Keeper Security Achieves FedRAMP® High Authorization

This designation marks a significant advancement in Keeper’s public sector mission, expanding the company’s ability to secure mission-critical systems essential to law enforcement, emergency response and critical infrastructure protection. It builds on Keeper’s FedRAMP Moderate Authorization, achieved in August 2022, and affirms its commitment to meeting the most stringent U.S. federal cybersecurity standards.

The Federal Risk and Authorization Management Program (FedRAMP) establishes a unified approach for evaluating, authorizing and continuously monitoring the security of cloud services used by federal agencies. The High Impact designation applies to systems where unauthorized access or disruption could cause severe or catastrophic harm to agency operations, assets or individuals. Keeper’s authorization confirms that KSGC has been assessed against and meets the FedRAMP High baseline controls defined in NIST SP 800-53 Rev. 5, enabling agencies to strengthen their zero-trust adoption and accelerate secure cloud transformation.

KSGC is a unified, cloud-native zero-trust PAM platform that combines:

Password, passkey and secrets management
AI-enabled privileged session monitoring
Zero-trust network access
Endpoint privilege management
Remote browser isolation

With these capabilities, agencies can enforce least-privilege access, mitigate credential sprawl and gain real-time visibility into privileged activity across their environments.

KSGC integrates seamlessly with federal identity providers and supports CAC and PIV smart card authentication, enabling agencies to align with federal identity assurance requirements, such as FIPS 201 and NIST SP 800-63. Built on Keeper’s zero-trust and zero-knowledge architecture, KSGC ensures users maintain exclusive control over their data and encryption keys. The platform delivers a human-centric approach to cybersecurity that protects against ransomware and insider threats, providing actionable cybersecurity insights. KSGC supports agencies in meeting Federal Information Security Modernization Act (FISMA) mandates and Federal Information Technology Acquisition Reform Act (FITARA) reporting obligations, including role-based access controls and multi-factor authentication, while supporting strict regulatory frameworks such as NIST and International Traffic in Arms Regulations (ITAR).

Keeper’s FedRAMP High Authorization complements a broad range of independent validations and certifications including FIPS 140-3, GovRAMP Authorization, SOC 2 Type II and SOC 3 attestation, ISO 27001, 27017 and 27018, and inclusion on the Cybersecurity and Infrastructure Security Agency (CISA) Continuous Diagnostics and Mitigation (CDM) Approved Products List. Keeper protects more than 100,000 organizations globally, including leading federal agencies such as the Departments of Justice, Energy, Transportation and the Interior, the Federal Emergency Management Agency and the National Aeronautics and Space Administration.

The Keeper Security Government Cloud is available on the FedRAMP Marketplace.