Revolutionizing privileged access management
Grade: A — Score: 95/100
Keeper Security employs a zero-trust and zero-knowledge architecture, ensuring that only authorized users can access and decrypt their data. With end-to-end encryption, Keeper protects sensitive information at all touchpoints, making it a robust solution for organizations facing increasing cyber threats.
The platform streamlines workflows by integrating seamlessly with existing identity providers and offering features such as role-based access control, advanced organizational structures, and automated user management. This allows IT leaders to efficiently manage access while maintaining strict security protocols.
In today's landscape of escalating cyber risks, Keeper Security mitigates potential breaches by providing proactive cybersecurity strategies and continuous validation through third-party assessments. Organizations can confidently safeguard their data and comply with stringent regulatory requirements.
Business Starter: $2.00/user/month (billed annually)
Business: $4.00/user/month (billed annually)
Enterprise: $6.00/user/month (billed annually)
KeeperPAM: Custom (Request a Quote)
Consider switching to CyberArk: CyberArk is a well-established competitor with a strong focus on enterprise-level privileged access solutions.
Keeper starts at $2.00/user/month (Business Starter) and scales through $4.00 (Business) and $6.00 (Enterprise), all billed annually. 1Password Business costs $7.99/user/month with dark web monitoring included. Keeper charges separately for features like BreachWatch ($24/user/year) and Advanced Reporting ($12/user/year), while 1Password bundles these into its base price. Keeper's key advantage is its upgrade path to KeeperPAM for privileged access management, secrets management, and session recording, which 1Password does not offer.
Keeper Business and Bitwarden Teams both cost $4.00/user/month, and both Enterprise plans cost $6.00/user/month. Keeper Business includes a free Family Plan for every user (worth roughly $103/year) that Bitwarden does not match. Bitwarden is open-source with a self-hosting option, while Keeper is proprietary and cloud-only. Keeper holds FedRAMP Authorization and FIPS 140-3 validation, which are required for U.S. government deployments and give it an edge in regulated environments.
KeeperPAM is not available as a standalone product. It builds on top of the Enterprise password management tier and adds secrets management, automated credential rotation, session recording, remote browser isolation, endpoint privilege management, and database management. Organizations that only need PAM without a password vault cannot purchase KeeperPAM separately.
Keeper holds SOC 2 Type 2 (over 10 years running), SOC 3, ISO 27001/27017/27018, FIPS 140-3, PCI DSS, and TrustArc privacy certification. It is FedRAMP Authorized at the Moderate impact level (since August 2022) and GovRAMP Authorized. Keeper is GDPR, CCPA, and HIPAA compliant, and supports ITAR requirements through its FedRAMP environment hosted on AWS GovCloud.
Yes. Keeper offers a 14-day free trial for business plans with no credit card required. The trial includes full access to the selected plan's features. Personal and Family plans also have trial options. Free tools are available without any account, including a password generator, passphrase generator, personal dark web scan, and business dark web scan.
Keeper's core password management plans start at $2.00/user/month, but several security features are priced as separate annual add-ons: BreachWatch (dark web monitoring) at $24/user/year, Advanced Reporting and Alerts at $12/user/year, Compliance Reports at $12/user/year, Endpoint Privilege Manager at $36/endpoint/year, KeeperChat (encrypted messaging) at $24/user/year, and Secure File Storage starting at $132/year. Secrets Manager and Connection Manager are custom-priced.
SSO (via SAML) and SCIM provisioning are available on the Enterprise plan ($6.00/user/month billed annually) and KeeperPAM. Keeper SSO Connect integrates with identity providers including Microsoft Entra ID (Azure AD), Okta, Google Workspace, and any SAML 2.0-compliant provider. Active Directory and LDAP sync are also Enterprise-only features. The Business Starter and Business plans do not include SSO or SCIM.
Yes. KeeperMSP is a dedicated multi-tenant platform for managed service providers. It provides separate vaults per client, centralized administration across all client organizations, delegated permissions, and shared team folder management. Keeper also offers a Privileged Access Manager for MSPs (KeeperPAM for MSPs) that extends secrets management and session recording to managed client infrastructure.