Keeper Security review (2026): features, pros and cons, and what to check before you buy
Zero-knowledge business password manager that scales into a privileged access management suite, with the most compliance certifications of this group.
Our take for buyers
Keeper Security is a zero-knowledge business password manager that scales into privileged access management, and it carries the most compliance certifications of its group. It lists FedRAMP High, GovRAMP High, SOC 2, ISO 27001, 27017 and 27018, HIPAA, GDPR, FIPS 140-3 and PCI DSS Level 1. G2 shows 4.6 from 1,179 reviews. Higher tiers are quote only, so ask for written pricing for SSO before committing.
It suits regulated or government-adjacent buyers and teams that expect to add PAM or secrets management later. It is less suited to buyers who want a flat published price for SSO, since prices for higher tiers are not public. Reviewers praise deep admin and PAM extensions. Its extensions into PAM and secrets management matter if you expect your needs to grow.
Pros
- Broad security certifications.
- Deep admin and PAM extensions.
Cons
- Add-ons make total cost hard to predict.
- No public price for higher tiers.
- Best for
- Regulated or government-adjacent buyers needing FedRAMP, FIPS 140-3 or HIPAA alignment.
- Starting price
- $2 per user/month (Business Starter, third-party reported)
- G2 rating
- 4.6 (1,179 reviews)
What is Keeper Security?
Zero-knowledge business password manager that scales into a privileged access management suite, with the most compliance certifications of this group. Keeper is a zero-knowledge business vault that can grow into privileged access management. It stands out for the longest certification list in this group, though add-ons for reporting make the final bill harder to predict. Keeper Security was founded in 2011 and is based in Chicago, US.
Category: Business Password Managers
Keeper Security key features
| Criterion | What we found |
|---|---|
| Shared vaults and permissions | Shared folders and records (vendor product, details not re-verified) |
| SSO and directory sync | SSO/SAML and SCIM listed on the Enterprise plan. |
| Admin console and reporting | Advanced Reporting & Alerts and Compliance Reporting sold as add-ons. |
| Encryption and security record | Zero-knowledge, end-to-end encryption; FedRAMP High, ISO 27001/27017/27018, SOC 2, FIPS 140-3 listed. |
| Pricing model | Per user per month billed annually, add-ons extra. |
| Target company size | SMB through enterprise and government. |
Keeper Security plans and pricing
| Plan | Price | Unit | Notes |
|---|---|---|---|
| Business Starter | $2 (third-party) | per user/month, billed annually | Aimed at 5 to 10 users |
| Business | Not published by the vendor | per user/month, billed annually | |
| Enterprise | Request a Quote | per user/month, billed annually | SSO/SAML and SCIM listed |
| KeeperMSP | Contact sales |
Keeper's pricing page shows no prices. Cybernews says Starter starts at $7 per month billed annually (flat), CostBench and security.org say $2 per user; sources conflict.
Who should shortlist Keeper Security
A strong fit for
- Regulated or government-adjacent buyers needing FedRAMP, FIPS 140-3 or HIPAA alignment.
- Teams that expect to add PAM or secrets management later.
A weak fit for
- Buyers who want a flat published price for SSO.
- Very small teams wanting the cheapest possible per-seat cost.
Keeper Security alternatives
1PasswordSmall teams of up to 20 via the Starter Pack.
DashlaneSmall and mid-size teams that want a polished employee-facing app.
BitwardenBudget-conscious teams: $4 per user per month for Teams.
LastPassTeams already on LastPass wanting familiar admin tooling.
NordPassCost-focused SMBs on Google Workspace.
PassboltTechnical teams that want to self-host and audit the code.
Security, admin and compliance
Keeper lists FedRAMP High, GovRAMP High, SOC 2, ISO 27001, 27017, 27018, HIPAA, GDPR, FIPS 140-3 and PCI DSS Level 1, with a zero-knowledge, end-to-end encrypted architecture. SSO/SAML and SCIM are on the Enterprise plan. Audit logs, data residency, a DPA, support terms and implementation terms are not published. Billing is annual. Ask for the DPA, data location options and which reporting add-ons your audit needs, along with their prices.
- SAML SSO
- Enterprise.
- SCIM provisioning
- Enterprise.
- Certifications
- FedRAMP High, GovRAMP High, SOC 2, ISO 27001, ISO 27017, ISO 27018, HIPAA, GDPR, FIPS 140-3, PCI DSS Level 1.
Contract and buying terms
- Contract
- Billed annually.
- Starting price
- $2 per user/month (Business Starter, third-party reported)
- Pricing model
- Per user.
- Free plan or trial
- Free trial.
What to test in a Keeper Security demo or trial
Test the admin side, not just the vault. Set up shared folders and records for a real team, and check sharing controls. Connect your directory using AD/LDAP, then test SSO/SAML and SCIM, which are listed on Enterprise. Ask for a demo of Advanced Reporting and Alerts and Compliance Reporting, since they are sold as add-ons, and check what your auditors need from them. If you may need PAM, test credential rotation and SIEM integration. Ask for an itemized quote, as reviewers say add-ons make cost hard to predict.
Questions to ask Keeper Security before you sign
These are the points Keeper Security's public pages leave open. Get the answers in writing before procurement signs off.
- Which plan includes audit logs, and how long are they kept?
- Where is our data stored, and can we choose the region?
- Can we sign your standard DPA without changes?
- What will the price be at renewal, and is the increase capped?
Things to know before a demo
- SSO/SAML and SCIM sit on the Enterprise plan per the pricing page.
- Reporting, session management, SIEM and credential rotation are paid add-ons without published prices.
- Starter targets 5 to 10 users.
- Buy Now links default to 5 users.
Keeper Security FAQ
What is Keeper Security used for?
Keeper is a zero-knowledge business vault that can grow into privileged access management. It stands out for the longest certification list in this group, though add-ons for reporting make the final bill harder to predict. It suits regulated or government-adjacent buyers needing FedRAMP, FIPS 140-3 or HIPAA alignment.
Does Keeper support SAML SSO and SCIM?
Yes, SSO/SAML and SCIM are listed on the Enterprise plan.
Which compliance certifications does Keeper list?
FedRAMP High, GovRAMP High, SOC 2, ISO 27001, 27017 and 27018, HIPAA, GDPR, FIPS 140-3 and PCI DSS Level 1.
Who is Keeper best for?
Regulated or government-adjacent buyers needing FedRAMP, FIPS 140-3 or HIPAA alignment, and teams that expect to add PAM or secrets management later.
Vendor profile
- Founded
- 2011.
- Headquarters
- Chicago, US.
Sources
Every fact on this page comes from Keeper Security's own pricing, product or documentation pages, G2 and company records, checked on October 24, 2026. Unknown values are left out instead of estimated.