BeyondTrust Expands Automation across the Cybersecurity Mesh with Latest Release of Password Safe and BeyondInsight

With the release of Password Safe 22.2 and BeyondInsight 22.2, BeyondTrust continues to expand automation across the cybersecurity mesh and further the management of privileged identities. Password Safe 22.2 introduces features that will help introduce a simplified and cost-effective journey to zero-trust for customers, as well improve the administration of discovery/ onboarding, dedicated accounts, and powerful security improvements with propagation targets and PS automate.

What’s New with BeyondInsight and Password Safe 22.2?

BeyondTrust Password Safe 22.2 new features and enhancements include:

• Disconnected Accounts (New Feature!) enable management of intermittently connected systems, laying the groundwork for Zero Trust with Password Safe.
• Propagation Targets (New Feature!) enable service account management for IT automation use cases.
• PS Automate (Enhancement) provides an enhanced ability to manage sessions for privileged credentials of websites and applications.
• Dedicated Accounts (Improvement) make it easier to manage privileged account ownership of unique attributes.
• Streamlined Administration enables the granular discovery of new assets, as well as the simplified Onboarding of new assets into Password Safe.

BeyondInsight 22.2 new features and enhancements include:

• Discovery Scanning (enhancement) allows for the consolidation of discovery scanning into two scan types: Discover Local Accounts (enumerating users only) and Detail Discovery.

Highlights – Password Safe 22.2

Read on for more information on the new features and enhancements delivered in this latest release.

Managing Disconnected Accounts and Moving Towards Zero Trust

Password Safe Cloud can now help organizations that have systems that are disconnected or intermittently connected to change administrative passwords on offline systems automatically.

Systems that do not regularly connect to the network still need automatic and regular changes to the credentials on powerful administrator and root accounts. Without this capability, organizations cannot meet regulatory compliance mandates or protect these parts of their network from cyberattacks, including pass-the-hash attacks.

With the latest updates, Password Safe 22.2 can help organizations quickly move to enforce a zero-trust model on the same disconnected or intermittently connected accounts, mitigating pass-the-hash attacks and meeting regulatory compliance requirements. Further, utilizing Endpoint Privilege Management (EPM), least-privilege and just-in-time policies—key aspects of a zero trust framework—can be applied.

Propagation Targets

The new propagation target feature allows teams to manage accounts beyond the assets themselves (may be used for various service types) with the option of executing a script on a system after a credential rotation. This improves an organization’s security posture by enabling deeper integrations into environments where it is necessary to update a reference to a credential, including for DevSecOps and security teams, and in further services or systems by supporting an integrated privileged security posture in SaaS, Iaas or cloud environments.

Discovery and Onboarding

With the 22.2 release, the discovery capability has been improved with simplified options, configurable details, better results visibility, and the ability to easily re-run jobs. Further improvements to onboarding have been made to streamline account/asset workflows and account additions without the need for manual input. BeyondTrust’s continued focus on simplifying the administration of Password Safe through improved workflows and UI/UX is a key driver behind the creation of new discovery and onboarding features that can better support security teams.

PS Automate

Password Safe 22.2 streamlines and automates the process of starting new web sessions and allowing users to use privileged credentials for websites and applications, significantly increasing the usability and operability of features that significantly contribute to a successful and compliant cybersecurity infrastructure. This feature now supports Edge, Chrome, and Firefox.

Dedicated Account Mapping

Password Safe 22.2 introduces dedicated account mapping to further simplify the process of mapping privileged account ownership based on unique attributes, such as employeeID or email. This enables automation of the process of managing users with IDM solutions, like Sailpoint

Highlights – BeyondInsight 22.2

Below are the highlights of the new features and enhancements from BeyondInsight 22.2.

Discovery Scanning

BeyondInsight 22.2 consolidates discovery scanning into two scan types: Discover Local Accounts (enumerating users only) and Detail Discovery, which has customizable scan options. This addition also introduces a new “Run Scan Now” option for completed and scheduled scans to allow you to quickly re-run a scan at any time.

These new options greatly improve flexibility and simplify administration of BeyondInsight through improved workflows and UI/UX to supporting security teams in the maintenance of better and more compliant privileged security postures.

About BeyondInsight and Password Safe

BeyondInsight is BeyondTrust's centralized reporting and analytics platform that provides IT and business leaders visibility into the privilege-related risks facing their organizations.

BeyondTrust Password Safe combines privileged password and session management to protect privileged credentials and safeguard access to critical assets. The product leverages a robust, distributed network discovery engine to scan, identify, and profile all assets. This categorization uniquely allows automated onboarding and the ability for access policies to self-adjust according to environmental changes.

Click here to get started with BeyondInsight and Password Safe 22.2.