A secure vault and monitor for the most powerful accounts, like system administrators. Access is checked out, and sessions are recorded.
Credentials go in an encrypted vault. Users request access, optionally with approval, and the system connects them without revealing the password. Sessions can be recorded.
Privileged accounts can change the rules that control inmates. Administrators need to know who used those accounts, when, and what they did.
- Records admin and vendor sessions.
- Stops shared admin passwords.
- Requires approval for sensitive access.
- Password vault with rotation.
- Approval workflows.
- Session recording and audit.
- ZTNA checks before privileged access.
| Control | Priority | How this helps |
|---|---|---|
| AC-6Least Privilege | P1* | Limits privileged access. |
| AC-2Account Management | P1 | Controls privileged accounts. |
| IA-5Authenticator Management | P1 | Manages and rotates credentials. |
| MA-4Nonlocal Maintenance | P3 | Controls and records vendors’ remote maintenance. |
| AU-2Event Logging | P2* | Logs privileged sessions. |
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table