Cloud Vault | BeyondTrust

Manage and Distribute Access from the Cloud

Cloud Vault provides fast, essential vaulting capabilities for privileged accounts. Vault credentials for local or domain shared administrators, a user’s personal admin account, or even SSH keys.

A feature in the full BeyondTrust Privileged Remote Access solution, Cloud Vault is part of a complete Privileged Access Management platform. Together, managing privileged sessions, passwords, and vendor access becomes centralized and highly secure.

Discover and Vault Passwords

Discover, manage, and rotate privileged credentials for Windows platforms and seamlessly inject those credentials on-demand, whenever they are needed.

Enhanced Session Management

Control access to and from any system you manage, no matter the platform or environment, and eliminate inefficient manual workflows.

Meet Compliance Requirements

Create a comprehensive, automated audit trail of all user activity, complete with video recordings, logs, and session forensics.

Discover Your Unsecured Privileged Access for Free!

Download the BeyondTrust Discovery Tool for free and see how many vulnerable accounts are on your network.

Highlighted Features

Simplified Password Management

Cloud Vault fully manages Windows local and Active directory privileged accounts via discovery and automatic rotation. Safely store, retrieve and inject any username, password, or SSH key combination associated with users or shared admin accounts.

Credential Injection

Allow administrator accounts to access systems with just the click of a button. No more wasted time finding or tracking down credentials.

Privileged Session Management

End to end security for remote access sessions—from any location via any device—to any endpoint without revealing privileged passwords.

Seamless Control over Privileged Accounts and Access

Increase security and reduce the risk of cyberattacks by consolidating the tracking, approval, and auditing of privileged accounts by creating a single access pathway.

Audit & Compliance

Create audit trails and enable session forensics by capturing detailed session data in real-time or for post- session review. Easily create attestation reports to prove compliance.

Cloud & Virtualization Security

Manage privileged access to business assets that leverage web-based management consoles. This includes IaaS servers, hypervisor environments, and web-based configuration interfaces for core network infrastructure.

Privileged Remote Access and Cloud Vault, Explained

Cloud Vault eliminates the need for privileged users to remember or share credentials for the systems they need to access.

Requiring privileged users to know usernames and passwords for each endpoint is unrealistic. Cloud Vault stores those credentials securely, retrieves those credentials, and then injects them directly into a session. Each remote session produces detailed, searchable logs and video recordings.

No Compromise on Cloud Security

BeyondTrust Cloud offers more environmental segmentation than is available with traditional software-as-a-service (SaaS) deployments. Each BeyondTrust Cloud instance is a single-tenant virtual appliance. Your data remains totally separate from other cloud customers, and you control how your instance is used based on your requirements.

All BeyondTrust Cloud data centers in use have achieved ISO/IEC 27001 certification of its information security management systems. Additionally, all data centers have completed the following examinations: SOC II Type 1, SSAE 16, SOC 1 Type II, and SOC 2 Type II.

Superior Session Management

BeyondTrust enables centralized management of multiple remote protocols: RDP, SSH, Telnet, and our patented Jump Technology. Both the Access Console for privileged users and the endpoint application run seamlessly across operating systems: Windows, Mac, Linux, Network Devices, and others.

Each remote session produces detailed, searchable logs and video recordings. The solution deploys without weakening your perimeter or opening holes in firewalls. Plus, all session data is guarded by SSL encryption.