SenhaSegura PAM

Increased security and performance for your PAM solution.

Strive to ensure the sovereignty of companies over actions and privileged information. To this end, we work against data theft through traceability of administrator actions on networks, servers, databases and a multitude of devices. In addition, we pursue compliance with auditing requirements and the most demanding standards, including PCI DSS, Sarbanes-Oxley, ISO 27001 and HIPAA.

Mission

To help organizations build sovereignty and security over access and privileged information.

Vision

To be the best privileged access management solution in the global market.

Access Management (PAM)

Manage the full cycle of high privilege credentials.

What it is

Centralized access management, with the purpose of protecting and controlling the use of generic and high privilege credentials, providing secure storage, access segregation and full traceability of use.

Benefits

Operational gain in the password change process;

Guaranteed password delivery in a secure and controlled manner;

Transparent authentication on the target system or network device without displaying the password to network administrators or third parties.

How it works

By configuring Access Groups, you can define the administrator users who will have permission to receive a physical access password, and the group of users who can use the remote access offered by the solution to access a target device or system. All cases may follow approval workflows and reasons provided by the requesting user.

Features

Secure storage of credentials and passwords;

Definition of groups for access segregation based on user profiles;

Flexibility in the approval process for access to privileged accounts (pre-approved accesses, accesses with single or multiple approval);

Possibility of more than one user requesting access to the same privileged account, without compromising usage traceability;

Emergency access for immediate password viewing, with reason request and alert to responsible parties if the approver is unavailable;

Dual password custody to ensure more than one presence in the access;

Integration with the Help Desk and Change Management tools to validate the reason provided by the requesting user;

Passwords change according to predetermined time of use or after consultation;

Automated password change on the main technological platforms, such as network, servers, database, web applications, and security equipment.

Technical features

Password storage using strong encryption standards (AES 256, SHA 256, RSA 2048 bits or higher and FIPS 140-2), and also using HSM devices;

Integration with leading directory services for managing groups and access profiles, and thus controlling credential use.