An independent assessment brings this award-winning, FedRAMP High-authorized PAM platform one step closer to obtaining authorization for the U.S. Department of Defense’s most sensitive unclassified workloads.
Chicago, November 10, 2026 /PRNewswire/ — Keeper Security, a zero trust and zero knowledge identity security platform, today announced that its Keeper ICAM and identity security platform for government has completed evaluation by a Third-Party Assessment Organization (3PAO), bringing the company one step closer to obtaining an Impact Level 5 (IL-5) Provisional Authorization from the U.S. Department of Defense (DoD).
The company stated that once granted an interim IL-5 authorization by an authorized official from the U.S. Defense Information Systems Agency (DISA), Keeper ICAM will be able to host and manage highly sensitive, unclassified Department of Defense information. This will extend Keeper’s FedRAMP® High certification, obtained in 2025, to the department’s most stringent unclassified environments and further solidify Keeper’s position as a trusted cybersecurity partner to the federal government.
Darren Guccione, CEO and co-founder of Keeper Security, said: “Protecting our nation’s warfighters requires identity security solutions built for the most demanding threat environments—without the friction of legacy systems. The U.S. Department of Defense is rapidly modernizing, and securing its systems now demands governance not only of human users but also of the exploding number of machine identities and AI agents. Keeper is proud to enable this critical advancement, bringing the U.S. Department of Defense closer to achieving the cutting-edge security capabilities it needs to accomplish its mission.”
The U.S. Defense Information Systems Agency defines IL-5 as the level applicable to unclassified National Security Systems (NSS) and national security information, including Controlled Unclassified Information (CUI) requiring a higher level of protection than IL-4. The assessment criteria for an interim authorization at IL-5 build upon the FedRAMP High baseline by adding Department of Defense-specific control requirements and NSS control requirements. This authorization also mandates strong environmental isolation and restricts privileged access to U.S. citizens.
The company stated that federal agencies, including NASA, the Department of Justice, and the Department of Energy, have already relied on Keeper to protect critical infrastructure and data. Building on its 2025 FedRAMP High certification, Keeper is advancing toward an interim authorization for DoD IL-5 to extend this momentum to the U.S. Department of Defense and defense contractors.
Keeper offers both on-premises and cloud-native deployment options to meet the needs of government, defense, operational technology (OT), and physically isolated environments. Self-Managed Keeper (SMK) is a self-hosted, container-based deployment that provides credential management, key management, and privileged access management within an organization’s own infrastructure, including on-premises data centers, private clouds, and fully air-gapped networks. The platform operates without connecting to Keeper’s cloud services, enabling organizations to maintain their own data boundaries and continue accessing credentials and privileged sessions even during internet or cloud service outages.
The company stated that Keeper’s original cloud-native platform was designed for rapid deployment and seamless management, offering the same unified identity security solution built on zero-trust, zero-knowledge security principles, accessible from any location or device. This unified approach enables federal agencies to protect every user, device, and machine identity within their environment, reducing the risk of data breaches, ransomware, and credential-based attacks.
Keeper states that, having achieved FedRAMP High certification and continuing to pursue the Department of Defense’s IL-5 interim authorization, the company is providing federal agencies with a seamless and highly secure way to manage privileged access at scale. Keeper ICAM, the government-focused identity security platform, is now available on the FedRAMP Marketplace. For more information on public sector solutions, visit KeeperSecurity.com/federal-government.
About Keeper Security
Keeper Security is a leading provider of zero-trust, zero-knowledge identity security solutions, trusted by millions of users and thousands of organizations worldwide. KeeperPAM® is Keeper’s privileged access management platform, which integrates password and passkey management, key management, privileged session management, and endpoint privilege management into a single cloud-native platform protected by quantum-resistant encryption. KeeperAI delivers real-time, AI-native threat detection during every privileged session. As AI agents become increasingly prevalent and identity emerges as the decisive attack surface, Keeper governs access for humans, machines, non-human identities, and AI agents as a unified control plane for enterprise-wide access, compliance, and visibility.
For more information, visit: KeeperSecurity.com
Media contact: Katherine Benfield, ICR for Keeper Security, [email protected]