Keeper Security CISO: Shane Barney

What the company sells

Keeper Security sells a unified control plane for privileged access, secrets, remote connections, endpoints and databases within a single zero-trust platform. Keeper names organizations from SMBs to Fortune 500 enterprises and U.S. federal agencies among those it serves. Keeper grants Just-in-Time access to infrastructure, endpoints and secrets and secures every human and non-human identity.

Keeper Enterprise Password Management gives businesses visibility and control over their employees' password practices and lets IT admins monitor password use. Keeper gives every employee a private, encrypted vault to store passwords, passkeys, secrets and other sensitive data, and includes a built-in password generator and secure autofill. Keeper stores and autofills passwords, secures secrets, enforces granular access controls and offers Privileged Access Management capabilities. Keeper supports multiple MFA methods, including TOTP, hardware security keys and biometrics. With Keeper SSO Connect, organizations can enable passwordless authentication through their existing Identity Provider to reach the Keeper Vault. Keeper enables sharing of passwords and secrets through end-to-end encryption and granular access controls. One-Time Share lets users send credentials bound to a time limit, so access to the data expires after use. BreachWatch monitors the dark web, scans stored credentials against known compromised ones and alerts users in real time the moment a match is found. Keeper provides administrators with detailed audit trails, customizable reports and tracking across more than 300 event types.

KeeperPAM delivers secure remote database access through a cloud-native, zero-knowledge and zero-trust architecture. KeeperPAM delivers Just-in-Time access to privileged users directly from the Keeper Vault using zero-knowledge encryption. KeeperPAM enforces zero-trust access controls across every database connection, with access provisioned through role-based policies and protected with Multi-Factor Authentication. KeeperPAM replaces VPN-dependent access with the KeeperPAM Gateway, which establishes end-to-end encrypted connections to any target database. KeeperPAM provides session management with encrypted session recording and detailed audit logs. KeeperDB enables privileged users to access, query and manage databases directly from the vault without exposing credentials. Native clients such as MySQL Workbench, pgAdmin and SSMS can connect through a local connection started via the KeeperPAM Gateway while credentials remain protected in the Vault. KeeperAI lets users ask for data in plain English and writes and runs the SQL directly inside the vault session. KeeperAI analyzes privileged activity and classifies risk in real time, automatically terminating high-risk sessions and generating encrypted, forensic-ready summaries.

Keeper Secrets Manager provides engineering teams with a platform for managing credentials, including infrastructure secrets, SSH keys, API keys and certificates, with SDKs and CI/CD integration. Keeper Secrets Manager lets teams manage access to secrets across teams by sharing entire applications. Keeper Connection Manager is a remote desktop gateway that gives DevOps and IT teams Zero-Trust Network Access to RDP, SSH, databases, internal web applications and Kubernetes endpoints through a web browser, with no agent required. Keeper includes Remote Browser Isolation, endpoint privilege management and privileged session management. Keeper Encrypter is a self-hosted service that receives Tenable webhooks inside the customer environment and encrypts the integration data before sending it to Keeper.

Keeper maps to the organizational structure defined in a source directory such as Active Directory, Entra ID, Okta or any SAML 2.0 identity provider. Organizations assign existing groups to Keeper Teams and Roles, and access follows the structure they already maintain. In Keeper, Teams grant access to vault resources such as passwords, secrets and privileged resources. Roles apply enforcement policies to users and enable capabilities like KeeperPAM privileged access and Keeper Secrets Manager. Keeper's node structure lets an organization give a delegated administrator control over one part of the organization, such as a region, a department or a business unit, without visibility into anything outside it. Keeper Team and Role assignments map to directory groups through SCIM provisioning, the Keeper AD Bridge or an identity provider. Security teams can run access reports from the Keeper Admin Console and review permissions by user or Team. Keeper supports a range of Multi-Factor Authentication methods to protect access to the Keeper Vault across personal and enterprise environments. Keeper DNA supports Apple Watch and Android smartwatches running Wear OS.

Keeper uses AWS in several regions, including the US, US GovCloud, EU, AU, CA and JP, to host and operate the Keeper platform and architecture. Keeper is FedRAMP High and GovRAMP High Authorized, FIPS 140-3 validated, ISO 27001, 27017 and 27018 certified, PCI DSS certified and certified by TrustArc for privacy. Keeper is certified by the NIST Cryptographic Module Verification Program to meet the FIPS 140-3 standard. Keeper is built with end-to-end encryption and a zero-knowledge and zero-trust architecture. Keeper partners with third-party experts and independent security researchers to perform quarterly pen testing against all solutions and systems.^{[2][3][4][6][7][8][9][10][11]}

Categories

• Privileged access management (primary category)
• Password and secrets vaults for people
• Remote browser isolation
• Non-human identity security
• Compare Keeper Security with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Not established from our sources

CISO on record

Shane Barney, Chief Information Security Officer (CISO) (appointment announced in the week of May 19, 2025)

Website

keepersecurity.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Keeper Enterprise Password Management^[4]

  Keeper Enterprise Password Management gives businesses visibility and control over their employees' password practices and lets IT admins monitor password use.

  Keeper Enterprise Password Management gives businesses visibility and control over their employees' password practices and lets IT admins monitor password use. Keeper gives every employee a private, encrypted vault to store passwords, passkeys, secrets and other sensitive data, and includes a built-in password generator and secure autofill. Keeper supports multiple MFA methods, including TOTP, hardware security keys and biometrics. Keeper provides administrators with detailed audit trails, customizable reports and tracking across more than 300 event types.

