Keeper Security has announced the launch of its Visual Studio Code (VS Code) extension, extending its enterprise-grade secrets management directly into developers’ coding environments. The VS Code extension expands the KeeperPAM® platform’s reach into the developer ecosystem, enabling secure, zero-trust secrets management throughout the software development lifecycle.
Effective secrets management is vital for developers, as it safeguards the sensitive credentials and keys that keep applications secure. If items like API keys, tokens, or certificates are left exposed, whether through plaintext storage, embedding them in code, or casually sharing them, they can open the door to significant security breaches and system compromise.
The new Keeper VS Code extension allows developers to save, retrieve, generate and execute commands using secrets stored in their Keeper Vault, eliminating the need to leave their coding environment or expose sensitive information in configuration files. This direct integration supports both Keeper Commander CLI and Keeper Secrets Manager, providing organisations with the flexibility to align with their preferred infrastructure and security requirements.
Craig Lurey, CTO and Co-founder of Keeper Security, said: “Developers play a critical role in securing the software supply chain. Integrating Keeper directly into Visual Studio Code empowers teams to develop securely from the start. By embedding zero-trust principles into their workflows, developers can protect secrets and maintain compliance without slowing innovation.”
This launch reflects Keeper’s continued dedication to delivering unified privileged access and secrets management capabilities that align with the evolving needs of modern enterprises and development teams.
The Keeper VS Code extension offers a range of powerful capabilities, including the ability to save, retrieve, and generate secrets directly from the Keeper Vault. It supports flexible operation through either the Keeper Commander CLI or Keeper Secrets Manager modes. The extension can automatically detect hardcoded credentials, such as API keys and tokens, to help developers quickly address security risks. It also enables secure command execution by injecting secrets from the Vault at runtime, and provides logging and debugging tools for greater visibility and easier troubleshooting.
By integrating secrets management directly into VS Code, Keeper helps organisations reduce secret sprawl, prevent accidental exposure and maintain compliance with zero-trust and least-privilege security frameworks.
Keeper Secrets Manager is part of Keeper’s unified privileged access management platform, KeeperPAM®. Built on a zero-trust, zero-knowledge architecture, KeeperPAM combines enterprise password, secrets and connection management with endpoint privilege management, zero-trust network access and remote browser isolation in a single cloud-based platform. Keeper’s Secrets Manager eliminates the need for manual secrets distribution, enforces least-privilege access and enables automated credential rotation, strengthening security while accelerating development workflows. With centralised visibility, detailed audit trails and API integrations that fit seamlessly into existing toolchains, KeeperPAM empowers developers to code faster, deploy securely and maintain compliance with minimal overhead.
Keeper’s new extension is available now in both the Visual Studio Marketplace and Open VSX Registry, ensuring compatibility with VS Code and its derivatives, such as Cursor.
