Keeper Security has announced the launch of Self-Managed Keeper, a new self-hosted deployment option designed to bring privileged access management (PAM) capabilities to highly restricted and disconnected environments.
The solution enables government agencies, critical infrastructure operators and highly regulated enterprises to manage credentials, secrets and privileged sessions entirely within their own infrastructure, without depending on external cloud services.
The launch aims to address the security and operational challenges faced by organisations in sectors such as defence, energy, utilities, financial services and industrial operations, where network connectivity may be restricted or prohibited due to regulatory, security or operational requirements.
Self-Managed Keeper allows organisations to deploy PAM capabilities across on-premises infrastructure, private cloud environments, air-gapped networks and Operational Technology (OT) systems. By removing external cloud dependencies, the solution gives security teams greater control over where sensitive data is stored and how privileged access is managed.
“For organisations operating in disconnected or highly restricted environments, dependence on external cloud connectivity can create unacceptable operational risks,” said Craig Lurey, CTO and Co-founder of Keeper Security. “Self-Managed Keeper brings enterprise-grade privileged access management to these environments while enabling organisations to maintain complete control over their security infrastructure.”
For critical infrastructure operators, maintaining access to privileged credentials during connectivity disruptions can be essential to restoring systems and sustaining operations.
Self-Managed Keeper addresses this requirement by providing credential management, secrets management and privileged session management through the KeeperPAM Gateway. The platform also includes KeeperDB, the Keeper Admin Console and Keeper APIs.
Running in Docker containers on customer-controlled Linux infrastructure, the solution enables organisations to maintain privileged access capabilities independently of external internet connectivity.
According to Keeper, the platform offers several key capabilities, including support for fully air-gapped networks, customer-controlled data residency and self-hosted deployment management. It also retains Keeper’s zero-knowledge architecture, with credentials and secrets encrypted and decrypted on users’ devices.
The new deployment option complements Keeper’s existing cloud-native offerings, extending its PAM capabilities to organisations that must maintain strict control over their infrastructure and sensitive information.
“Organisations operating complex OT and defence networks face a unique challenge: maintaining strict security and operational requirements while keeping pace with modern cybersecurity capabilities,” said Shane Barney, CISO of Keeper Security.
“Self-Managed Keeper bridges that gap, bringing advanced privileged access management to highly restricted environments where conventional cloud deployments are not an option. Security teams can modernise how they protect critical systems without compromising the infrastructure requirements that keep those environments secure.”
