Company Overview and
Solutions Guide

REV 2.3.23

Company Overview and Solutions Guide

About Keeper
Keeper is the leading provider of zero-trust and zeroknowledge security cloud services spanning secrets
management, privileged access, secure remoteinfrastructure access, and encrypted messaging. Millions
of consumers and thousands of businesses worldwide
trust Keeper to mitigate the risk of password-related
cyberattacks.
Keeper Security is privately held and was founded in2011 by Darren Guccione (CEO & Co-founder) and Craig
Lurey (CTO & Co-founder). Keeper has four offices
located in Chicago (Headquarters), California (Software
Development), Ireland (EMEA Business Sales), and thePhilippines (International Customer Support), serving
over one million customers worldwide.

© 2023 Keeper Security, Inc.

2

Company Overview and Solutions Guide

Zero-Knowledge Security Model
Keeper is one of the few cybersecurity platforms that uses a zero-knowledge security model, with a unique encryption
and data segregation framework to protect against a remote data breach.
Encryption and decryption occur on the device level, upon a user logging into their Keeper vault. Each individual record
stored in the user’s vault is encrypted with a random 256-bit AES key that is generated on the user’s device. The dataremains encrypted after it leaves the user’s device, transmits over the internet, and is stored in the Keeper vault.
This means that no one – not even Keeper’s own employees – can access our users’ master passwords, the encryption
keys used to decrypt their data, or the contents of their Keeper vaults. The data can only be decrypted by the end-user,
on their device, using their master password or elliptic curve private key.
The method of encryption that Keeper uses is a well-known, trusted algorithm called AES (Advanced Encryption
Standard) with a 256-bit key length. Keeper uses PBKDF2 with HMAC-SHA256 to convert the user’s master password
to a 256-bit encryption key with a minimum of 1,000,000 rounds. Sharing of secrets between users uses elliptic curve
cryptography for secure key distribution.
Keeper’s SSO Cloud capability provides authentication against a SAML 2.0 identity provider, while retaining full zeroknowledge encryption with the user’s vault.

© 2023 Keeper Security, Inc.

3

Company Overview and Solutions Guide

Compliance & Audits

Keeper is Fanatical About Data Protection and Security
Keeper utilizes best-in-class security with a zero-trust framework and zero-knowledge security architecture tosafeguard your information and mitigate the risk of a data breach.

SOC 2

Keeper is certified as SOC 2 Type 2 compliant in accordance with the AICPA
Service Organization Control framework. SOC 2 certification helps ensure thatyour vault is kept secure through the implementation of standardized controls as
defined in the AICPA Trust Service Principles framework.

ISO 27001 Certified

Keeper is ISO 27001 certified, covering the Keeper Security Information
Management System which supports the Keeper Enterprise Platform. Keeper’s
ISO 27001 certification is scoped to include the management and operation of
the digital vault and cloud services, software and application development, andprotection of digital assets for the digital vault and cloud services.

FIPS 140-2 Validated

Keeper utilizes FIPS 140-2 validated encryption modules to address rigorous
government and public sector security requirements. Keeper’s encryption has beencertified by the NIST CMVP and validated to the FIPS 140 standard by accredited
third party laboratories. Keeper has been issued certificate #3967 under the NIST
CMVP.

FedRAMP Authorized

Keeper Security Government Cloud (KSGC) is KSI’s password management
and cybersecurity platform for public sector agencies. KSGC is a FedRAMP andStateRAMP Authorized provider, hosted in AWS GovCloud (US). KSGC can be foundon the FedRAMP and StateRAMP marketplaces.

StateRAMP Authorized

The Federal Risk and Authorization Management Program (FedRAMP) is a U.S.
federal government program that provides a standardized approach to security
assessment, authorization and continuous monitoring for cloud products
and services. FedRAMP enables government agencies to use modern cloudtechnologies, with an emphasis on security and protection of federal informationand helps accelerate the adoption of secure, cloud solutions.

For a full list of Keeper Security Compliance & Audits please visit Keepersecurity.com/security.

© 2023 Keeper Security, Inc.

4

Company Overview and Solutions Guide

Commercial Solutions

Next-Gen, Zero-Trust, Zero-Knowledge
Privileged Access Management (PAM) Platform

KeeperPAMTM
Keeper’s cybersecurity PAM (privileged access management)
SaaS-based platform enables organizations to achieve full visibility,
security, control and reporting across every user on every device in an
organization.
The platform enables zero-trust and zero-knowledge security andcompliance by unifying three integral products into one platform.

