, though brief accessibility issues can occur. Support is robust, with extensive comprehensive training. Automation is highwith user-friendly interfaces, though some features require manual intervention. Security is strong, withrole-based controls. Reporting is user-friendly with customizable options, but advanced customization
is limited. Data analytics are comprehensive with multi-device sync, but need more customization. The
zero-knowledge security architecture is robust. Integration is user-friendly, with strong encryption. JIT
provisioning minimizes risks, but needs better third-party integration. Identity threat detection includes
dark web monitoring, but requires an additional subscription. Customization is versatile, but complex foradvanced features.

Keeper Security specializes in robust password management solutions with strong
encryption and user-friendly features.

1 . EMA Radar Report | 2024 PAM

Vendor Profile: Keeper Security

Headquarters:

Notable Features:

Chicago, Illinois, USA

Enterprise Password Manager (EPM)

Integration with Native Tools

Territories Supported with aRegional Office:

Securely manage, protect, discover, share, androtate passwords with full control and visibility tosimplify auditing and compliance.

Easy integration with an organization’s existing
administration and IT tools to provide seamlesssecurity without disrupting workflows.

North America, Europe-Middle East-Africa(EMEA), Asia-Pacific (APAC)

Keeper Connection Manager (KCM)

Easy Deployment

Provides an agentless remote desktop gateway
for privileged session management, remote infrastructure access, and secure remote databaseaccess to RDP, SSH, database, and Kubernetes
endpoints without requiring a VPN.

Agentless, zero-touch cloud architecture enables
quick and straightforward deployment, reducing
complexity and costs.

Company Website:
keepersecurity.com

Product Name:
KeeperPAM

Architecture:
Cloud-based, SaaS

Keeper Secrets Manager (KSM)
Secures infrastructure secrets such as API keys,
database credentials, access keys, and certificatesusing a fully managed, cloud-based solution.

Zero Trust and Zero-Knowledge Security
Prevents threat actors from compromisingprivileged accounts by ensuring all datais encrypted and decrypted locally on theuser’s device.

2 . EMA Radar Report | 2024 PAM

Compliance
Meets various regulatory standards, including
ISO 27001, ISO 27017, ISO 27018, SOC 2, FedRAMP,
StateRAMP, HIPAA, GDPR, PCI DSS Level 1, andFIPS-140-2.

Vendor Profile: Keeper Security

Keeper Security
Average

Functionality
100.00
90.00
80.00
70.00
60.00

Architecture &Integration

Deployment &Administration

50.00
40.00
30.00

Vendor Strength

3 . EMA Radar Report | 2024 PAM

Cost Advantage

Vendor Profile: Keeper Security

Deployment & Administration
Ease of Deployment
Deployment Time & Flexibility

Outstanding

Deployment Disruption

StrongSupport and Services
Professional Services & Cust. Support

StrongStaff Training

Solid

Ease of Administration
Administrative Overhead & Automation Outstanding
Administrative Security & Update
ImpactOutstanding

ReportingOut-of-the-Box Reporting

Solid

Data Analytics & Accessibility

Solid

Keeper Security offers a swift and flexible deployment process that can be completed in minutes acrossvarious devices and operating systems. The installation is straightforward and the platform boasts widecompatibility. However, enterprise-level customizations and integrations might require additional configuration time, particularly in highly complex environments. Keeper Security’s deployment is generally
considered minimal in terms of disruption, with quick resolution times and effective communication
during any issues. Their robust technical support structure and contingency measures ensure a smooth
experience for users. The company boasts a high level of automation in password management, encompassing automatic password generation, secure sharing, and form-filling. Their user-friendly interface
and strong customer support help minimize administrative overhead, simplifying the onboarding
process and reducing the need for extensive training. This streamlined approach simplifies the administrative experience for users. Keeper Security enhances reporting through its Commander tools CLI withprebuilt and customizable reports, and its SDK for API access and custom integrations, providing improved
visibility, compliance, efficiency, and security. Keeper Security’s SSO Connect integrates with leading single
sign-on providers to streamline user authentication, enhance security, and simplify access management
across various applications. The System for Cross-Domain Identity Management protocol in Keeper Security
enables automated provisioning and deprovisioning of users and groups, facilitating seamless identity
management by synchronizing user data between Keeper Security and identity providers (IdPs).

Keeper Security’s deployment is generally considered minimal in terms of disruption,with quick resolution times and effective communication during any issues.

