The new integration allows the identity security platform of Keeper to fix the cloud security issues identified by Tenable within seconds, and to protect the privileged credentials used for vulnerability scanning.

Chicago, October 16, 2026 / PRNewswire / -- Today, we announce a native integration with Tenable aimed at eliminating the high-cost delays between identifying cloud security risks and implementing repairs. This integration also allows for centralized management of credentials, enabling comprehensive vulnerability assessments. With this integration, cloud security teams can proceed directly from detection to repair within a single workflow, without the need to manually create tickets or switch between different tools. Teams can now take immediate action based on the findings from Tenable, including rotating leaked credentials, enforcing immediate access controls ( Just-In-Time access ), and removing permanent permissions, all without leaving the Keeper platform. Organizations can also eliminate static credentials in their scanning policies by storing privileged credentials centrally in Keeper, allowing Tenable to automatically retrieve these credentials during scans for SSH, Windows targets, and databases.

Tenable can provide comprehensive visibility into exposed identities, risky access paths, and configuration errors in cloud environments. However, the gap between identifying these issues and implementing fixes remains a long-standing challenge for cloud security teams, as they typically need to manually handle this process across multiple tools. Teams may spend days or even weeks chasing approvals and switching contexts, during which time the risks continue to exist in the production environment, leaving vulnerability windows exposed and susceptible to exploitation.

The integration between Keeper and Tenable compensates for this gap by directly sending the cloud discovery results to the repair engine of Keeper. Once the discovery results enter the Keeper platform, the security team can immediately carry out targeted repairs – including credential rotation, immediate enforcement of JIT, and removal of permanent permissions – without having to leave the existing workflow. After the repairs are completed, Keeper will automatically notify Tenable and mark the discovery as resolved, without any need for manual follow-up. Throughout the cycle from detection to closure, there is no need for the team to switch platforms or manage tickets.

Keeper Security, Chief Executive Officer and Co-Founder, stated: "If an organization is not equipped with the tools to take immediate action, it will not be able to fix the problems that are identified. As threats driven by AI increase the intensity of cyberattacks and reduce the time window in which network defenders can take action, this integration enables cloud security teams to implement fixes within seconds rather than weeks."

Achieve closed-loop repair without exposure

This integration maintains a zero-knowledge architecture with Keeper at every step. Keeper Encrypter is deployed as a self-managed gateway in the customer's environment, receiving traffic from Tenable and using the customer-managed private key to encrypt data exchanges. All synchronization between platforms is conducted through encrypted channels and remains entirely within the organization's boundaries. The cloud infrastructure does not see any unencrypted discovery results or credentials, allowing the security team to perform automated repairs without exposing any information.

The repair process is simple yet comprehensive. The team sends the relevant Tenable findings directly to Keeper, and then selects an appropriate repair action for each finding. In cases of infrastructure intrusion, the team can rotate exposed credentials across databases, machines, cloud environments, and directories. For access control issues, they can enforce JIT access to eliminate permanent permissions on a large scale. For cloud identities marked with Tenable, the team can directly create PAM User records without the need for separate database, machine, or directory resources. Each repair action is recorded with a complete audit trail, providing compliance visibility.

Keeper Security, Chief Technology Officer and Co-Founder, stated: "By directly connecting the cloud detection of Tenable to Keeper's zero-trust repair engine, we have built a closed-loop workflow that operates entirely within the customer's boundaries. The security team can immediately carry out targeted repairs—ranging from automated credential rotation to the enforcement of JIT access controls—without having to leave the workflow or expose unencrypted data."

Centralized credential management for credential scanning

The integration of Tenable with Keeper Commander addresses another key challenge: protecting the credentials required to log into the system during vulnerability scanning for Tenable. Nowadays, organizations typically store passwords and SSH keys directly within the Tenable scanning policies; if either system is compromised, this approach increases the risk. With this integration, organizations now store these credentials securely in Keeper. When Tenable runs a scan and needs to log into the system, it requests the credentials from Keeper, which provides them securely without allowing them to remain in the configuration of Tenable.

Credential scanning enables the Tenable scanner to directly log in to the target system and perform a more in-depth assessment than without credential scanning, including checking the installed software versions, configuration settings, patch levels, and compliance status. This solution supports SSH, Windows ( SMB ), and database credential scanning, while excluding confidential information from the scanning policy. Credentials are automatically rotated in Keeper, and Tenable will obtain new values during the next scan, eliminating the need for manual policy updates.

For large-scale cloud risk management teams

Both of these solutions are specifically designed for security operations teams managing large-scale cloud infrastructure. Organizations can now use Tenable to detect cloud risks, immediately fix them through Keeper, and perform more in-depth vulnerability scans using centrally managed credentials, without the need to expose confidential information or switch between tools.

Keeper Commander and Tenable integration is now available to Keeper customers who possess a valid KeeperPAM license. To learn more about the zero-trust repair controls that connect Tenable to Keeper, as well as information on protecting credentials with authentication scans, please visit keepersecurity.com or schedule an Keeper Security demonstration immediately.

About Keeper Security

Keeper Security is a leading zero-trust and zero-knowledge identity security solution, trusted by millions of people and thousands of organizations around the world. KeeperPAM ® is Keeper's privileged access management platform, which integrates password and token management, key management, privileged session management, and terminal permission management into one cloud-native platform, all protected by quantum-resistant encryption. KeeperAI ® provides real-time, AI native threat detection in each privileged session. With the widespread adoption of AI proxies and identities becoming a defining attack surface, Keeper manages access permissions for human, machine, non-human identities, and AI proxies, serving as a unified control plane for access, compliance, and visibility across the enterprise. For more information, please visit KeeperSecurity.com.

Learn more: KeeperSecurity.com

Follow Keeper: Facebook, Instagram, LinkedIn, X, YouTube, TikTok

Media Contact

Katherine Benfield