82% of breaches involve the human element - with the majority
due to stolen or weak passwords, credentials and secrets.1

Enables organizations tosecurely manage, protect,
discover, share and rotate
passwords with full control andvisibility to simplify auditing
and compliance.

12022 Data Breach Investigations Report

Delivers a fully-managed,
cloud-based solution to secure
infrastructure secrets such as
API keys, database credentials,
access keys and certificates.

Provides an agentless remote
desktop gateway for instantprivileged session management,
remote infrastructure access andsecure remote database accessto RDP, SSH keys, database andKubernetes endpoints –no VPN required.

© 2023 Keeper Security, Inc.

5

Company Overview and Solutions Guide

KeeperPAM Addresses the Key Pain Points and Requirements in
Organizations to Prevent Data Breaches© 2023 Keeper Security, Inc.

6

Company Overview and Solutions Guide

Products and Solutions

Protect Your Organization

KeeperPAM

Keeper Password
Manager for
Business

Keeper Enterprise
Password Manager

Keeper’s patented PAM platform enables organizations to achieve complete visibility,
security, control and reporting across every user on every device in any organization.
The platform is cloud-based, enables zero-trust and zero-knowledge security, andmeets compliance mandates by unifying three integral solutions into one unified
solution.

Keeper Password Manager for Business provides companies with complete visibility
into employee password practices, allowing them to enforce company password
policies, monitor employee compliance, and generate audit trails and reports. Keeper
also securely manages the lifecycle of privileged account credentials with RBAC andcontrolled credential sharing.

Keeper Enterprise Password Manager includes everything in Keeper Business andadds single sign-on (SSO) SAML 2.0 authentication, automated team management,
advanced MFA (DUO & RSA), Active Directory and LDAP sync, SCIM and Azure AD
provisioning, email auto-provisioning, command line provisioning, and developer APIs
for password rotation and backend integration.

© 2023 Keeper Security, Inc.

7

Company Overview and Solutions Guide

Keeper Security
Government Cloud(KSGC)

KeeperMSP

Keeper Secrets
Manager (KSM)

Keeper Connection
Manager (KCM)

Powered by AWS GovCloud, Keeper Security Government Cloud is a FedRAMP andStateRAMP Authorized password management and cybersecurity platform. KSGC
protects organizations of all sizes, from small municipalities and institutions to large
federal agencies and campuses, enabling them to mitigate risk, prevent cyberattacks,
and simplify compliance with HIPAA, FINRA, SOC, ITAR, and more.

Designed specifically for managed service providers (MSPs), KeeperMSP enables
MSPs to solve their customers’ password management and security issues while
generating additional passive revenue by offering them Keeper’s top-rated EPM asa service. KeeperMSP allows managed service providers to independently provision,
manage and monitor multiple customers from a central admin dashboard, with robust
reporting and auditing tools to enforce security and compliance requirements, such as
RBAC, MFA, SIEM event reporting, and regulatory and industry compliance.

Keeper Secrets Manager is a cloud-based, zero-trust, zero-knowledge solution foreliminating “secrets sprawl” and securing privileged credentials and infrastructure
secrets, such as SSH and API keys, database passwords, and certificates. Keeper
Secrets Manager ensures that all servers, CI/CD pipelines, developer environments,and source code pull secrets from an encrypted API endpoint. Keeper Secrets
Manager seamlessly integrates into any environment, with no additional hardware
or cloud-hosted infrastructure required, and out-of-the-box integrations with Github
Actions, Kubernetes, Ansible, and a wide variety of other DevOps tools

Keeper Connection Manager provides IT and DevOps teams with fast, passwordless,and hyper-secure remote access to servers and desktops without a VPN. Users canaccess their desktops using any modern web browser, with no need to install or
configure agents or client software. Powered by Apache Guacamole and integrated
into Keeper’s zero-trust, zero-knowledge security and encryption architecture, KCM
offers distributed teams a fast and seamless remote desktop experience without
sacrificing stability or security. KCM is also fully integrated into Keeper Secrets
Manager for managing privileged sessions.

© 2023 Keeper Security, Inc.

8

Company Overview and Solutions Guide

Powerful Add-Ons for Superior Team Protection

Advanced Reportingand Alerts Module(ARAM)

ARAM takes Keeper’s reporting capabilities to the next level with enterprise-grade,customizable reporting and alerting functionality, allowing administrators to monitor
any size user population, view focused, summary trend data, and receive real-time
notifications of risky or unusual behaviors.

