100% Cloud
Keeper is a fully managed service.
Requires hosted servers by customer or in the cloud.
Always On
The Keeper Vault backend is a managed service with an API that is Always On.
Some solutions require additional steps to unseal the vault before use.
High Availability Built-In
Keeper's backend service is automatically HA with no configuration by the customer.
HA requires multiple vault servers, clustering, storage engine and configuration.
Zero Maintenance
Keeper is a fully-managed service with unlimited scaling capacity.
Hosted infrastructure requires more servers to scale, and licensing may stop usage when limits are reached.
Works Offline
SDK and Client Devices support caching of Vault ciphertext.
Requests are typically routed through an on-premise server.
SSL Built-In
All requests to the Keeper vault service are encrypted with TLS and an additional layer of 256-bit AES to prevent MITM.
SSL certificates have to be self provisioned and involve complex installation procedures.
Zero-Knowledge Encryption Model
Client devices decrypt the Vault secrets locally after retrieval. Keeper has no ability to decrypt stored vault data.
Many solutions use REST APIs that are in plaintext or decrypt data on the server.
Zero-Trust Access Model for Vault Secrets
Device is scoped to specific secrets and least permission.
Many solutions have a break glass capability which overrides any trust models that have been setup.
Cloud-Based Reporting, Alerts and SIEM Integration
Cloud based auditing and reporting engine is built into all platforms, Admin Console, Vault clients.
Telemetry is typically sent to a SIEM where all alerting and detection has to be built manually.
Slack and Microsoft Teams Alerts
Ability to push events to Microsoft Teams, Slack or any other Third-party alerting system.
This feature is not available.
Browser Plugins
Web browser plugins available for all popular browsers - e.g. Chrome, Safari, Firefox, Edge.
Easy-to-use browser extensions are rarely available, and have limited capabilities.
End-User Web Vault
User-friendly Web Vault available from any location.
Vaults are typically only assigned to privileged users, forcing sharing and cross-team communication to use less secure channels.
Native Desktop Application
User-friendly Desktop application available for Mac, Windows and Linux.
Desktop applications are typically not available
iOS App
User-friendly native iOS application available for all users.
No mobile application for accessing vault secrets.
Android App
User-friendly native Android application available for all users.
No mobile application for accessing vault secrets.
Mobile App Autofill
Keeper autofills across all mobile web and native applications.
Autofill for mobile apps and sites is not available.
Cloud-Based Admin Console
Cloud-based Admin Console for provisioning users, devices and reporting.
Admin UI typically requires direct access to on premise components.
Website Autofill
Keeper can autofill secrets into any website.
Cannot autofill secrets across websites.
Native App Autofill
KeeperFill® for Apps provides native app autofill on Mac and PC devices.
Cannot autofill into end users native applications.
MSP Multi-Tenant Version
Keeper MSP version provides multi-tenant and reseller configuration.
Multi-tenant solutions are limited compared to Keeper.
Dark Web Monitoring
BreachWatch is built into the secrets manager vault for dark web monitoring.
No ability to monitor the dark web for breached secrets.
Personal Vaults for Family Members
Keeper provides a free consumer Family Plan license to all business customers.
Does not offer a consumer or end-user vault.