Privileged credential protection
The keys to your infrastructure, under control.
CyberKey vaults admin credentials, decides who can reach each resource and records every session across IT and OT. Users connect from the browser; a proxy on the customer's network bridges to the servers.
Third-party access became a way in
Vendors and outside teams need admin access. Without control, those credentials travel by email and spreadsheet, and nobody knows who did what.
The path of a privileged session
-
Sign in
Everyone uses their own login: local, LDAP or SAML (such as a Microsoft account). No shared accounts.
-
Authorize
User, auditor and administrator roles, plus permissions per connection. Each person sees only what's granted.
-
Connect
The session opens in the browser and goes through the CyberKey proxy on the customer's network, using the vaulted credential.
-
Record
The proxy records the session for replay, and web console access is audited with suspicious-behavior alerts.
What CyberKey delivers
Privileged access control your team can actually use every day.
Vault and scoped access
Admin credentials in one place, with permissions by user, group and connection and user, auditor and administrator roles.
Browser sessions
RDP, SSH, VNC, Telnet and Kubernetes with no client installed, and clipboard control per connection.
Web access without the password
For web consoles, the CyberKey Chrome extension injects the credential: users sign in without knowing the password.
Live sessions
Admins see active connections, join a user's session (the user is notified) and terminate access on the spot.
Recording and audit
Searchable history with CSV export, replay of recorded sessions and retention on disk or in a bucket.
Dedicated deployment
Its own installation per customer, on-premises or in the cloud, with a dedicated database and panel and one or more proxies per network.
Who it's for
Infrastructure and SOC
Standardize admin access and have the trail ready for incident response.
Vendors and contractors
Grant scoped access without handing over passwords, with everything recorded.
OT environments
HMIs, SCADA servers and legacy equipment under the same control as IT.
Regulated environments
Privileged access evidence for auditors and regulators.
Frequently asked questions
What needs to be installed?
Nothing on the user's computer: sessions open in the browser, and web consoles use the CyberKey Chrome extension. In the customer's environment, the CyberKey proxy runs with network access to the target servers. It connects and records the sessions.
Can I give vendors access without sharing the password?
Yes. Access is granted per connection, the session uses the credential stored in the vault, and everything is recorded for audit.
How does sign-in work?
Everyone signs in with their own account: local, LDAP or SAML (for example, a Microsoft account). There are no shared logins.
How is it deployed?
Each customer has its own installation, on-premises or in the cloud, with a separate database and panel. One customer's data never shares a database with another's.
Explore more
- CyberVault Password vault A zero-knowledge password manager for individuals and businesses: passwords and 2FA codes encrypted on your own device.
- Tremor Tabletop exercises A crisis exercise platform where the participant's phone actually rings: simulated calls, messages, emails and news from regulators, press and attackers.
Watch a privileged session from start to finish.
In 30 minutes we show the vault, a recorded session and the replay, using your scenario.
Book a demo