4 . EMA Radar Report | 2024 PAM

Vendor Profile: Keeper Security

Architecture & Integration
Architecture
Data Collection & Performance

StrongData Retention, Privacy & Protection

Outstanding

Integration
Data Feeds to Other Products

StrongData Ingestion from Other Products

Strong

Keeper Security boasts a highly secure architecture based on zero-knowledge encryption, ensuring data isencrypted and decrypted only on the user’s device, meaning no third party, including Keeper, can accessthe encryption keys. This, coupled with multiple layers of encryption and robust two-factor authentication,forms the foundation for their secure password, file, and secrets management platform. Their integration
capabilities are strong, with a user-friendly interface that seamlessly integrates with various platforms
and browsers. Keeper Security offers features like password generation, autofill capabilities, and real-time
password breach monitoring, enhancing the user experience and making the platform highly adaptable todiverse IT environments.

Vendor Lock-In
Data Import

Outstanding

Data Portability

Strong

Keeper Security boasts a highly secure architecture based on zero-knowledge
encryption, ensuring data is encrypted and decrypted only on the user’s device.

Vendor Strength
Industry Vision (Thought Leadership)

StrongProduct Vision

StrongStrategy

StrongFinancial Strength

StrongResearch & Development

StrongPartnerships and Channel

StrongCommunity Support & Open Source

Solid

5 . EMA Radar Report | 2024 PAM

Vendor Profile: Keeper Security

Functionality
Core Features
Management of Privileged Accounts,Secrets, and Credentials

Outstanding

Just-in-Time Provisioning

StrongIdentity Threat Detection andResponse/Integration

StrongConfiguration & Updates
Configurable for Business Needs

StrongUpdates do not Impact Core
Functionality/Downtime

Solid

Management
Ease of Management

Solid

Keeper Security is a healthy password manager that offers a comprehensive suite of features designed
to simplify password management and enhance security for both individual users and businesses. The
platform employs a zero-knowledge security architecture, meaning data is encrypted and decrypted at
the device level, ensuring you are the only one with access to the encryption keys. Keeper offers strong
encryption, two-factor authentication, and secure password, file, and secrets management, making ita reliable choice for safeguarding sensitive information. It integrates well with various platforms andbrowsers, providing a user-friendly interface with features like password generation, autofill capabilities,
and real-time password breach monitoring. The platform offers customizable fields, templates, and roles,
enabling users to tailor Keeper to their unique needs. Keeper provides robust out-of-the-box reporting withdetailed logs, compliance reports, and security audits, offering valuable insights for administrators. The
platform also allows for comprehensive data analytics, enabling effective tracking and analysis of usage
and security metrics. While Keeper’s strength lies in its security and ease of use, it does have some limitations in terms of migration complexity and advanced reporting customization options. Keeper does provide
robust connection auditing capabilities, as well as zero-knowledge dark web credential monitoring (at anadditional subscription fee), but could be improved with better ITDR capabilities or integrations.

Ease of Use
Roles Supported

Outstanding

Reporting

StrongCost-Efficiency

The platform employs a zero-knowledge security architecture, meaning data isencrypted and decrypted at the device level.

Pricing Model
Licensing Costs$Licensing Model/Flexibility

StrongSupport and Training Costs$Infrastructure Costs & ManagementCosts$$6 . EMA Radar Report | 2024 PAM

About Enterprise Management Associates, Inc.
Founded in 1996, Enterprise Management Associates (EMA) is a leading IT analyst research firm that specializes in going “beyond the surface” to provide deep insightacross the full spectrum of IT management technologies. EMA analysts leverage a unique combination of practical experience, insight into industry best practices, andin-depth knowledge of current and planned vendor solutions to help its clients achieve their goals. Learn more about EMA research, analysis, and consulting services atwww.enterprisemanagement.com or follow EMA on X or LinkedIn.
This report, in whole or in part, may not be duplicated, reproduced, stored in a retrieval system or retransmitted without prior written permission of Enterprise Management
Associates, Inc. All opinions and estimates herein constitute our judgement as of this date and are subject to change without notice. Product names mentioned herein may betrademarks and/or registered trademarks of their respective companies. “EMA” and “Enterprise Management Associates” are trademarks of Enterprise Management Associates,
Inc. in the United States and other countries.
©2024 Enterprise Management Associates, Inc. All Rights Reserved. EMA™, ENTERPRISE MANAGEMENT ASSOCIATES®, and the mobius symbol are registered trademarks orcommon law trademarks of Enterprise Management Associates, Inc.
2770 Arapahoe Road, Ste 132 - 544, Lafayette, CO 80026+1 303.543.9500

www.enterprisemanagement.com

4449.082924-Keeper Security