Keeper adds browser isolation to privileged access

Keeper Security has added new Remote Browser Isolation features to its privileged access management product, KeeperPAM. The update also extends the company's AI-based session monitoring to more protocols, including browser isolation sessions.

The changes target web-based privileged access tasks that often involve multiple browser tabs, pop-up windows, file transfers and JavaScript-heavy applications. The goal is to let users complete those workflows inside an isolated browser session rather than outside managed controls.

Remote browser isolation runs web activity in a separate environment instead of on the user's device. In privileged access settings, it is used to reduce the risk of exposing credentials, files or internal systems when staff connect to cloud services or internal web applications.

The latest version supports multi-tab browsing within a single isolated session. It also supports JavaScript alerts, prompts and confirmation dialogues, which are often required for modern web applications and single sign-on processes.

Keeper has also introduced administrator-controlled file uploads in isolated browser sessions. The setting is disabled by default and must be turned on for specific connections, allowing organisations to decide where users can transfer files during a session.

These additions address a common problem in browser isolation products, where restricted browsing behaviour can make ordinary tasks difficult to complete. Security teams have long faced a trade-off between locking down sessions and allowing staff to use web tools in ways that match standard business workflows.

KeeperAI can now analyse browser isolation sessions in real time alongside other connection types. The system is designed to review activity, produce summaries and flag behaviour that appears outside the intended scope of a privileged task.

The announcement reflects a broader industry push to apply AI tools to session oversight and access governance. Cybersecurity suppliers have been adding automated analysis to privileged access products as customers seek to manage larger volumes of recorded activity without relying entirely on manual review.

Workflow Focus

The revised browser isolation functions are available directly from the Keeper Vault and do not require a virtual private network for access. Sessions remain recorded and centrally visible to administrators, while access can be limited to approved websites.

Password autofill is also built into isolated browser sessions. That allows login details to be inserted into websites without sending them to the end user's local device.

These controls are intended to support access to both internal and external web applications, particularly where organisations want to keep browsing activity away from potentially unmanaged or compromised endpoints. File uploads, when enabled, are aimed at tasks such as document submission, media transfer and browser-based collaboration.

Craig Lurey, Chief Technology Officer and Co-founder of Keeper Security, said organisations often limit where they use remote browser isolation because conventional products interrupt web tasks.

"Many organizations deploy remote browser isolation selectively because traditional RBI breaks modern web workflows, forcing users to bypass controls when tasks become impractical," said Lurey.

"Keeper's updates remove the most common challenges to ensure users have a seamless experience while enabling continuous monitoring and intelligent threat detection across every privileged session," he added.

Access Model

Keeper described the browser isolation feature as part of its broader privileged access management platform, which can be used as a cloud service or deployed on premises. According to the company, the session technology provides agentless access to infrastructure, web applications and isolated browsing sessions, with recording and encryption built into the platform.

Privileged access management products are used to control and monitor administrator-level or sensitive system access. They have become a larger part of enterprise security spending as companies try to tighten oversight of third-party contractors, remote staff and cloud administrators who handle high-risk systems.

Browser-based access has become more important in that market as internal tools and administrative consoles move into web interfaces. That shift has increased pressure on vendors to support more complex browser behaviour while keeping the session separate from the user endpoint.

The new functions will be delivered through Gateway 2.24 and Keeper Vault 17.6.