About Us

Keeper Secrets Manager, the First Zero-Trust, Zero-Knowledge and Cloud-Native Solution for Securing Infrastructure Secrets

Keeper Security, a global leading provider of zero-trust and zero-knowledge cybersecurity software that includes password management, dark web monitoring, digital file storage, and messaging, has launched Keeper Secrets Manager, a new cloud-based, zero-knowledge solution for securing infrastructure secrets such as API keys, certificates, database passwords, access keys, and other types of private information.

“Over 80% of successful data breaches involve compromised credentials, and to a cybercriminal, the most desirable credentials are the ones with full access to an organization’s most sensitive data. Yet these highly sensitive and privileged credentials are almost always hardcoded into source code, CI/CD systems or config files. Keeper Secrets Manager enables organizations to protect these ‘hidden’ credentials across all of its infrastructure,” says Darren Guccione, CEO and Co-founder of Keeper Security.

Keeper Secrets Manager is a completely managed and cloud-based security solution that leverages an innovative patent-pending security architecture. Keeper’s top-rated enterprise password management (EPM) technology also uses the same zero-knowledge security methodology. Keeper Secrets Manager seamlessly integrates into nearly any data environment without requiring additional hardware or cloud-hosted infrastructure, whereas competing secrets management solutions require customers to buy special hardware, install a proxy service, or use a specific cloud services provider. It integrates with a range of DevOps tools out of the box, including Github Actions, Kubernetes, Ansible, and others.

“Fast and seamless integration into organizations’ existing tech stacks is where Keeper Secrets Manager shines. Organizations can get Keeper Secrets Manager up and running in about 20 minutes, which is less than the time it would take just to download competing solutions’ appliances.  Keeper Secrets Manager is an elegant and secure solution for managing infrastructure secrets, without any added complexity, maintenance or security issues,” notes Craig Lurey, CTO and Co-founder of Keeper Security.

Keeper Secrets Manager is a logical complement to Keeper Enterprise Password Management (EPM). Keeper’s Advanced Reporting and Alerts Module (ARAM), BreachWatch, Webhooks, SIEM connectivity, and compliance tools are all integrated within the Keeper Web Vault, Desktop App, and Admin Console.

1Password Launches Events API To Provide Real-time Data Streaming To Third-party Platforms

1Password, the industry leader in enterprise password management, announced the release of Events API, a new way for security teams to gain more data visibility and actionable insights. While events have always been available to administrators in 1Password, this new feature focuses on the information available by allowing events to be piped directly to tools like Splunk and other SIEM platforms, providing a holistic view that can be correlated with data from other sources.

In commercial contexts, the number of attacks and breaches has never been higher. While recent news cycles have focused on the most serious incidents, smaller but harmful attacks occur on a daily basis, if not more frequently. Losses from cybercrime have increased six times by 2020. Nearly half of the organizations in the United Kingdom have experienced some type of cybersecurity attack, with the average cost of a data breach approaching $4 million.

According to 1Password’s own research, 77 percent of DevOps and IT experts admitted to still having access to prior employers’ infrastructure, posing a significant security risk to affected firms.

1Password is the first line of defence for over 80,000 corporates globally securing passwords, confidential documents, and infrastructure secrets to protect their employees, customers and intellectual property. This  announcement is yet another step in solidifying the company’s position as a reliable enterprise solution for safeguarding mission-critical data. The 1Password Events API extends beyond the platform, allowing event data to exit while maintaining client privacy and data security.

Jeff Shiner, CEO of 1Password said, “With today’s launch of the 1Password Events API, our enterprise customers are able to access far deeper information than ever before, and most importantly, that information can now be used in an actionable way through the SIEM tools already in place. This will enable administrators to prevent future attacks, and if something does happen, take fast and decisive action. We’ve managed to do all this while protecting the privacy and security of our customers.”

Brian Jack, CISO at KnowBe4 said, “We’ve been using 1Password for over 4 years and it’s been a huge asset in securing our employee passwords and other sensitive information. With over 1000 employees, understanding who is accessing and using data within 1Password is very important to us. Events API has allowed us to integrate with our SIEM and use that data to highlight suspicious activity that will help us protect against future threats, as well as enabling us to quickly react to any active insider attack, should it ever happen.”

Stytch raised $30M for an API-first passwordless authentication platform

Stytch has raised $30 million in Series A fundraising led by Thrive, with participation from Coatue, Benchmark and existing investors, Benchmark and Index. Gaurav Ahuja of Thrive and Benchmark’s Chetan Puttagunta have joined as board of directors. Matthew Prince, Cassidy Williams, Neha Narkhede, and Joshua Browder are among the new angel investors on board.

They saw passwords firsthand at Plaid, both in terms of security and usability. They saw how easily people gave up when the authentication procedure became too difficult and easy passwords left users vulnerable to account takeover attacks.

Authentication, which underpins all of our online interactions, has been stuck in the 1990s despite the fact that user experience and security have both improved over the last few decades.

That’s why Stytch was created – to make the next generation of authentication passwordless.

They believe in developing tools and infrastructure that allow integrating authentication into apps and websites easier, faster, and safer. By adopting passwordless technologies, they’re making it simple to upgrade users’ authentication flows and provide exceptional user experiences.

Alternative authentication techniques have risen in popularity in recent years, utilising developments in both hardware (e.g. biometrics, YubiKey) and software (e.g. APIs for programmatic text + email), paving the way for a password-free future. However, developing a reliable new authentication system is a major job, requiring organisations to dedicate entire teams to the task. They see this as a huge opportunity to assist developers transition to a new era of authentication, where they can use simple APIs and SDKs to incorporate passwordless authentication solutions.

More than 350 developers are already using the Stytch platform to design user onboarding and login flows that include email magic links, SMS and WhatsApp passcodes, and one-click user invitations. They said that they have seen enterprises of all sizes drawn to the straightforward developer experience and flexibility given by their API-first strategy, including a handful of Fortune 500 companies who use the platform.

With the new funding, they want to introduce a variety of new authentication options to the platform, including mobile biometrics, WebAuthn, OAuth logins, QR codes, and push notification login. They are also beefing up the user infrastructure features that make Stytch the easiest and most frictionless method to onboard and engage users, such as session management, account recovery, and more effective fraud detection.