Keeper Security introduces approval-based workflows to KeeperPAM, providing administrators with structured oversight.
Keeper Security announced the availability of Keeper Workflow within its KeeperPAM platform. The update is designed to provide organisations with structured, approval-based access controls and time-limited checkout policies for privileged resources, serving as a gatekeeper for enterprise identity, managing access requests for both human users and AI agents.
As AI agents become a foundational component of enterprise infrastructure, each deployment introduces a new identity and a potential attack surface. Keeper Workflow aims to address this by embedding approval-based controls directly into the PAM platform. This move is intended to facilitate a transition from ad hoc management to a scalable process that supports a zero standing privilege model.
Darren Guccione, CEO and Co-founder of Keeper Security, said: “With Keeper Workflow, we are enforcing the boundaries of AI and human access. This is zero trust in practice: structured, auditable and built to determine exactly when and if an identity is allowed to act inside the enterprise infrastructure.”
The new capabilities focus on several technical functions. Enhanced Access Control requires designated approver sign-off before a connection to a privileged resource is established; Vault Approval Notifications allow users to submit requests directly from the Keeper Vault or CLI, with approvers able to act via web, desktop, or mobile applications; Single-User-Mode and Time-Limited Enforcement restricts access to a resource to a single authorised user for a defined period.
These controls are particularly aimed at highly regulated sectors like financial services, healthcare, and government.
Craig Lurey, CTO and Co-founder of Keeper Security, said: “Because it’s natively integrated within KeeperPAM, organisations can enforce approval-based access controls and eliminate standing privilege with a solution that is both easy to deploy and simple to operate at scale.”
The integration is intended to provide precise oversight for sensitive environments, including regulated databases and critical administrative accounts.
Stay updated on crypto and AI by following our socials
