Feature

Password Storage & Management

Enterprise secret management
User managed accounts
Devop secret management
Supports Credential Injection for secure sessions
Web-based Access
Concurrent and nonsimultaneous credential check out
Windows Service Accounts Password Management
SSH Key Management

Application-to-Application (A-to-A), Application-to-Database (A-to-

DB) Password Management to Eliminate Hard-coded Passwords

Password Encryption
Password Ownership
Fine-grained, role-based permission to view/ edit/ manage
Passwords
Grouping Resources / Passwords Bulk Operation
Multi-tenancy
IPV6 Support

Discovery
Automatic Discovery of IT Assets and Privileged Accounts
Password Ages
Privileged User Identification
Privileged Group Identification
Targeted Network and Subnet Discovery
Export of Credentials and Endpoints
Discovery Risk Assesment Reports
Command line option
NMAP

Remote Network Password Management

Synchronizing Passwords of Remote Resources

Agent-less Remote Password Rotation

Scheduled, Automatic Password Rotation
Verifying the Integrity of the Passwords in Target Systems
Windows Service Account Reset

Provision for triggering any follow-up action after Password Reset

Direct Connection to Remote Resources in Data Centers by

Configuring Landing Servers (ZoneProcessors or Jumpoint)

Automatic Rotation of Credentials

Operating Systems:
Windows Local
Windows Services
Unix Linux (SSH/Telnet)

Directories
Microsoft Active Directory
OpenLDAP
Novell eDirectory

Network Devices
Cisco Devices (IOS, CaTOS, PIX)
Juniper Devices

Databases
Microsoft SQL Server
Oracle Databases
MySQL
PostGres

Cloud Services IAM accounts:

AWS
Azure
Google
Rackspace

Password Access Control Workflow

Enforcing authorized users to request the release of specified
accounts only after approval one or more designated approvers
for dual approval
Time-limited access to passwords
Exclusive access to passwords for users
Notifications / Alerts on Check-in, Check-out of Passwords

Password Auto-rotation after the end of exclusive use by a user

Password Caching

Authentication
AD/LDAP Authentication
Local User Authentication
RADIUS Server Authentication

LDAP servers supported

Two-Factor Authentication
Supports Primary and Secondary Authentication schemes
OATH
API

User Management
Importing Users from AD/LDAP
User Groups for Bulk Operations
Role-based Access Restrictions
Optional Super-admin with Access to all Managed Passwords
(Break Glass Provisions)

Password Event Notifications

Notifications on Password Retrieval, Reset, Expiry, Ownership
Change etc

Password Policies & Compliance

Pre-built Password Policies of Varying Strengths
Provision for Creating Custom Policies
Enforcing Usage of Strong Passwords, Standard Password
Practices

Audit & Reports

Logging all access to passwords – 'who', 'what' and 'when' of
password access
Complete record of all password management operations
performed
Complete record of all user activities
Reports on Password Inventory, Policy Compliance, Password
Expiry etc
Sending Reports by Email
Generating Reports in PDF
Custom Reports

Backup, Disaster Recovery & High Availability

Scheduled Backup of Database
Live Backup through Data Replication
Tools for Disaster Recovery
Uninterrupted Access to Passwords (High Availability)
Active / Active
nTier

API
Rest API
SOAP API
Powershell
Credentials
Credential/ID
Credential Check in Check Out
Command Line Interface

Security Aspects
Penetration Test by Third-party Experts
Two-factor Authentication
Claims Aware Authentication
Radius
Duo
Okta
Ping
SecureAuth
Session Protection
Data Transmission
Data Storage
Provision to prevent cross-site scripting
Monitoring Failed Login Attempts
Termination of inactive user sessions
HSM

Tools & Utilities

Importing Passwords
Ticketing system Integration
Remedy
CA Service Desk
Jira
ServiceNow
Microsoft SCSM
HP Service Manager
OTRS
Direct Connection to Target Systems, Managed Devices,
Websites
Web Access to remote control
Remote Sessions (RDP, SSH & Telnet) from iPad & other Tablet
Devices
Password Generator
Password History
Caching

Privileged Session Management

Integrated with Bomgar Privileged Access
Integrated with Bomgar Remote Support
Privileged Session Recording & Playback
Session Shadowing / Dual Controls
Third Party / Vendor Access
Access Schedule specific /date time
Access schedule recurrance access over period of time
Keystoke Logging
RDP
SSH
Any Application
Command Filtering / Blacklisting - SSH
Block
Lock
Block and Lock
Terminate

Platform Support for Product Installation, Licensing

Supported Platforms for Server Installation

Licensing Model

Out of Box 3rd Party Integrations - Documented

Tenable
Sailpoint
Exabeam
FireEye
HP ArcSight
IBM Qradar
Kenna API Connector
LogRhythm Syslog
McAfee Syslog
NetIQ Sentinel
Palo Alto
STIX / TAXII Connector
SNOW Asset Import Connector
SNOW Export Connector
Splunk

Disconnected Account Management

Self Elevation
Vault Password Safe

Yes Yes
Yes Roadmap
No Roadmap
Yes Yes
Yes Yes
Yes Yes
No Yes
For credential injection only Yes

No Yes, web services and CLI

AES 256-bit Algorithm AES 256-bit

Yes Yes
Roadmap Yes
Yes Yes
No Yes
Yes Yes

AD & Windows local only Yes

Yes Yes
Yes Yes
No Yes
Yes Yes
No Yes
No Yes
No Yes
No Yes

AD & Windows local only Yes

AD & Windows local only Yes

Yes Yes
No Yes
No Yes
No Yes

Yes Requires 2nd appliance

Yes Yes
No Yes
No Yes

Yes Yes
No Yes
No Yes

No Yes
No Yes

No Yes
No Yes
No Yes
No Yes

No - Roadmap Yes
No- Roadmap Partial
No - Roadmap Partial
No Partial

Roadmap Yes

No Yes
Yes Yes
Roadmap Yes
AD & Windows local only Yes
No Yes

Yes Yes
Yes Yes
Yes Yes
Novell eDirectory any other LDAP
Yes
server
Yes Yes
Yes Yes
No No
Yes Yes

Import from AD Yes

Yes Yes
Yes yes
Yes yes

No Yes

No Yes
No Yes
No Yes

Yes Yes

Yes Yes
Yes Yes
No Yes
No Yes
No Yes
Yes Yes

Yes Yes
Yes yes
Yes Yes
Yes Yes
No Yes
no Yes

Yes Yes
No No
No No
Yes Yes
No Yes
Yes Yes
No Yes

Dell Secure Works ????

Yes Yes
No Yes
Yes Yes
Yes Yes
Yes Yes
Yes Yes
Yes yes
TLS TLS
HTTPS HTTPs
AES-256 AES-256
Yes Yes
Yes Yes
Yes Yes
Yes Yes

No Yes

Yes Yes
Yes Yes
Yes Yes
Yes Yes
No No
Yes No
No No
Yes Yes
HTML5 ASP
Yes No
No Yes
No ???
No Yes

Yes No
Yes No
Yes Yes
Yes Yes - Partial
Yes No
Yes Yes
Yes Yes

No Yes - with dissolvable agent

Yes Yes
No Yes

Yes Yes
No Yes
No Ye
No Yes

B Series Appliance Windows and MS SQL Server

Per Endpoint and Per User, tiered
Per endpoint, tiered discounts
discounts

No No
Yes Yes
No Yes
No Yes
No Yes
No Yes
No Yes
No Yes
No Yes
No Yes
No Yes
No Yes
No Yes
No Yes
No Yes

No No

No No