BreachWatch
for Business

Keeper BreachWatch scans the dark web, gives end users up-to-date risk assessmentsof passwords directly in their vaults, and provides administrators with a summary viewof breached password status across the organization.

®

Compliance Reports

KeeperChat® forBusiness

Keeper SSO
Connect®

Keeper Compliance Reports allow Keeper Administrators to monitor and report theaccess permissions of privileged accounts across the entire organization, in a zerotrust and zero-knowledge security environment. Keeper Compliance Reports supports
audits for Sarbanes Oxley (SOX) and other regulations that require access-control
monitoring and event auditing. On-demand compliance reports can be forwarded toautomated compliance systems and external auditors.

KeeperChat provides the highest level of privacy, security, organization, and storage
for text messaging. KeeperChat is super fast, easy to use, and far more secure thanother text messaging solutions. KeeperChat utilizes the same zero-knowledgearchitecture as the rest of our solutions, ensuring that only KeeperChat users have theability to decrypt and access their messages on their device.

Keeper SSO Connect® is a SAML 2.0 service that seamlessly and quickly integrates
with your existing SSO solution, enhancing and extending it with zero-knowledge
password management and encryption. Keeper SSO Connect deploys rapidly in any
data environment: on-prem, hybrid cloud, single cloud, or multi-cloud. SSO integration
with Keeper uses Elliptic Curve cryptography to preserve zero-knowledge.

© 2023 Keeper Security, Inc.

9

Company Overview and Solutions Guide

Consumer Solutions

What makes Keeper stand out for consumers?
Store an unlimited number of passwords & access themfrom any device
Keeper’s password manager stores all of your passwords
and MFA codes in a secure digital web vault and auto-fills
your login credentials on all of your websites and apps.
To access your Keeper web vault on desktop and laptop
computers (Windows, Mac, and Linux), you can use the
Keeper desktop app or our browser extension, whichworks in all modern browsers. On mobile devices,
download the Keeper app for iOS or Android. Real-timesync ensures that you’re always accessing the mostcurrent version of your Keeper vault, no matter which
device you’re using.
Stay organized with custom fields and custom record
types

Emergency accessIn the event of an emergency, what happens to thepasswords and files in your Keeper vault? Keeper
Emergency Access lets consumers choose up to fivetrusted contacts to be granted access to their Keeper
vault should they not access it for a period of time thatthey specify.
Easy to install; easy to use
Keeper is designed to be as user-friendly as possible. If
you ever have a question or need help, we maintain an
extensive self-help library of user guides and videos on
our website. Need to talk to someone? Our customer
support team is always a message away, 24/7.

Once inside your Keeper web vault, you can view and edit
all of your website login credentials, including your MFA
codes, as well as share records with other Keeper users.
Custom fields let you add other important information
about your Keeper records, such as answers to security
questions. Additionally, Custom Record Types allow
you to use your Keeper web vault to store and organize
other important information, such as payment cards, thepassword to your home WiFi network, the security codefor your alarm system, or PINs for desktop or mobile
devices.
Enterprise-grade data protection – for consumers
Keeper’s consumer solutions utilize the same proprietaryzero-knowledge encryption as our commercial products,
putting enterprise-grade security into the hands ofconsumers. Only the user can access and decrypt theirstored passwords and files. Nobody else can accessour users’ master passwords, encryption keys, or vault
contents - not even Keeper’s own employees!

© 2023 Keeper Security, Inc.

10

Company Overview and Solutions Guide

Consumer Subscription Packages

Keeper Unlimited

Keeper PlusBundle

Keeper Family
Unlimited / Keeper
Family PlusBundle

Secure File Storage

BreachWatch®

KeeperChat®

One-Time Share

Keeper Personal allows users to store their passwords in a private, encrypted digitalvault that can be accessed from anywhere, using any device, running any operating
system. Keeper auto-fills login credentials across websites and apps, which makes
it easy to use a strong, unique password for every online account. In addition to
passwords, Keeper can securely store payment card information, along with sensitive
files, documents, photos, and videos. It even stores MFA codes.

The Keeper PlusBundle includes all of the great features of Keeper Unlimited plus
BreachWatch® dark web monitoring, and Secure File Storage.

