Singapore – Keeper Security has introduced integrations with Tenable to help organisations automate cloud security remediation and centralise privileged credentials used in vulnerability assessments.
Announced in Singapore on 16 October, the integrations connect Tenable’s cloud risk detection capabilities with Keeper’s identity security platform, allowing security teams to act on findings without manually managing tickets or switching between tools.
The integration enables teams to respond to identified risks through actions such as rotating compromised credentials, enforcing just-in-time (JIT) access and removing standing privileges. Once remediation is complete, Keeper automatically notifies Tenable and updates the finding’s status to resolved.
“Organisations can’t remediate findings if they aren’t properly equipped to take action immediately,” said Darren Guccione, CEO and Co-founder of Keeper Security.
“As AI-powered threats increase the onslaught of cyber attacks and decrease the window of time in which cyber defenders can take action, this integration enables cloud security teams to implement fixes in seconds instead of weeks,” Guccione continued.
Automated remediation within the customer environment
The integration uses Keeper Encrypter, a self-hosted gateway deployed within the customer’s environment, to receive webhook traffic from Tenable and encrypt data exchanges using customer-managed private keys.
According to Keeper, synchronisation takes place through encrypted channels within the organisation’s perimeter, preventing cloud infrastructure from accessing unencrypted findings or credentials.
Security teams can send relevant Tenable findings to Keeper and select remediation actions based on the identified risk. These include rotating exposed credentials across databases, machines, cloud environments and directories, as well as enforcing JIT access to reduce standing privileges.
For cloud identities flagged by Tenable, teams can also onboard Privileged Access Management (PAM) user records without creating separate database, machine or directory resources. Remediation actions are logged to support auditing and compliance oversight.
“By connecting Tenable’s cloud detection directly to Keeper’s zero-trust remediation engine, we’ve built a closed-loop workflow that operates entirely within the customer’s perimeter,” said Craig Lurey, CTO and Co-founder of Keeper Security.
“Security teams can immediately execute targeted fixes – from automated credential rotation to JIT access enforcement – without leaving their workflow or exposing unencrypted data,” Lurey continued.
Centralised credentials for vulnerability scanning
A separate integration between Keeper Commander and Tenable addresses the management of credentials used during vulnerability scans.
Organisations commonly store passwords and SSH keys in Tenable scan policies, which can create additional exposure if either system is compromised. Under the integration, credentials are stored in Keeper and retrieved by Tenable when required to authenticate with target systems during a scan.
Credentialed scanning allows security tools to access target systems to assess installed software versions, configuration settings, patch levels and compliance status. The integration supports scans using SSH, Windows Server Message Block (SMB) and database credentials, while keeping secrets out of scan policies.
Credentials can be rotated automatically in Keeper, with Tenable retrieving updated values during the next scan without requiring manual changes to scan policies.
Availability
The Keeper Commander and Tenable integrations are available to Keeper customers with active KeeperPAM licences.
Keeper Security provides identity and privileged access management tools, including password and passkey management, secrets management, privileged session management and endpoint privilege management. The company also offers KeeperAI for threat detection across privileged sessions.