• KeeperPAM^[6][9][13]

  KeeperPAM delivers secure remote database access through a cloud-native, zero-knowledge and zero-trust architecture.

  KeeperPAM delivers secure remote database access through a cloud-native, zero-knowledge and zero-trust architecture. KeeperPAM delivers Just-in-Time access to privileged users directly from the Keeper Vault using zero-knowledge encryption. KeeperPAM replaces VPN-dependent access with the KeeperPAM Gateway, which establishes end-to-end encrypted connections to any target database. KeeperPAM provides session management with encrypted session recording and detailed audit logs.

• KeeperDB^[6]

  KeeperDB enables privileged users to access, query and manage databases directly from the vault without exposing credentials.

• Keeper Secrets Manager^[4][7][9]

  Keeper Secrets Manager provides engineering teams with a platform for managing credentials such as infrastructure secrets, SSH keys, API keys and certificates.

  Keeper Secrets Manager provides engineering teams with a platform for managing credentials, including infrastructure secrets, SSH keys, API keys and certificates, with SDKs and CI/CD integration. Keeper Secrets Manager lets teams manage access to secrets across teams by sharing entire applications.

• Keeper Connection Manager^[4]

  Keeper Connection Manager gives access to RDP, SSH, databases, internal web applications and Kubernetes endpoints through a web browser with no agent required.

  Keeper Connection Manager is a remote desktop gateway for DevOps and IT teams. Keeper Connection Manager gives access to RDP, SSH, databases, internal web applications and Kubernetes endpoints through a web browser with no agent required.

• KeeperAI^[3][6]

  KeeperAI analyzes privileged activity and classifies risk in real time.

  KeeperAI analyzes privileged activity and classifies risk in real time, automatically terminating high-risk sessions and generating encrypted, forensic-ready summaries. KeeperAI lets users ask for data in plain English and writes and runs the SQL directly inside the vault session.

• BreachWatch^[5]

  BreachWatch monitors the dark web and scans stored credentials against known compromised ones.

  BreachWatch monitors the dark web, scans stored credentials against known compromised ones and alerts users in real time the moment a match is found. BreachWatch uses a zero-knowledge matching architecture, and credentials are anonymized before any comparison occurs.

• Remote Browser Isolation^[1][5]

  Keeper includes Remote Browser Isolation, endpoint privilege management and privileged session management.

  Keeper includes Remote Browser Isolation, endpoint privilege management and privileged session management. Keeper offers Remote Browser Isolation with capabilities that allow organizations to control access, secure infrastructure and protect both human and machine identities.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Keeper Security's categories, then alphabetical. A list from the record, never a ranking.

• On privileged access management, Keeper Security competes with Apono, BeyondTrust, Britive, CyberArk, Delinea, HashiCorp, P0 Security, SSH Communications Security, 1Password, Akeyless and 9 more.

• On password and secrets vaults for people, Keeper Security competes with 1Password, Bitwarden, LastPass, F-Secure, McAfee and SecurEnvoy.

• On remote browser isolation, Keeper Security competes with Menlo Security, HP, Skyhigh Security and Zscaler.

• On non-human identity security, Keeper Security competes with Akeyless, Infisical, Oasis Security, Aembit, Astrix Security, AuthMind, Clutch Security, Cygrid, NewCore, Token Security and 30 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 4.6 out of 5^[15]seen November 10, 2026

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• November 5, 2026

  Keeper Security announced Self-Managed Keeper, a self-hosted privileged access deployment option for air-gapped and cloud-restricted environments. Keeper Security Blog^[14]

• October 6, 2026

  Keeper Security said it now protects more than 100,000 organizations globally. Keeper Security Blog^[12]

• June 4, 2026

  Keeper Security introduced Workflow for KeeperPAM, a capability requiring approved, time-bound access requests to eliminate standing privilege. Keeper Security Blog^[13]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]keepersecurity.comKeeper Security · keepersecurity.com · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
2. [2]Company password manager demoKeeper Security · keepersecurity.com · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
3. [3]Keeper Security | Identity Security for Humans, Machines and AI AgentsKeeper Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
4. [4]How Keeper Secures Passwords, Secrets and AccessKeeper Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
5. [5]Enterprise Password Management | Keeper SecurityKeeper Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]Secure Remote Database Access - Keeper SecurityKeeper Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]Keeper Security Features for Passwords, Secrets and AccessKeeper Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]Keeper Security Tenable IntegrationKeeper Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]Role-Based Access Control (RBAC) for Credentials | KeeperKeeper Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
10. [10]Enforce Two-Factor Authentication with KeeperKeeper Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
11. [11]Smartwatch Two-Factor Authentication with Keeper DNAKeeper Security · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
12. [12]Keeper Security Surpasses 100,000 Enterprise Customers as Organizations Consolidate Identity Security Solutions in the Agentic Era - Keeper Security Blog - Cybersecurity News & Product UpdatesKeeper Security Blog · published October 6, 2026 · Tier A: the company, a regulator or a filing
13. [13]What's New With Keeper | June 2026Keeper Security Blog · published June 4, 2026 · Tier A: the company, a regulator or a filing
14. [14]Self-Managed Keeper Brings Zero-Trust Privileged Access Management to Air-Gapped and Critical Infrastructure Environments - Keeper Security Blog - Cybersecurity News & Product UpdatesKeeper Security Blog · published November 5, 2026 · Tier A: the company, a regulator or a filing
15. [15]Keeper Business Password Manager Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Last verified November 5, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded November 5, 2026, expanded November 10, 2026 from the references above.

Work for Keeper Security? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.