Keeper Security has launched a new capability designed to close a privileged access gap that leaves cloud identity platforms across Asia Pacific exposed to attackers long after legitimate work is done.

Keeper Security, a zero-trust and zero-knowledge identity security and privileged access management (PAM) platform, has announced Keeper Privileged Cloud, a capability within its KeeperPAM® platform that launched earlier this year. The feature delivers Just-In-Time (JIT) access and zero standing privilege across cloud identity providers including AWS IAM, Azure Entra ID, Google Cloud Platform, Okta and Active Directory.

APAC’s cloud identity blind spot

According to Keeper research, 55% of organisations use identity providers for everyday logins, but only 36% have PAM deployed — a gap the company says leaves privileged credentials sitting in cloud platforms long after they are needed. The research further found that 64% of organisations lack fully consolidated privileged access governance, and 43% still allow direct application logins that bypass their identity provider entirely.

Keeper Privileged Cloud is designed to close that gap by extending identity provider protection directly to high-risk admin sessions, automatically revoking access once a session ends.

How the just-in-time access model works

When a user requests elevated access and it is approved, Keeper Privileged Cloud applies a pre-configured access level — such as a specific role or permission set — and grants temporary group membership or role assignment in the target identity platform, time-bound to the approved window. The user then launches the target console or application from the Keeper Vault through Remote Browser Isolation, with every action recorded and analysed in real time by KeeperAI. Once the window expires, elevated access is removed automatically, with no standing accounts, shared credentials or manual cleanup required.

The company said the model also extends governance to non-human identities and AI agents, with every identity — human or machine — receiving only the access a task requires, for the duration of that task, with a full audit record.

“The challenge with standing privileges is that removing them requires coordination across multiple systems that were never designed to work together. Because Keeper Privileged Cloud was built into KeeperPAM from the ground up, rather than layered on afterward, access governance, credential protection and audit all live in the same zero-knowledge architecture,” said Craig Lurey, CTO and Co-founder of Keeper Security.

Consolidating access, credentials and audit

Keeper positions the launch as a response to a common problem: organisations piecing together JIT access from separate identity providers, PAM tools and cloud providers, resulting in fragmented audit trails and no single point of enforcement. Keeper Privileged Cloud consolidates password management, secrets management, session management and endpoint privilege management into one platform.

Keeper Privileged Cloud is available now as part of existing KeeperPAM licences, with existing customers able to enable the feature through their customer success team.