What is Keeper Secrets Manager (KSM)?
Keeper Secrets Manager is Keeper's secrets-management product for applications and infrastructure. It takes API keys, database credentials, certificates, and other machine secrets out of source code, config files, and CI/CD pipelines, and delivers them at runtime from Keeper's zero-knowledge vault. It plugs into the tools engineering teams already use — Kubernetes, GitHub Actions, Terraform, and the major CI systems — so developers stop hard-coding secrets without changing how they ship.
What is Keeper Connection Manager (KCM)?
Keeper Connection Manager is Keeper's agentless remote-access product. It brokers RDP, SSH, database, and Kubernetes sessions straight from the browser — no VPN, no endpoint agent, and no shared credential handed to the user. Sessions can be recorded for audit, and access is governed by Keeper's role model. It's how teams give admins and third parties privileged access without standing infrastructure exposure.
What's the difference between Keeper Enterprise and the consumer password manager?
The vault technology is the same zero-knowledge core, but Keeper Enterprise (Keeper Business) adds the controls an organisation needs: SSO and SCIM provisioning, enforced role-based policies, delegated admin, team folders, compliance reporting, and audit logging. It's built to be deployed across a workforce and governed centrally, rather than managed by each user on their own.
What does "zero-knowledge" mean for the Keeper Vault?
Your data is encrypted on your own device before it ever reaches Keeper, using keys only you hold. Keeper's servers only ever store ciphertext — so neither Keeper nor we can read your vault. Every Keeper product, from the password manager to Secrets Manager, sits on that same zero-knowledge vault, which is what lets password management, secrets, and connections share one source of truth without weakening the encryption model.
How do the Keeper products fit together?
One zero-knowledge vault underneath, four jobs on top: the Enterprise password manager for human credentials, Secrets Manager for application and machine secrets, Connection Manager for brokered remote sessions, and privileged rotation and control through KeeperPAM. You can adopt them individually or as a set — most teams start with the password manager and add Secrets Manager or Connection Manager as the need appears.
How fast can Keeper be deployed?
Because every Keeper product is cloud-native with no heavy on-prem infrastructure, most teams are live in days rather than months. We handle SSO and directory integration, policy and role design, and onboarding — for a single product or the whole platform.
Do you deliver the full Keeper PAM offering too?
Yes. If you're after privileged access management specifically — vaulting, rotation, and session control as a program — that's KeeperPAM, and it has its own page covering licensing, implementation, and managed services. This page is about the individual Keeper products and where each one fits.
