Keeper Security has launched native integrations with Tenable designed to eliminate the delay between identifying cloud security risks and carrying out remediation.
Tenable is an exposure management company, while Keeper is a zero-trust and zero-knowledge identity security platform provider.
Access deeper industry intelligence
Experience unmatched clarity with a single platform that combines unique data, AI, and human expertise.
According to Keeper, the process of acting on cloud security findings has remained a persistent challenge for security operations teams, which typically handle remediation manually across multiple tools.
Teams can spend days or weeks pursuing approvals and switching between systems while risks remain exploitable in production environments.
The integrations are expected to tackle this problem from two angles. The first establishes a unified remediation pipeline by channelling Tenable’s cloud findings directly into Keeper’s remediation engine.
From within a single platform, security teams can rotate compromised credentials for infrastructure covering databases, machines, cloud environments and directories, and enforce Just-In-Time (JIT) access to remove standing privileges at scale. Teams can also onboard privileged access management user records for flagged cloud identities without requiring separate database, machine or directory resources.
Keeper CEO and co-founder Darren Guccione said: “Organisations can’t remediate findings if they aren’t properly equipped to take action immediately.
“As AI-powered threats increase the onslaught of cyber attacks and decrease the window of time in which cyber defenders can take action, this integration enables cloud security teams to implement fixes in seconds instead of weeks.”
The workflow operates as a complete closed loop. When a fix has been applied, Keeper signals back to Tenable that the issue is resolved, removing the need for any manual handover.
A full audit trail accompanies every remediation action for compliance and reporting purposes, said Keeper.
Safeguarding this process is a security architecture built to keep sensitive data out of external infrastructure.
Keeper Encrypter, a self-hosted gateway component, is deployed within the customer’s own network, where it receives webhook traffic from Tenable. Every data exchange is protected with encryption keys that only the customer controls.
All communication between the two platforms remains within the organisation’s boundary, and at no point does cloud infrastructure encounter unencrypted findings or credentials.
Keeper co-founder and chief technology officer (CTO) Craig Lurey said: “By connecting Tenable’s cloud detection directly to Keeper’s zero-trust remediation engine, we’ve built a closed-loop workflow that operates entirely within the customer’s perimeter.
“Security teams can immediately execute targeted fixes – from automated credential rotation to JIT access enforcement – without leaving their workflow or exposing unencrypted data.”
The second integration addresses how credentials are managed during vulnerability assessments.
Credentialed scans, in which the scanner authenticates with target hosts to carry out more thorough inspections than uncredentialed scans allow, require valid credentials for SSH, Windows SMB and database connections.
Many organisations have historically stored those passwords and SSH keys directly within their scanning policies, creating additional exposure should either platform be compromised.
Through the Keeper Commander integration, credentials are instead held centrally in Keeper’s vault and delivered securely to Tenable each time a scan is initiated.
Because Keeper handles periodic credential rotation automatically, subsequent scans always use current values without anyone needing to adjust scanning configurations by hand. The deeper system access this provides enables teams to inspect installed software versions, review configuration settings, check patch levels and assess compliance status with greater precision.
Both integrations are built for security operations teams managing cloud infrastructure at scale and are available now to customers holding active KeeperPAM licences.
