Self-Managed Keeper is a self-hosted deployment option that brings its privileged access management (PAM) capabilities to environments where external cloud connectivity is restricted, unavailable or prohibited. Launched by Keeper Security, it is aimed at government agencies, critical-infrastructure operators and highly regulated enterprises across sectors including defence, energy, utilities, financial services and industrial operations.
Self-Managed Keeper enables organisations to manage credentials, secrets and privileged sessions entirely within their own infrastructure, including on-premises systems, private cloud, air-gapped networks and operational technology (OT) environments. The platform runs in Docker containers on customer-controlled Linux infrastructure, removing the need for connectivity to Keeper’s cloud services.
Operational resilience
For critical-infrastructure operators, maintaining access to privileged credentials during a connectivity disruption can be essential to restoring systems and sustaining operations. Self-Managed Keeper is designed to preserve that access independently of external cloud or internet connectivity, supporting operations in restricted or disconnected environments.
The solution includes credential management, secrets management and privileged session management through the KeeperPAM Gateway, alongside KeeperDB, the Keeper Admin Console and Keeper APIs. Encrypted credentials and secrets can be stored within customer-controlled infrastructure to support data-residency and internal security requirements.
Craig Lurey, chief technology officer and co-founder of Keeper Security, said dependence on external cloud connectivity can create unacceptable operational risks for organisations working in disconnected or highly restricted environments.
“Self-Managed Keeper brings enterprise-grade privileged access management to these environments while enabling organisations to maintain complete control over their security infrastructure,” he said.
Asia-Pacific relevance
The launch is particularly relevant to Asia-Pacific operators of power grids, water utilities, transport networks, manufacturing plants and other industrial systems, where OT environments are often isolated from enterprise IT networks for safety, resilience and regulatory reasons.
Self-Managed Keeper is intended to support fully disconnected OT networks, defence environments and isolated agency infrastructure without requiring a connection to Keeper’s cloud.
Keeper said its zero-knowledge architecture encrypts and decrypts credentials and secrets on users’ devices, meaning the company cannot access customer data. The company positions the platform as a way for security teams to modernise privileged-access controls without compromising the infrastructure constraints that protect critical systems.
Shane Barney, chief information security officer at Keeper Security, said organisations operating complex OT and defence networks face the challenge of maintaining strict security and operational requirements while adopting modern cybersecurity capabilities.
“Self-Managed Keeper bridges that gap, bringing advanced privileged access management to highly restricted environments where conventional cloud deployments are not an option,” he said.
Identity security focus
Keeper describes itself as a zero-trust and zero-knowledge identity-security platform serving more than 100,000 business customers across more than 150 countries. Its platform combines privileged access, secrets, remote connections, endpoints and databases in a single control plane, with just-in-time access, session control and audit trails.
