Close
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cloud
    • Cloud
    • Cybersecurity

    CyberArk Brings Privileged Session Manager to the Cloud

    By
    Sean Michael Kerner
    -
    October 15, 2018
    Share
    Facebook
    Twitter
    Linkedin
      CyberArk

      CyberArk announced its new Privileged Session Manager for Cloud offering on Oct. 15, providing its customers with capabilities for managing and monitoring privileged cloud access.

      Privileged Session Manager for Cloud has its roots in technology that CyberArk gained via the acquisition of cloud security provider Vaultive on March 12. What CyberArk has done is combine its privileged account security capabilities with Vaultive’s cloud access insights to create a new product.

      “CyberArk Privileged Session Manager for Cloud is a new offering that deepens and extends capabilities of the CyberArk Privileged Session Manager specifically to privileged business users and cloud administrators,” Ben Matzkel, Vaultive founder and CTO and currently R&D group manager at CyberArk, told eWEEK. “We’re introducing a brand new way to manage, isolate and control those users’ access to cloud platforms and web applications—a way that allows us to improve security for our customers without changing the way these users work.”

      Vaultive’s core product prior to the acquisition fit into the category known as Cloud Access Security Broker (CASB). CASB is a wide category that includes many different security solutions including discovery and visibility, data protection and access control, according to Matzkel. 

      “Vaultive’s approach to CASB was unique—we were focusing more on encryption of sensitive data assets and less on traditional CASB discovery and visibility controls,” he said. “Our technology was an enterprise-grade multipurpose platform that understood cloud applications and how they work.”

      Matzkel added that there isn’t any direct link to a CASB solution with the new CyberArk Privileged Session Manager for Cloud offering. He said CyberArk took the Vaultive CASB platform and leveraged it together with the CyberArk Privileged Access Security Solution to provide a more secure and usable solution for modern web applications.

      How It Works

      CyberArk Privileged Session Manager for Cloud is part of the core CyberArk Privileged Access Security Solution. Additionally, Privileged Session Manager for Cloud is fully integrated with the CyberArk Digital Vault to ensure secure connections without exposing credentials to users or their endpoints. 

      “The monitoring and audit trail created by the Privileged Session Manager for Cloud is fed into the unified CyberArk Privileged Access Security Solution Web interface, providing the deepest visibility and holistic view across the customer’s entire environment,” Matzkel said. “CyberArk’s risk detection capabilities are extended to flag risks within user sessions monitored by Privileged Session Manager for Cloud.”

      From an authentication perspective, Matzkel explained that CyberArk Privileged Session Manager for Cloud can both work with existing SAML authentication and provide alternative authentication and authorization mechanisms that make use of CyberArk’s Vaulting technology. He added that IaaS/PaaS/SaaS administrative consoles and application credentials can be fully managed by CyberArk, enforcing access control and activity auditing policies to authorized users and groups in addition to the ones introduced by cloud provider platforms.

      Isolated Privileged Sessions

      One of the capabilities of CyberArk Privileged Session Manager for Cloud is that it can enable isolated privileged sessions. Matzkel said that when an administrative, privileged user is accessing the target application via CyberArk Privileged Session Manager for Cloud, they never know the actual administrative password. 

      “The password is securely stored in a CyberArk Vault, and only after the administrator has authenticated using their personal credentials [do] we embed the correct password and provide it to the target application, without the user ever being exposed to it,” Matzkel said. “During the session, activity is monitored and alerts may be triggered, and because the real credentials are never exposed, privileged access cannot take place without oversight.”

      The session monitoring is further enhanced with CyberArk’s privileged session risk scoring capability. Matzkel said that the risk scoring is enabled by integration with CyberArk’s privileged threat analytics technology to enable organizations to identify high-risk privileged sessions in real time. 

      “This capability is enabled through a combination of powerful statistical, deterministic algorithms, machine learning and behavioral analytics,” he said. “Customizable risk scoring can be assigned to privileged sessions based on predefined, high-risk commands and activities.”

      Looking forward, Matzkel said that the plan is to continue to build out the technology to support customers’ digital transformation strategies. 

      “This could include support for additional web-based business applications and enhanced access controls for sensitive user activities, and the ability to enforce user privileges and detect risks at a much more granular level beyond what cloud platform and web application providers are able to do today,” he said.

      Sean Michael Kerner is a senior editor at eWEEK and InternetNews.com. Follow him on Twitter @TechJournalist.

      Sean Michael Kerner
      Sean Michael Kerner is an Internet consultant, strategist, and contributor to several leading IT business web sites.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.

      MOST POPULAR ARTICLES

      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Applications

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      IT Management

      Intuit’s Nhung Ho on AI for the...

      James Maguire - May 13, 2022 0
      I spoke with Nhung Ho, Vice President of AI at Intuit, about adoption of AI in the small and medium-sized business market, and how...
      Read more
      Applications

      Kyndryl’s Nicolas Sekkaki on Handling AI and...

      James Maguire - November 9, 2022 0
      I spoke with Nicolas Sekkaki, Group Practice Leader for Applications, Data and AI at Kyndryl, about how companies can boost both their AI and...
      Read more
      Cloud

      IGEL CEO Jed Ayres on Edge and...

      James Maguire - June 14, 2022 0
      I spoke with Jed Ayres, CEO of IGEL, about the endpoint sector, and an open source OS for the cloud; we also spoke about...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×