Keeper Security named Overall Leader in non-human identity management

Keeper Security has been named an Overall Leader in the KuppingerCole Leadership Compass for Non-Human Identity Management. The report recognises Keeper's strength in securing machine identities and secrets across cloud-native and hybrid environments.

KuppingerCole evaluated over twenty companies working to manage and secure non-human identities. These include applications, containers, APIs, service accounts, and scripts. Keeper achieved recognition as an Overall Leader, a Product Leader, and an Innovation Leader. The report highlights Keeper's approach to lifecycle governance, automation, and integration through its Keeper Secrets Manager product.

Non-human identities now significantly outnumber human users in enterprise settings. Many organisations rely on these identities to access data and services online. Industry observers say the growth in machine-to-machine connections introduces new complexities to cybersecurity.

Darren Guccione, CEO and Co-founder of Keeper Security, commented on the development.

"Machine identities now outnumber human users by orders of magnitude, creating a new and urgent frontier in cybersecurity. Keeper's recognition as an Overall Leader reflects the strength of our zero-trust and zero-knowledge architecture and our focus on securing every identity, both human and machine, across modern infrastructure," said Guccione.

Keeper's platform uses a zero-knowledge encryption approach. It separates customer data and encryption keys. Keeper does not have access to customer secrets at any stage. Customers can centralise the management of non-human identities without increasing their exposure or supply chain risks.

The company's Keeper Secrets Manager manages the full lifecycle of machine identities. The solution removes the need for hardcoded credentials and unmanaged secrets in repositories and pipelines. Users can programmatically manage and rotate secrets according to identity, policy, and runtime context.

Automation and identity lifecycle management are in demand. The rise of DevOps and AI pipelines increases the number of non-human identities requiring secure administration.

Technical Features

The KuppingerCole report highlights Keeper's use of FIPS 140-3 validated cryptography. All data is encrypted on the client side. Keeper's design means encryption keys and vault information remain on the client. This model prevents centralised access and strengthens overall security.

Lifecycle management covers virtual machines, containers, microservices, and CI/CD agents. Keeper provides automated discovery, classification, and deprovisioning. Integration is available with Jenkins, GitHub Actions, GitLab, CircleCI, Bitbucket Pipelines, and Azure DevOps.

The platform supports compliance requirements for frameworks such as GDPR, HIPAA, PCI DSS, NIST SP 800-53, and ISO 27001. Features include real-time risk dashboards, behavioural anomaly detection, and SIEM integration.

Keeper's infrastructure operates across AWS, Azure, and Google Cloud environments. The platform is built for use in both cloud-native and hybrid settings.

Craig Lurey, CTO and Co-founder at Keeper Security, noted the report's findings.

"Keeper's recognition in this report reinforces how quickly identity security is evolving. Identity security is no longer limited to people. Non-human identities, AI agents and DevOps tools require access to data with least privilege controls and governance. Keeper's platform is designed to secure these interactions by default so organizations can rely on automation without increasing risk," said Lurey.

KuppingerCole identified Keeper as one of only nine Overall Leaders in the expanding market for non-human identity management. The report cites Keeper's technical strengths, market position, and focus on modern identity security. Analysts expect demand for such solutions to grow as the use of applications, APIs, and AI tools increases across industries.