Keeper’s family plans extend all the great features of Keeper Unlimited/Keeper
PlusBundle to up to five users in a household, with easy and secure sharing features sothat family members can share passwords, files, payment cards, and more.

Store more than just passwords in your Keeper Vault. Keeper’s Secure File Storage isyour digital safety deposit box, a secure place to store critical documents so that you
can immediately find and access them when you need them. Use it to store insurance
and loan paperwork, vaccination and other healthcare records, deeds and titles, bankaccount statements, passport photos, and more. You can also use Keeper Secure
File Storage for backups of family photographs and videos, so that your pricelessmemories are kept safe for both your current family and future generations to enjoy.

Keeper BreachWatch scans the dark web and alerts consumers if any of theircredentials are found on cybercrime forums.

The world’s most secure messaging platform for consumers, KeeperChat is super fast,easy to use, and utilizes the same zero-knowledge architecture as our award-winning
password manager. This ensures that only you have the ability to decrypt and accessyour messages on your devices.
Keeper “One-Time Share” provides time-limited secure sharing of a record to anyone
without having to create a Keeper account. One-Time Share is the most secure way
to send confidential information without exposing it over email, text message ormessaging.

© 2023 Keeper Security, Inc.

11

Company Overview and Solutions Guide

Top Industry Ratings,
InfoSec Awards & User Reviews

Gartner Peer Insights
4.7 out of 5 stars

Spiceworks
4.9 out of 5 stars

Editors’ Choice
4.5 out of 5 stars

Editor’s Choice CEO of the Year

Hot Company in IAM

Editor’s Choice CTO of the Year

Most Innovative in Endpoint
Security

Editor’s Choice Data Security
Next Gen PAM for Cloud
Infrastructure

Cutting Edge in Security
Company of the Year

Market Leader Passwordless
Authentication

2023 Enterprise Leader
4.7 out of 5 stars

Best Product in Password
Management
Best Product for SMB
Cybersecurity
Publisher’s Choice for Chief
Executive of the Year
Most Innovative CTO of the
Year

Hot Company Secrets
Management
Next Gen Zero Trust

Learn More

Learn More

Learn More

© 2023 Keeper Security, Inc.

12

Company Overview and Solutions Guide

Learn More

Learn More

Learn More

Learn More

© 2023 Keeper Security, Inc.

13

Company Overview and Solutions Guide

Keeper Leadership
The Keeper leadership team is committed to customer success. We have deep expertise in cybersecurity software,
cloud computing and mobile device technologies.

Darren Guccione

Craig Lurey

CEO & Co-Founder

CTO & Co-Founder

Kerrie Carroll

Nikita Word

CHRO

Gene Dias

VP of Technology

Marcia Dempster

Sr. Director of Channel Sales,
Americas

HR Director

Patrick Tiquet

VP of Security & Architecture

Mitch Rosen

Global Director of Solutions
Engineering

Amy Lindenmeyer
CFO

Nikki Jamison

General Counsel

Sean Elder

VP of Global Customer Success

Ibrahim Lamdouar

Director of Engineering

Mark Cravotta
CRO

Rainer Enders

VP of Engineering

Steve Beckmeier

Sr. Director of Inside Sales,
North America

Tyson Cutler

Director of Quality Assurance© 2023 Keeper Security, Inc.

14

Company Overview and Solutions Guide

Des Donohoe

Director of Sales, EMEA

Anne Cutler

Director of Global
Communications

Zane Bond

Head of ProductPaula Johnson

Director of Talent Acquisition

Max Scholle

Director of Digital MarketingJohn Twomey

Director of Finance, EMEA

Andrea Restrepo

Director of Enterprise Sales

Brad Cain

Director of B2B GrowthMarketingTingting Gong

Director of Consumer Support

Daniel Searls

Director of Customer Success,
EMEA

Tess Kostiner

Director of Affiliate Marketing

Paul AielloGlobal Director of B2B Support© 2023 Keeper Security, Inc.

15

Company Overview and Solutions Guide

Office Locations
Keeper Security is a global company headquartered in Chicago, Illinois with offices in El Dorado Hills, California (Software
Development), Cork, Ireland (EMEA Business Sales), and Cebu, Philippines (International Customer Support).

Cork, Ireland

Chicago, Illinois

El Dorado Hills, California
Cebu, Philippines

keepersecurity.com | press@keepersecurity.com© 2023©Keeper
2023 Keeper
Security,
Security,Inc.
Inc.
16