Keeper Security Unveils Self-Managed Keeper for Privileged Access Management in Restricted Environments
In an important development for cybersecurity, Keeper Security has officially launched Self-Managed Keeper, a robust self-hosted deployment option specifically crafted to enhance privileged access management (PAM) capabilities within highly restricted and disconnected environments. This innovative solution aims to empower a range of organizations—from government agencies to critical infrastructure operators and highly regulated enterprises—by allowing them to manage credentials, secrets, and privileged sessions entirely within their own infrastructure. The caveat is that this management will occur without reliance on external cloud services—a critical feature for many sectors where security and regulatory demands are paramount.
The advent of Self-Managed Keeper comes as a direct response to the myriad security and operational challenges encountered by organizations working in fields such as defense, energy, utilities, financial services, and industrial operations. In these sectors, the potential for network connectivity restrictions or outright prohibitions can arise due to stringent regulatory standards, security concerns, or operational requirements. Consequently, organizations operating under these conditions have often struggled to find effective solutions for managing access to vital systems and data.
By utilizing Self-Managed Keeper, these organizations can implement PAM functionalities across various on-premises infrastructures, private cloud environments, air-gapped networks, and Operational Technology (OT) systems. The elimination of external cloud dependencies provides security teams with significantly enhanced control over where sensitive data is stored and how privileged access is administered.
Craig Lurey, the Chief Technology Officer and Co-founder of Keeper Security, emphasizes the potential risks associated with reliance on external cloud connectivity for organizations operating in disconnected environments. “For organizations operating in disconnected or highly restricted environments, dependence on external cloud connectivity can create unacceptable operational risks,” Lurey stated. He further noted that Self-Managed Keeper allows these entities to deploy enterprise-grade PAM solutions while maintaining complete control over their security infrastructures.
Moreover, for operators of critical infrastructure, it becomes essential to maintain access to privileged credentials during connectivity disruptions, as quick restoration of systems and the continuation of operations depend on this capability. Self-Managed Keeper meets this critical requirement by providing comprehensive credential management, secrets management, and privileged session management through what is termed the KeeperPAM Gateway. Alongside this, the platform incorporates KeeperDB, the Keeper Admin Console, and Keeper APIs to facilitate seamless operations.
This sophisticated solution runs in Docker containers deployed on customer-controlled Linux infrastructure. By functioning independent of internet connectivity, organizations can sustain their privileged access capabilities even during the most tumultuous of disruptions, thus reducing the likelihood of operational fallout.
Keeper Security has highlighted several core functionalities that distinguish Self-Managed Keeper in the realm of cybersecurity. Notable features include support for fully air-gapped networks, customer-controlled data residency, and self-hosted deployment management. Perhaps most significant is the preservation of Keeper’s zero-knowledge architecture, ensuring that credentials and secrets remain secure through end-to-end encryption, with decryption occurring solely on users’ devices.
This latest deployment option serves as a complement to Keeper’s existing cloud-native offerings. It extends the company’s PAM capabilities to organizations that are obligated to enforce strict control over their infrastructure and sensitive data. Shane Barney, the Chief Information Security Officer at Keeper Security, underlined the unique challenges faced by organizations managing complex OT and defense networks. He remarked, “Organizations operating complex OT and defense networks face a unique challenge: maintaining strict security and operational requirements while keeping pace with modern cybersecurity capabilities.”
According to Barney, Self-Managed Keeper bridges the critical gap that many organizations face, introducing advanced privileged access management into highly restricted environments where conventional cloud deployments are not feasible. This solution empowers security teams to modernize their protective strategies for critical systems without undermining the foundational infrastructure that ensures such environments remain secure.
In summary, the introduction of Self-Managed Keeper by Keeper Security stands as a significant milestone in the landscape of privileged access management, particularly for organizations grappling with stringent regulatory and operational requirements. By providing a self-hosted solution that maximizes control and security, Keeper is poised to enhance the cyber resilience of sectors that are fundamental to national and economic security.